Hi Marco,

On 8/14/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Hello,
>
> I am trying to rewrite the IP-Adresses of a pcap file. The manual says:
>
> Note that --endpoints requires a cache file and use of --skipbroadcast is
> highly recommended.
>
> I would like to know why these options are highly recommended.

Because not using --skipbroadcast will cause tcprewrite to edit
broadcast and multicast IP's & MAC addresses.  Generally speaking,
protocols using broadcast/multicast addresses don't work with
different addresses.

> The following error occurs if I use these options:
>
> # tcprewrite --cachefile=tryin.cache --endpoints=224.224.0.73:224.224.0.73
> --infile=simulatorCaptured.pcap --outfile=tryout.pcap --skipbroadcast
>
> # tcprewrite: illegal option – skipbroadcast

You didn't say what version of tcprewrite you are using, so I'm going
to have to guess you have an older version which doesn't support that
option.

> This happens too, if I use no broadcast address in "–endpoints".

Not sure what you mean by that, but it sounds like your version of
tcprewrite is old and doesn't support the --skipbroadcast option.

> Without "–cachefile" and "–skipbroadcast" option I get a tryout.pcap with
> the defined endpoints, but the UDPs of the output file seem to be broken in
> a way. They cannot be processed by application anymore after sending with
> tcpreplay.

Can you be more specific?   Broken in what way?  From the looks of it,
you're rewriting IP's in the 224.x.x.x range which if I recall are
multicast addresses- changing those could explain why your application
is ignoring the packets.

-- 
Aaron Turner
http://synfin.net/

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users

Reply via email to