Mostly I documented it to be clear. I probably should make sure all the IP rewrite routines automatically enable checksum recalculation by default. You're using --srcipmap ?
On Tue, Oct 23, 2012 at 10:02 AM, Hei Chan <structurech...@yahoo.com> wrote: > tcpreplay version: 3.4.4 (build 2450) > > seems like you don't want to automatically update the checksum in some cases > on purpose then. > > thanks :) > > ________________________________ > From: Aaron Turner <synfina...@gmail.com> > To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net> > Sent: Tuesday, October 23, 2012 8:45 AM > > Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from multicast > source) > > On Mon, Oct 22, 2012 at 11:53 PM, Hei Chan <structurech...@yahoo.com> wrote: >> Figured...need a special MAC if mcasting on the same LAN. >> >> Anyway, I notice that tcprewrite doesn't automatically update the checksum >> when the src/dst IP has been rewritten. Is it a feature? > > What version are you using? Per the man page for the --fixcsum option: > > Causes each IPv4/v6 packet to have their checksums recalcualted and > fixed. Automatically enabled for > packets modified with --seed, --pnat, --endpoints or --fixlen. > > > >> ________________________________ >> From: Aaron Turner <synfina...@gmail.com> >> To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net> >> Sent: Thursday, October 18, 2012 2:12 PM >> >> Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from >> multicast >> source) >> >> So between Box A & B is a router? Sounds like the router isn't >> forwarding the packets or you have an issue with IGMP (just taking >> some educated guesses). >> >> Best thing to do is validate the packets leaving Box B are something >> that your router will forward. There's nothing that tcpreplay does to >> alter or change the packets that are stored in the pcap (11.out2.pcap >> in this case). Garbage in, garbage out. >> >> On Thu, Oct 18, 2012 at 1:34 PM, Hei Chan <structurech...@yahoo.com> >> wrote: >>> Thanks for your speedy reply. >>> >>> >>> Today, I tried again with the following setup: >>> - Box B runs: >>> sudo tcpreplay -i eth0 -t 11.out.2.pcap >>> - An application on box A (connecting through a router) subscribes to >>> 224.0.26.5:10005. >>> - Box A at the same time runs: >>> sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port >>> 10005' -w /tmp/13.pcap >>> >>> Neither the tcpdump nor the application sees any traffic. >>> >>> >>> I have already used tcprewrite: >>> tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[box >>> B's >>> MAC address] --enet-dmac=[router's MAC address; the router sits between >>> box >>> A and B] --srcipmap=0.0.0.0/0:[box B's IP]/32 >>> >>> >>> Any suggestion? >>> >>> Thanks in advance. >>> >>> >>> Cheers, >>> Hei >>> >>> >>> ________________________________ >>> From: Aaron Turner <synfina...@gmail.com> >>> To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net> >>> Sent: Wednesday, October 17, 2012 5:48 PM >>> Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from >>> multicast source) >>> >>> Correct. You can't send traffic with tcpreplay to an application >>> running on the same box because the IP stack of the box never receives >>> the packet(s). >>> >>> On Wed, Oct 17, 2012 at 5:07 PM, Hei Chan <structurech...@yahoo.com> >>> wrote: >>>> Hi, >>>> >>>> I used the following to capture the traffic on box A: >>>> tcpdump -i bond0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port >>>> 10005' >>>> -w /tmp/11.2.pcap >>>> >>>> Then, I used tcpwrite to change the MAC addresses on box B: >>>> tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[my >>>> MAC >>>> address for eth0] --enet-dmac=[my MAC address for eth0] >>>> >>>> Then, I ran my application to join 224.0.26.5:10005 on box B, and >>>> tcpreplay-ed the converted pcap file: >>>> $ sudo tcpreplay -i eth0 -t 11.2.pcap >>>> sending out eth0 >>>> processing file: 11.2.pcap >>>> Actual: 3364 packets (311134 bytes) sent in 0.07 seconds. Rated: >>>> 4444771.5 bps, 33.91 Mbps, 48057.14 pps >>>> Statistics for network device: eth0 >>>> Attempted packets: 3364 >>>> Successful packets: 3364 >>>> Failed packets: 0 >>>> Retried packets (ENOBUFS): 0 >>>> Retried packets (EAGAIN): 0 >>>> >>>> My application didn't see the traffic at all, but tcpdump captured all >>>> packets (on box B as well): >>>> $ sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and >>>> 'port >>>> 10005' -w /tmp/13.pcap >>>> tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size >>>> 65535 >>>> bytes >>>> ^C3364 packets captured >>>> 3364 packets received by filter >>>> 0 packets dropped by kernel >>>> >>>> Here is my tcpreply version: >>>> $ tcpreplay -V >>>> tcpreplay version: 3.4.4 (build 2450) >>>> Copyright 2000-2010 by Aaron Turner <aturner at synfin dot net> >>>> Cache file supported: 04 >>>> Not compiled with libdnet. >>>> Compiled against libpcap: 1.0.0 >>>> 64 bit packet counters: enabled >>>> Verbose printing via tcpdump: enabled >>>> Packet editing: disabled >>>> Fragroute engine: disabled >>>> Injection method: PF_PACKET send() >>>> >>>> I read this post: >>>> >>>> >>>> http://sourceforge.net/mailarchive/forum.php?thread_name=CAMQJc%3D8Qan0VSH0dxWxoU_P%2BppYWhBjtw4jYvK7eAEqUy3hd4Q%40mail.gmail.com&forum_name=tcpreplay-users >>>> >>>> It sounds like I can't tcpreplay the pcap file back to the same box as >>>> the >>>> application that receives the replay traffic through multicast? >>>> >>>> Any input is appreciated. >>>> >>>> Thanks in advance. >>>> >>>> >>>> Cheers, >>>> Hei >>>> >>>> >>>> >>>> >>>> ------------------------------------------------------------------------------ >>>> Everyone hates slow websites. So do we. >>>> Make your web apps faster with AppDynamics >>>> Download AppDynamics Lite for free today: >>>> http://p.sf.net/sfu/appdyn_sfd2d_oct >>>> _______________________________________________ >>>> Tcpreplay-users mailing list >>>> Tcpreplay-users@lists.sourceforge.net >>>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >>>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >>> >>> >>> >>> -- >>> Aaron Turner >>> http://synfin.net/ Twitter: @synfinatic >>> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & >>> Windows >>> Those who would give up essential Liberty, to purchase a little temporary >>> Safety, deserve neither Liberty nor Safety. >>> -- Benjamin Franklin >>> "carpe diem quam minimum credula postero" >>> >>> >>> >>> ------------------------------------------------------------------------------ >>> Everyone hates slow websites. So do we. >>> Make your web apps faster with AppDynamics >>> Download AppDynamics Lite for free today: >>> http://p.sf.net/sfu/appdyn_sfd2d_oct >>> _______________________________________________ >>> Tcpreplay-users mailing list >>> Tcpreplay-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >>> >>> >>> >>> ------------------------------------------------------------------------------ >>> Everyone hates slow websites. So do we. >>> Make your web apps faster with AppDynamics >>> Download AppDynamics Lite for free today: >>> http://p.sf.net/sfu/appdyn_sfd2d_oct >>> _______________________________________________ >>> Tcpreplay-users mailing list >>> Tcpreplay-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >> >> >> >> -- >> Aaron Turner >> http://synfin.net/ Twitter: @synfinatic >> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & >> Windows >> Those who would give up essential Liberty, to purchase a little temporary >> Safety, deserve neither Liberty nor Safety. >> -- Benjamin Franklin >> "carpe diem quam minimum credula postero" >> >> >> ------------------------------------------------------------------------------ >> Everyone hates slow websites. So do we. >> Make your web apps faster with AppDynamics >> Download AppDynamics Lite for free today: >> http://p.sf.net/sfu/appdyn_sfd2d_oct >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcpreplay-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support >> >> >> >> >> ------------------------------------------------------------------------------ >> Everyone hates slow websites. So do we. >> Make your web apps faster with AppDynamics >> Download AppDynamics Lite for free today: >> http://p.sf.net/sfu/appdyn_sfd2d_oct >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcpreplay-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > > -- > Aaron Turner > http://synfin.net/ Twitter: @synfinatic > http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & > Windows > Those who would give up essential Liberty, to purchase a little temporary > Safety, deserve neither Liberty nor Safety. > -- Benjamin Franklin > "carpe diem quam minimum credula postero" > > ------------------------------------------------------------------------------ > Everyone hates slow websites. So do we. > Make your web apps faster with AppDynamics > Download AppDynamics Lite for free today: > http://p.sf.net/sfu/appdyn_sfd2d_oct > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > > > ------------------------------------------------------------------------------ > Everyone hates slow websites. So do we. > Make your web apps faster with AppDynamics > Download AppDynamics Lite for free today: > http://p.sf.net/sfu/appdyn_sfd2d_oct > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin "carpe diem quam minimum credula postero" ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
