On Mon, Oct 22, 2012 at 11:53 PM, Hei Chan <structurech...@yahoo.com> wrote: > Figured...need a special MAC if mcasting on the same LAN. > > Anyway, I notice that tcprewrite doesn't automatically update the checksum > when the src/dst IP has been rewritten. Is it a feature?
What version are you using? Per the man page for the --fixcsum option: Causes each IPv4/v6 packet to have their checksums recalcualted and fixed. Automatically enabled for packets modified with --seed, --pnat, --endpoints or --fixlen. > ________________________________ > From: Aaron Turner <synfina...@gmail.com> > To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net> > Sent: Thursday, October 18, 2012 2:12 PM > > Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from multicast > source) > > So between Box A & B is a router? Sounds like the router isn't > forwarding the packets or you have an issue with IGMP (just taking > some educated guesses). > > Best thing to do is validate the packets leaving Box B are something > that your router will forward. There's nothing that tcpreplay does to > alter or change the packets that are stored in the pcap (11.out2.pcap > in this case). Garbage in, garbage out. > > On Thu, Oct 18, 2012 at 1:34 PM, Hei Chan <structurech...@yahoo.com> wrote: >> Thanks for your speedy reply. >> >> >> Today, I tried again with the following setup: >> - Box B runs: >> sudo tcpreplay -i eth0 -t 11.out.2.pcap >> - An application on box A (connecting through a router) subscribes to >> 224.0.26.5:10005. >> - Box A at the same time runs: >> sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port >> 10005' -w /tmp/13.pcap >> >> Neither the tcpdump nor the application sees any traffic. >> >> >> I have already used tcprewrite: >> tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[box B's >> MAC address] --enet-dmac=[router's MAC address; the router sits between box >> A and B] --srcipmap=0.0.0.0/0:[box B's IP]/32 >> >> >> Any suggestion? >> >> Thanks in advance. >> >> >> Cheers, >> Hei >> >> >> ________________________________ >> From: Aaron Turner <synfina...@gmail.com> >> To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net> >> Sent: Wednesday, October 17, 2012 5:48 PM >> Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from >> multicast source) >> >> Correct. You can't send traffic with tcpreplay to an application >> running on the same box because the IP stack of the box never receives >> the packet(s). >> >> On Wed, Oct 17, 2012 at 5:07 PM, Hei Chan <structurech...@yahoo.com> >> wrote: >>> Hi, >>> >>> I used the following to capture the traffic on box A: >>> tcpdump -i bond0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port >>> 10005' >>> -w /tmp/11.2.pcap >>> >>> Then, I used tcpwrite to change the MAC addresses on box B: >>> tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[my MAC >>> address for eth0] --enet-dmac=[my MAC address for eth0] >>> >>> Then, I ran my application to join 224.0.26.5:10005 on box B, and >>> tcpreplay-ed the converted pcap file: >>> $ sudo tcpreplay -i eth0 -t 11.2.pcap >>> sending out eth0 >>> processing file: 11.2.pcap >>> Actual: 3364 packets (311134 bytes) sent in 0.07 seconds. Rated: >>> 4444771.5 bps, 33.91 Mbps, 48057.14 pps >>> Statistics for network device: eth0 >>> Attempted packets: 3364 >>> Successful packets: 3364 >>> Failed packets: 0 >>> Retried packets (ENOBUFS): 0 >>> Retried packets (EAGAIN): 0 >>> >>> My application didn't see the traffic at all, but tcpdump captured all >>> packets (on box B as well): >>> $ sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port >>> 10005' -w /tmp/13.pcap >>> tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size >>> 65535 >>> bytes >>> ^C3364 packets captured >>> 3364 packets received by filter >>> 0 packets dropped by kernel >>> >>> Here is my tcpreply version: >>> $ tcpreplay -V >>> tcpreplay version: 3.4.4 (build 2450) >>> Copyright 2000-2010 by Aaron Turner <aturner at synfin dot net> >>> Cache file supported: 04 >>> Not compiled with libdnet. >>> Compiled against libpcap: 1.0.0 >>> 64 bit packet counters: enabled >>> Verbose printing via tcpdump: enabled >>> Packet editing: disabled >>> Fragroute engine: disabled >>> Injection method: PF_PACKET send() >>> >>> I read this post: >>> >>> http://sourceforge.net/mailarchive/forum.php?thread_name=CAMQJc%3D8Qan0VSH0dxWxoU_P%2BppYWhBjtw4jYvK7eAEqUy3hd4Q%40mail.gmail.com&forum_name=tcpreplay-users >>> >>> It sounds like I can't tcpreplay the pcap file back to the same box as >>> the >>> application that receives the replay traffic through multicast? >>> >>> Any input is appreciated. >>> >>> Thanks in advance. >>> >>> >>> Cheers, >>> Hei >>> >>> >>> >>> ------------------------------------------------------------------------------ >>> Everyone hates slow websites. So do we. >>> Make your web apps faster with AppDynamics >>> Download AppDynamics Lite for free today: >>> http://p.sf.net/sfu/appdyn_sfd2d_oct >>> _______________________________________________ >>> Tcpreplay-users mailing list >>> Tcpreplay-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >> >> >> >> -- >> Aaron Turner >> http://synfin.net/ Twitter: @synfinatic >> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & >> Windows >> Those who would give up essential Liberty, to purchase a little temporary >> Safety, deserve neither Liberty nor Safety. >> -- Benjamin Franklin >> "carpe diem quam minimum credula postero" >> >> >> ------------------------------------------------------------------------------ >> Everyone hates slow websites. So do we. >> Make your web apps faster with AppDynamics >> Download AppDynamics Lite for free today: >> http://p.sf.net/sfu/appdyn_sfd2d_oct >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcpreplay-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >> >> >> ------------------------------------------------------------------------------ >> Everyone hates slow websites. So do we. >> Make your web apps faster with AppDynamics >> Download AppDynamics Lite for free today: >> http://p.sf.net/sfu/appdyn_sfd2d_oct >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcpreplay-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > > -- > Aaron Turner > http://synfin.net/ Twitter: @synfinatic > http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & > Windows > Those who would give up essential Liberty, to purchase a little temporary > Safety, deserve neither Liberty nor Safety. > -- Benjamin Franklin > "carpe diem quam minimum credula postero" > > ------------------------------------------------------------------------------ > Everyone hates slow websites. So do we. > Make your web apps faster with AppDynamics > Download AppDynamics Lite for free today: > http://p.sf.net/sfu/appdyn_sfd2d_oct > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > > ------------------------------------------------------------------------------ > Everyone hates slow websites. So do we. > Make your web apps faster with AppDynamics > Download AppDynamics Lite for free today: > http://p.sf.net/sfu/appdyn_sfd2d_oct > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
