Correct. You can't send traffic with tcpreplay to an application running on the same box because the IP stack of the box never receives the packet(s).
On Wed, Oct 17, 2012 at 5:07 PM, Hei Chan <structurech...@yahoo.com> wrote: > Hi, > > I used the following to capture the traffic on box A: > tcpdump -i bond0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port 10005' > -w /tmp/11.2.pcap > > Then, I used tcpwrite to change the MAC addresses on box B: > tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[my MAC > address for eth0] --enet-dmac=[my MAC address for eth0] > > Then, I ran my application to join 224.0.26.5:10005 on box B, and > tcpreplay-ed the converted pcap file: > $ sudo tcpreplay -i eth0 -t 11.2.pcap > sending out eth0 > processing file: 11.2.pcap > Actual: 3364 packets (311134 bytes) sent in 0.07 seconds. Rated: > 4444771.5 bps, 33.91 Mbps, 48057.14 pps > Statistics for network device: eth0 > Attempted packets: 3364 > Successful packets: 3364 > Failed packets: 0 > Retried packets (ENOBUFS): 0 > Retried packets (EAGAIN): 0 > > My application didn't see the traffic at all, but tcpdump captured all > packets (on box B as well): > $ sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port > 10005' -w /tmp/13.pcap > tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 > bytes > ^C3364 packets captured > 3364 packets received by filter > 0 packets dropped by kernel > > Here is my tcpreply version: > $ tcpreplay -V > tcpreplay version: 3.4.4 (build 2450) > Copyright 2000-2010 by Aaron Turner <aturner at synfin dot net> > Cache file supported: 04 > Not compiled with libdnet. > Compiled against libpcap: 1.0.0 > 64 bit packet counters: enabled > Verbose printing via tcpdump: enabled > Packet editing: disabled > Fragroute engine: disabled > Injection method: PF_PACKET send() > > I read this post: > http://sourceforge.net/mailarchive/forum.php?thread_name=CAMQJc%3D8Qan0VSH0dxWxoU_P%2BppYWhBjtw4jYvK7eAEqUy3hd4Q%40mail.gmail.com&forum_name=tcpreplay-users > > It sounds like I can't tcpreplay the pcap file back to the same box as the > application that receives the replay traffic through multicast? > > Any input is appreciated. > > Thanks in advance. > > > Cheers, > Hei > > > ------------------------------------------------------------------------------ > Everyone hates slow websites. So do we. > Make your web apps faster with AppDynamics > Download AppDynamics Lite for free today: > http://p.sf.net/sfu/appdyn_sfd2d_oct > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
