On Thu, Dec 15, 2011 at 9:18 AM, Prosiac Akin <cramped_ga...@yahoo.com> wrote: > Hello there, > > I am not dealing with Vlans. Its the simple network with LANS (same network > group). For my case, i don't want to send files through 2 interfaces, > one is enough and for my currrent use, one directional traffic is also OK. > FIrst i need to check one directional and then i will check bidirectional. > But even fror one directional traffic, what command should i use?? > > sudo tcprewrite --endpoints=192.168.234.139:192.168.15.215 > --cachefile=dhcp.cache --infile=dhcp.pcap --outfile=dhcp.pcap > --skipbroadcast ?? > without the one with red marks > > or?? > > tcprewrite --enet-dmac=00:55:22:AF:C6:37 --enet-smac=00:44:66:FC:29:AF > --infile=input.pcap --outfile=output.pcap ???
Assuming your pcap file has bi-directional traffic, both client & server, then you'll need to use the first one. If your pcap only has the traffic you want to send, then the latter one will work. Also, make sure the infile and outfile are different! One good trick is to use tcpdump to remove any traffic you don't want to send: tcpdump -r dhcp.pcap -w new-dhcp.pcap -s0 <bpf filter to match traffic you want to send> and then you won't need a cache file. > > > > ________________________________ > From: Ali Gouta <ali.go...@gmail.com> > To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net> > Sent: Thursday, December 15, 2011 6:11 PM > Subject: Re: [Tcpreplay-users] sending pcap files from one computer to > another using tcpreplay > > You need at first to change mac adresses of the trace or pcap file you are > replaying (use tcprewrite) to the source and destination of your cards > (ifconfig to know them). > Chcek if you are dealing with Vlans !!! > Cache file you will need if you want to seperate downlink from the uplink > :means that you send your pcap file from 2 interfaces not only one !!! > Your use case: sending the trace file from 1 pc to another means you won't > need the cache file( or you can use it but in this case you will send only > one direction not both) > > Good luck > On Thu, Dec 15, 2011 at 5:53 PM, Prosiac Akin <cramped_ga...@yahoo.com> > wrote: > > hello all, > > i am trying to send the pcap file from one pc to another > while going through the tcpreplay website, i found > > tcprewrite --endpoints=10.10.1.1:10.10.1.2 --cachefile=input.cache > --infile=input.pcap --outfile=output.pcap --skipbroadcast > > does this endpoints means (two computers)??? > > If it is for the two pcs, i tried to issue that command > sudo tcprewrite --endpoints=192.168.234.139:192.168.15.215 > --cachefile=dhcp.cache --infile=dhcp.pcap --outfile=dhcp.pcap > --skipbroadcast > > where 192.168.234.139 is the ip of the computer which is sending the pcap > file and 192.168.15.215 is the ip of the computer which i am destined to. > > But i got this error > Fatal Error: unable to open dhcp.cache:No such file or directory > > I am not aware how to create that cachefile for this process. and i don't > know whether i am following the right process or not. > > Could you please help/suggest the method of doing so.. > > > ------------------------------------------------------------------------------ > 10 Tips for Better Server Consolidation > Server virtualization is being driven by many needs. > But none more important than the need to reduce IT complexity > while improving strategic productivity. Learn More! > http://www.accelacomm.com/jaw/sdnl/114/51507609/ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > > ------------------------------------------------------------------------------ > 10 Tips for Better Server Consolidation > Server virtualization is being driven by many needs. > But none more important than the need to reduce IT complexity > while improving strategic productivity. Learn More! > http://www.accelacomm.com/jaw/sdnl/114/51507609/ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > ------------------------------------------------------------------------------ > 10 Tips for Better Server Consolidation > Server virtualization is being driven by many needs. > But none more important than the need to reduce IT complexity > while improving strategic productivity. Learn More! > http://www.accelacomm.com/jaw/sdnl/114/51507609/ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ 10 Tips for Better Server Consolidation Server virtualization is being driven by many needs. But none more important than the need to reduce IT complexity while improving strategic productivity. Learn More! http://www.accelacomm.com/jaw/sdnl/114/51507609/ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
