Hi,
Yes we need to change both IP as well as Mac address when they r connected
to same LAN.
On Tue, Oct 23, 2012 at 8:53 AM, Hei Chan <structurech...@yahoo.com> wrote:
> Figured...need a special MAC if mcasting on the same LAN.
>
> Anyway, I notice that tcprewrite doesn't automatically update the checksum
> when the src/dst IP has been rewritten. Is it a feature?
>
> ------------------------------
> *From:* Aaron Turner <synfina...@gmail.com>
> *To:* Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net>
> *Sent:* Thursday, October 18, 2012 2:12 PM
>
> *Subject:* Re: [Tcpreplay-users] Trying to replay a pcap file (from
> multicast source)
>
> So between Box A & B is a router? Sounds like the router isn't
> forwarding the packets or you have an issue with IGMP (just taking
> some educated guesses).
>
> Best thing to do is validate the packets leaving Box B are something
> that your router will forward. There's nothing that tcpreplay does to
> alter or change the packets that are stored in the pcap (11.out2.pcap
> in this case). Garbage in, garbage out.
>
> On Thu, Oct 18, 2012 at 1:34 PM, Hei Chan <structurech...@yahoo.com>
> wrote:
> > Thanks for your speedy reply.
> >
> >
> > Today, I tried again with the following setup:
> > - Box B runs:
> > sudo tcpreplay -i eth0 -t 11.out.2.pcap
> > - An application on box A (connecting through a router) subscribes to
> 224.0.26.5:10005.
> > - Box A at the same time runs:
> > sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port
> 10005' -w /tmp/13.pcap
> >
> > Neither the tcpdump nor the application sees any traffic.
> >
> >
> > I have already used tcprewrite:
> > tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[box
> B's MAC address] --enet-dmac=[router's MAC address; the router sits between
> box A and B] --srcipmap=0.0.0.0/0:[box <http://0.0.0.0/0:%5Bbox> B's
> IP]/32
> >
> >
> > Any suggestion?
> >
> > Thanks in advance.
> >
> >
> > Cheers,
> > Hei
> >
> >
> > ________________________________
> > From: Aaron Turner <synfina...@gmail.com>
> > To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net>
> > Sent: Wednesday, October 17, 2012 5:48 PM
> > Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from
> multicast source)
> >
> > Correct. You can't send traffic with tcpreplay to an application
> > running on the same box because the IP stack of the box never receives
> > the packet(s).
> >
> > On Wed, Oct 17, 2012 at 5:07 PM, Hei Chan <structurech...@yahoo.com>
> wrote:
> >> Hi,
> >>
> >> I used the following to capture the traffic on box A:
> >> tcpdump -i bond0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port
> 10005'
> >> -w /tmp/11.2.pcap
> >>
> >> Then, I used tcpwrite to change the MAC addresses on box B:
> >> tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[my
> MAC
> >> address for eth0] --enet-dmac=[my MAC address for eth0]
> >>
> >> Then, I ran my application to join 224.0.26.5:10005 on box B, and
> >> tcpreplay-ed the converted pcap file:
> >> $ sudo tcpreplay -i eth0 -t 11.2.pcap
> >> sending out eth0
> >> processing file: 11.2.pcap
> >> Actual: 3364 packets (311134 bytes) sent in 0.07 seconds. Rated:
> >> 4444771.5 bps, 33.91 Mbps, 48057.14 pps
> >> Statistics for network device: eth0
> >> Attempted packets: 3364
> >> Successful packets: 3364
> >> Failed packets: 0
> >> Retried packets (ENOBUFS): 0
> >> Retried packets (EAGAIN): 0
> >>
> >> My application didn't see the traffic at all, but tcpdump captured all
> >> packets (on box B as well):
> >> $ sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and
> 'port
> >> 10005' -w /tmp/13.pcap
> >> tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size
> 65535
> >> bytes
> >> ^C3364 packets captured
> >> 3364 packets received by filter
> >> 0 packets dropped by kernel
> >>
> >> Here is my tcpreply version:
> >> $ tcpreplay -V
> >> tcpreplay version: 3.4.4 (build 2450)
> >> Copyright 2000-2010 by Aaron Turner <aturner at synfin dot net>
> >> Cache file supported: 04
> >> Not compiled with libdnet.
> >> Compiled against libpcap: 1.0.0
> >> 64 bit packet counters: enabled
> >> Verbose printing via tcpdump: enabled
> >> Packet editing: disabled
> >> Fragroute engine: disabled
> >> Injection method: PF_PACKET send()
> >>
> >> I read this post:
> >>
> http://sourceforge.net/mailarchive/forum.php?thread_name=CAMQJc%3D8Qan0VSH0dxWxoU_P%2BppYWhBjtw4jYvK7eAEqUy3hd4Q%40mail.gmail.com&forum_name=tcpreplay-users
> >>
> >> It sounds like I can't tcpreplay the pcap file back to the same box as
> the
> >> application that receives the replay traffic through multicast?
> >>
> >> Any input is appreciated.
> >>
> >> Thanks in advance.
> >>
> >>
> >> Cheers,
> >> Hei
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >> Everyone hates slow websites. So do we.
> >> Make your web apps faster with AppDynamics
> >> Download AppDynamics Lite for free today:
> >> http://p.sf.net/sfu/appdyn_sfd2d_oct
> >> _______________________________________________
> >> Tcpreplay-users mailing list
> >> Tcpreplay-users@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
> >
> >
> >
> > --
> > Aaron Turner
> > http://synfin.net/ Twitter: @synfinatic
> > http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix &
> Windows
> > Those who would give up essential Liberty, to purchase a little temporary
> > Safety, deserve neither Liberty nor Safety.
> > -- Benjamin Franklin
> > "carpe diem quam minimum credula postero"
> >
> >
> ------------------------------------------------------------------------------
> > Everyone hates slow websites. So do we.
> > Make your web apps faster with AppDynamics
> > Download AppDynamics Lite for free today:
> > http://p.sf.net/sfu/appdyn_sfd2d_oct
> > _______________________________________________
> > Tcpreplay-users mailing list
> > Tcpreplay-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
> >
> >
> ------------------------------------------------------------------------------
> > Everyone hates slow websites. So do we.
> > Make your web apps faster with AppDynamics
> > Download AppDynamics Lite for free today:
> > http://p.sf.net/sfu/appdyn_sfd2d_oct
> > _______________________________________________
> > Tcpreplay-users mailing list
> > Tcpreplay-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
>
>
> --
> Aaron Turner
> http://synfin.net/ Twitter: @synfinatic
> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix &
> Windows
> Those who would give up essential Liberty, to purchase a little temporary
> Safety, deserve neither Liberty nor Safety.
> -- Benjamin Franklin
> "carpe diem quam minimum credula postero"
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_sfd2d_oct
> _______________________________________________
> Tcpreplay-users mailing list
> Tcpreplay-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_sfd2d_oct
> _______________________________________________
> Tcpreplay-users mailing list
> Tcpreplay-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
--
Regards,
Ravi
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
