If the hosts A and C are on different networks (there are one or more routers between them), then you don't need to know the MAC address of C, only the MAC address of the first hop gateway to C. Generally this is your default gateway/router, but you'll have to consult the routing table on A to verify.
Then rewrite the traffic so that the IP addresses are A->C, but the MAC addresses are A->gateway. -Aaron On Nov 14, 2007 12:44 PM, Gergely Biczók <[EMAIL PROTECTED]> wrote: > Hi, > > I am trying to use tcpreplay for a network measurement project. > I am basically doing the following: > - capture trace on machine A (1 TCP + 1 long UDP session, all traffic > between A and B) > - modify pcap file to replay traffic between A and C (I had trouble with > tcpprep/rewrite so I used another tool bittwist) > - use tcpreplay on machine A to replay traffic between A and C (hosts are on > completely different network) > > As far as I know, rewriting the traffic was succesful, and when replaying, > tcpdump on the replaying machine (A) shows proper behavior. > However I cannot see any traffic on machine C. > > From the archives I see that this is probably MAC addresses of B and C not > matching. > How can I fix this? I will not know the MAC address of C. > > Regards, > > G > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Tcpreplay-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > > -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Tcpreplay-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
