On 7/15/07, Torsten Curdt <[EMAIL PROTECTED]> wrote:
>
> On 16.07.2007, at 01:15, Aaron Turner wrote:
>
> > On 7/15/07, Torsten Curdt <[EMAIL PROTECTED]> wrote:

[snip]

> > Your choices are:
> > 1) Replay the traffic from a different host
>
> Hm... replayed the same pcap on a different host from within the same
> subnet. I don't see any traffic coming in on the server at all :(

That's odd.   I'll need more info though to help debug though:

1) your pcap file
2) the IP and MAC address of the target server
3) the IP and MAC address of the client
4) Are the two boxes connected via a switch, hub, bridge, cross over
cable or ???

> Doing
>
>   echo test|nc -u 89.241.0.139 32333
>
> from that host I see on the server though.
>
> > 2) Replay the traffic on the same host, but from a different interface
> > (eth1 for example)
>
> Hmm... does that interface need to be on the same subnet? ...because
> replaying on either the 172.x, the 10.x or lo interfaces doesn't help
> either.

Generally speaking, yes, both interfaces need to be on the same
subnet/broadcast domain.  The important thing isn't the IP addresses,
but rather that they're on the same broadcast domain (assuming
ethernet).  Otherwise you'll need to go through a router or other
device which will require the destination MAC address to change.

-- 
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users

Reply via email to