Hi Aaron, thanks for the rapid reply. Answer and one more question below.
John Lumby
Aaron Turner wrote:
> From: synfina...@gmail.com
> Date: Thu, 10 Nov 2011 13:26:42 -0800
> To: tcpreplay-users@lists.sourceforge.net
> Subject: Re: [Tcpreplay-users] (no subject)
>
> On Thu, Nov 10, 2011 at 10:41 AM, John Lumby <johnlu...@hotmail.com> wrote:
> > I have a question regarding how to split a pcap based on direction in order
> > to replay only one of the directions.
>
> There are two quick ways to do this:
>
> 1. specify another interface which isn't being used for the test for --intf1
Yes, specifying an unused interface works
>
> 2. when you run tcpprep, use the --exclude option to "drop" all
> traffic from the server and specify the same interface twice.
> Something like tcpprep --exclude=S:5.4.3.2/32 would drop all traffic
> from 5.4.3.2 and then use tcpreplay --intf1=vibr0 --intf2=vibr0 ...
>
> --
> http://synfin.net/ Twitter: @synfinatic
> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix &
> Windows
I *think* I know why no traffic is being received at the other end -
These are bootpc (dhcp) requests and I guess the server must be on the same
LAN or VLAN as the client?
Which it wasn't if I run the tcpreplay from the pseudo-client machine via an
un-tagged interface such as virbr0.
So I am wondering if I can make it use a VLAN-tagged interface instead, and
tag the interface on the server the same tag.
I am kind of hoping this should work since tcprewrite supports adding VLAN
tag into the e-header.
I tried it and addded VLAN id 172 with tcprewrite (ok),
set up a vlan-tagged interface virbr0.172 tagged with VLAN id 172 (also ok),
then tried tcpreplay to virbr0.172 - but no luck. It says
Fatal Error: Invalid interface name/alias: virbr0.172
In fact it won't even let me use the buddy virbr0 interface either - it
has disappeared from the listnics list.
My question is, does tcpreplay support sending out on a VLAN-tagged
interface?
Or is there some other way I can make the client packets go to the server?
------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
