On 4/3/14, 9:47 AM, Aaron Turner wrote: > Per the FAQ: > > http://tcpreplay.synfin.net/wiki/FAQ#Doestcpreplaysupportsendingtraffictoaserver > > You can't use tcpreplay to send TCP traffic to a server (like a web > server). That's why you're getting the RST packets. > > If you want to send traffic through the routers, yes, tcpreplay can do > that. You'll first need to run tcpprep to split the traffic into the > client and server flows and then use tcpreplay to send the traffic. > The caveat is that you'll need one computer with two NIC's connected > to either side of the routing path. > > All the above is documented in the manual, so I continue your research there.
Thanks, Aaron. I had read the FAQ and the examples, and didn't see coverage for the case where tcpreplay involves two machines, each on a different subnet. Is there a way to run using two machines, for example when the machines are in different physical locations? In the lab, I will try again with a multiport NIC on one machine, per the examples page. Thanks again. dn > -- > Aaron Turner > http://synfin.net/ Twitter: @synfinatic > Those who would give up essential Liberty, to purchase a little temporary > Safety, deserve neither Liberty nor Safety. > -- Benjamin Franklin > > > On Wed, Apr 2, 2014 at 10:04 PM, David Newman <dnew...@networktest.com> wrote: >> How to get tcpreplay working across router hops? >> >> Topology is like this: >> >> 10.2.0.0/16 <-> router <-> 10.1.0.0/16 <-> router <-> 10.0.0.0/16 >> >> The original pcap has one client and three server addresses, all on >> different subnets. >> >> Using tccpprep and tcprewrite, I've changed this so that there's a new >> pcap with one client address (10.2.255.254) and three server addresses >> (10.0.255.25[2-4]). >> >> Routing works fine, and the hosts at these addresses can all ping each >> other. >> >> Problem is, when I replay the pcap there are lots of RSTs coming back >> from the 10.0.0.0 side, probably because the servers on those addresses >> aren't listening on the port used in the pcap (port 80 in this case). >> >> Do I need to play the pcap on both sides? Or somehow split the flows >> apart? Or something else? >> >> thanks >> >> dn >> >> >> ------------------------------------------------------------------------------ >> _______________________________________________ >> Tcpreplay-users mailing list >> Tcpreplay-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users >> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > > ------------------------------------------------------------------------------ > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support > ------------------------------------------------------------------------------ _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
