On 9/24/07, Bing Feng <[EMAIL PROTECTED]> wrote: > Thank you for your speedy reply, > > Now I describle my problem in detail,my testbed is one PC and one Firewall, > the PC which have thress network card, eth0,eth1 and eth2. eth0 connect to > the Firewall eth1 interface,eth1 connect to the Firewall eth2 interface, the > eth2 of the PC is the control card. on the Firewall ,I bound eth1 to the DMZ > zone, eth2 to the Untrust zone, at the firewall eth2 interface, I set it at > the NAT inbound module, in other words, when the traffic flow from Untrust to > DMZ, the destination IP should be changed to the gateway IP, on the PC, I set > eth0 as server,eth1 as client,at this situation, how to use tcprewite edit > the IP address,I hope you can give me an example
Well here's a detailed example I just wrote up: http://tcpreplay.synfin.net/trac/wiki/usage#PassingTrafficThroughaFirewallRouterNon-TransparentDevice I didn't have the time to create a testbed and actually test things, so it's possible I got it wrong. If so, let me know. If it doesn't work, be sure to include: 1) What commands you ran (exactly) 2) Your original pcap 3) MAC addresses of your firewall 4) Why it didn't work. You'll need to do some trouble shooting to figure that out, but unfortunately, there's no way I can re-create your test bed 100% accurately to determine this on my own. Good luck! -Aaron -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
