Thank you for your speedy reply, Now I describle my problem in detail,my testbed is one PC and one Firewall, the PC which have thress network card, eth0,eth1 and eth2. eth0 connect to the Firewall eth1 interface,eth1 connect to the Firewall eth2 interface, the eth2 of the PC is the control card. on the Firewall ,I bound eth1 to the DMZ zone, eth2 to the Untrust zone, at the firewall eth2 interface, I set it at the NAT inbound module, in other words, when the traffic flow from Untrust to DMZ, the destination IP should be changed to the gateway IP, on the PC, I set eth0 as server,eth1 as client,at this situation, how to use tcprewite edit the IP address,I hope you can give me an example
----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[email protected]> Sent: Tuesday, September 25, 2007 3:05 AM Subject: Tcpreplay-users Digest, Vol 16, Issue 5 > Send Tcpreplay-users mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > or, via email, send a message with subject or body 'help' to > [EMAIL PROTECTED] > > You can reach the person managing the list at > [EMAIL PROTECTED] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Tcpreplay-users digest..." > > > Today's Topics: > > 1. how to use tcpreplay to test DUT NAT module (Bing Feng) > 2. Re: how to use tcpreplay to test DUT NAT module (Aaron Turner) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 24 Sep 2007 17:40:38 +0800 > From: "Bing Feng" <[EMAIL PROTECTED]> > Subject: [Tcpreplay-users] how to use tcpreplay to test DUT NAT module > To: <[email protected]> > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset="gb2312" > > Hello, > > I have a problem about using tcpreplay to test the firewall,the topology > detail in the attachment,when the firewall under the NAT module,how to use > tcpreplay to send traffic to through it? > -------------- next part -------------- > An HTML attachment was scrubbed... > -------------- next part -------------- > A non-text attachment was scrubbed... > Name: tcpreplay.gif > Type: image/gif > Size: 15509 bytes > Desc: not available > > ------------------------------ > > Message: 2 > Date: Mon, 24 Sep 2007 10:09:20 -0700 > From: "Aaron Turner" <[EMAIL PROTECTED]> > Subject: Re: [Tcpreplay-users] how to use tcpreplay to test DUT NAT > module > To: "Main forum for tcpreplay" <[email protected]> > Message-ID: > <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=ISO-8859-1 > > On 9/24/07, Bing Feng <[EMAIL PROTECTED]> wrote: >> >> >> >> Hello, >> >> I have a problem about using tcpreplay to test the firewall,the topology >> detail in the attachment,when the firewall under the NAT module,how to use >> tcpreplay to send traffic to through it? > > Hi Bing, > > You're going to have to give me more information then you're having "a > problem". What is your problem exactly? Firewall dropping the > traffic? Do you know why? Is the firewall seeing the traffic? Is > the NAT inbound or outbound? > > Basically, you need to use tcpprep to split the traffic into Client > and Server halves. Then use tcprewrite to edit the IP and MAC > addresses to match that of your testbed. The destination MAC's need > to match those of the firewall, source MAC's can stay unchanged. The > source/destination IP's need to match that of your virtual > client/server and that of the firewall NAT IP- just like normal > traffic would look on the DMZ/Untrust segments. > > -- > Aaron Turner > http://synfin.net/ > http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix > They that can give up essential liberty to obtain a little temporary > safety deserve neither liberty nor safety. -- Benjamin Franklin > > > > ------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > > ------------------------------ > > _______________________________________________ > Tcpreplay-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > > > End of Tcpreplay-users Digest, Vol 16, Issue 5 > ********************************************** > ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
