yes, I use -- srcipmap.
________________________________
From: Aaron Turner <synfina...@gmail.com>
To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net>
Sent: Tuesday, October 23, 2012 11:00 AM
Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from multicast
source)
Mostly I documented it to be clear. I probably should make sure all
the IP rewrite routines automatically enable checksum recalculation by
default. You're using --srcipmap ?
On Tue, Oct 23, 2012 at 10:02 AM, Hei Chan <structurech...@yahoo.com> wrote:
> tcpreplay version: 3.4.4 (build 2450)
>
> seems like you don't want to automatically update the checksum in some cases
> on purpose then.
>
> thanks :)
>
> ________________________________
> From: Aaron Turner <synfina...@gmail.com>
> To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net>
> Sent: Tuesday, October 23, 2012 8:45 AM
>
> Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from multicast
> source)
>
> On Mon, Oct 22, 2012 at 11:53 PM, Hei Chan <structurech...@yahoo.com> wrote:
>> Figured...need a special MAC if mcasting on the same LAN.
>>
>> Anyway, I notice that tcprewrite doesn't automatically update the checksum
>> when the src/dst IP has been rewritten. Is it a feature?
>
> What version are you using? Per the man page for the --fixcsum option:
>
> Causes each IPv4/v6 packet to have their checksums recalcualted and
> fixed. Automatically enabled for
> packets modified with --seed, --pnat, --endpoints or --fixlen.
>
>
>
>> ________________________________
>> From: Aaron Turner <synfina...@gmail.com>
>> To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net>
>> Sent: Thursday, October 18, 2012 2:12 PM
>>
>> Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from
>> multicast
>> source)
>>
>> So between Box A & B is a router? Sounds like the router isn't
>> forwarding the packets or you have an issue with IGMP (just taking
>> some educated guesses).
>>
>> Best thing to do is validate the packets leaving Box B are something
>> that your router will forward. There's nothing that tcpreplay does to
>> alter or change the packets that are stored in the pcap (11.out2.pcap
>> in this case). Garbage in, garbage out.
>>
>> On Thu, Oct 18, 2012 at 1:34 PM, Hei Chan <structurech...@yahoo.com>
>> wrote:
>>> Thanks for your speedy reply.
>>>
>>>
>>> Today, I tried again with the following setup:
>>> - Box B runs:
>>> sudo tcpreplay -i eth0 -t 11.out.2.pcap
>>> - An application on box A (connecting through a router) subscribes to
>>> 224.0.26.5:10005.
>>> - Box A at the same time runs:
>>> sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port
>>> 10005' -w /tmp/13.pcap
>>>
>>> Neither the tcpdump nor the application sees any traffic.
>>>
>>>
>>> I have already used tcprewrite:
>>> tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[box
>>> B's
>>> MAC address] --enet-dmac=[router's MAC address; the router sits between
>>> box
>>> A and B] --srcipmap=0.0.0.0/0:[box B's IP]/32
>>>
>>>
>>> Any suggestion?
>>>
>>> Thanks in advance.
>>>
>>>
>>> Cheers,
>>> Hei
>>>
>>>
>>> ________________________________
>>> From: Aaron Turner <synfina...@gmail.com>
>>> To: Main forum for tcpreplay <tcpreplay-users@lists.sourceforge.net>
>>> Sent: Wednesday, October 17, 2012 5:48 PM
>>> Subject: Re: [Tcpreplay-users] Trying to replay a pcap file (from
>>> multicast source)
>>>
>>> Correct. You can't send traffic with tcpreplay to an application
>>> running on the same box because the IP stack of the box never receives
>>> the packet(s).
>>>
>>> On Wed, Oct 17, 2012 at 5:07 PM, Hei Chan <structurech...@yahoo.com>
>>> wrote:
>>>> Hi,
>>>>
>>>> I used the following to capture the traffic on box A:
>>>> tcpdump -i bond0 -s0 'ip multicast' and 'host 224.0.26.5' and 'port
>>>> 10005'
>>>> -w /tmp/11.2.pcap
>>>>
>>>> Then, I used tcpwrite to change the MAC addresses on box B:
>>>> tcprewrite --infile=11.2.pcap --outfile=11.out.2.pcap --enet-smac=[my
>>>> MAC
>>>> address for eth0] --enet-dmac=[my MAC address for eth0]
>>>>
>>>> Then, I ran my application to join 224.0.26.5:10005 on box B, and
>>>> tcpreplay-ed the converted pcap file:
>>>> $ sudo tcpreplay -i eth0 -t 11.2.pcap
>>>> sending out eth0
>>>> processing file: 11.2.pcap
>>>> Actual: 3364 packets (311134 bytes) sent in 0.07 seconds. Rated:
>>>> 4444771.5 bps, 33.91 Mbps, 48057.14 pps
>>>> Statistics for network device: eth0
>>>> Attempted packets: 3364
>>>> Successful packets: 3364
>>>> Failed packets: 0
>>>> Retried packets (ENOBUFS): 0
>>>> Retried packets (EAGAIN): 0
>>>>
>>>> My application didn't see the traffic at all, but tcpdump captured all
>>>> packets (on box B as well):
>>>> $ sudo tcpdump -i eth0 -s0 'ip multicast' and 'host 224.0.26.5' and
>>>> 'port
>>>> 10005' -w /tmp/13.pcap
>>>> tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size
>>>> 65535
>>>> bytes
>>>> ^C3364 packets captured
>>>> 3364 packets received by filter
>>>> 0 packets dropped by kernel
>>>>
>>>> Here is my tcpreply version:
>>>> $ tcpreplay -V
>>>> tcpreplay version: 3.4.4 (build 2450)
>>>> Copyright 2000-2010 by Aaron Turner <aturner at synfin dot net>
>>>> Cache file supported: 04
>>>> Not compiled with libdnet.
>>>> Compiled against libpcap: 1.0.0
>>>> 64 bit packet counters: enabled
>>>> Verbose printing via tcpdump: enabled
>>>> Packet editing: disabled
>>>> Fragroute engine: disabled
>>>> Injection method: PF_PACKET send()
>>>>
>>>> I read this post:
>>>>
>>>>
>>>> http://sourceforge.net/mailarchive/forum.php?thread_name=CAMQJc%3D8Qan0VSH0dxWxoU_P%2BppYWhBjtw4jYvK7eAEqUy3hd4Q%40mail.gmail.com&forum_name=tcpreplay-users
>>>>
>>>> It sounds like I can't tcpreplay the pcap file back to the same box as
>>>> the
>>>> application that receives the replay traffic through multicast?
>>>>
>>>> Any input is appreciated.
>>>>
>>>> Thanks in advance.
>>>>
>>>>
>>>> Cheers,
>>>> Hei
>>>>
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Everyone hates slow websites. So do we.
>>>> Make your web apps faster with AppDynamics
>>>> Download AppDynamics Lite for free today:
>>>> http://p.sf.net/sfu/appdyn_sfd2d_oct
>>>> _______________________________________________
>>>> Tcpreplay-users mailing list
>>>> Tcpreplay-users@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>>>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>>>
>>>
>>>
>>> --
>>> Aaron Turner
>>> http://synfin.net/ Twitter: @synfinatic
>>> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix &
>>> Windows
>>> Those who would give up essential Liberty, to purchase a little temporary
>>> Safety, deserve neither Liberty nor Safety.
>>> -- Benjamin Franklin
>>> "carpe diem quam minimum credula postero"
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Everyone hates slow websites. So do we.
>>> Make your web apps faster with AppDynamics
>>> Download AppDynamics Lite for free today:
>>> http://p.sf.net/sfu/appdyn_sfd2d_oct
>>> _______________________________________________
>>> Tcpreplay-users mailing list
>>> Tcpreplay-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Everyone hates slow websites. So do we.
>>> Make your web apps faster with AppDynamics
>>> Download AppDynamics Lite for free today:
>>> http://p.sf.net/sfu/appdyn_sfd2d_oct
>>> _______________________________________________
>>> Tcpreplay-users mailing list
>>> Tcpreplay-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>>
>>
>>
>> --
>> Aaron Turner
>> http://synfin.net/ Twitter: @synfinatic
>> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix &
>> Windows
>> Those who would give up essential Liberty, to purchase a little temporary
>> Safety, deserve neither Liberty nor Safety.
>> -- Benjamin Franklin
>> "carpe diem quam minimum credula postero"
>>
>>
>> ------------------------------------------------------------------------------
>> Everyone hates slow websites. So do we.
>> Make your web apps faster with AppDynamics
>> Download AppDynamics Lite for free today:
>> http://p.sf.net/sfu/appdyn_sfd2d_oct
>> _______________________________________________
>> Tcpreplay-users mailing list
>> Tcpreplay-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Everyone hates slow websites. So do we.
>> Make your web apps faster with AppDynamics
>> Download AppDynamics Lite for free today:
>> http://p.sf.net/sfu/appdyn_sfd2d_oct
>> _______________________________________________
>> Tcpreplay-users mailing list
>> Tcpreplay-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
>
>
> --
> Aaron Turner
> http://synfin.net/ Twitter: @synfinatic
> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix &
> Windows
> Those who would give up essential Liberty, to purchase a little temporary
> Safety, deserve neither Liberty nor Safety.
> -- Benjamin Franklin
> "carpe diem quam minimum credula postero"
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_sfd2d_oct
> _______________________________________________
> Tcpreplay-users mailing list
> Tcpreplay-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_sfd2d_oct
> _______________________________________________
> Tcpreplay-users mailing list
> Tcpreplay-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
--
Aaron Turner
http://synfin.net/ Twitter: @synfinatic
http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows
Those who would give up essential Liberty, to purchase a little temporary
Safety, deserve neither Liberty nor Safety.
-- Benjamin Franklin
"carpe diem quam minimum credula postero"
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
