Aaron Turner ecrivait le 31/03/2011 18:11:

> Make sure you're specifying the MAC addresses of the two routers the
> laptop is directly attached to. 

The mac addresses are OK. (checked on the 2 cisco routers).
Maybe I am doing something wrong due to the fact, in your example 
(nicely written, thanks!)
http://tcpreplay.synfin.net/wiki/usage#PassingTrafficThroughaFirewallRouterNon-TransparentDevice
You talk about passing the traffic on *one* device which is a little bit 
different with my scenario (3 routers+1 IPS).
I am sure I am not the first person using a such scenario.
Here is again my network schema (detailled) with the commands I am doing 
(LAPTOP with tcpreplay replaying a pcap file):

            IPS
            | |
          router1
          /      \
--router2---router3--
      /      \       /    \
SERVER   LAPTOP    CLIENT

The commands (according your man/wiki pages):

tcpprep --pcap=mini.pcap --cachefile=mini.cache --port

tcprewrite --cachefile=mini.cache --infile=mini.pcap 
--outfile=mini_updated.pcap
--enet-dmac=@MAC-ROUTER2,@MAC-ROUTER3 --endpoints=@IP-SERVER,@IP-CLIENT 
--enet-vlan=del

tcpreplay --intf1=LAPTOP-eth0 --intf2=LAPTOP-eth1 --cachefile=mini.cache 
mini_updated.pcap

> If you're still having problems then I highly recommend placing a hub
> or switch that supports sniffing (often called a SPAN port) to sniff
> on each link between the routers & IPS and verify the packets are
> showing up correctly.  Your network topology has multiple paths, so
> it's possible you have a routing issue.

I was thinking about a routing issue, no problem.
Tests I did: ping from everywhere to everywhere and ftp transfert from 
client to server (correctly caught by the IPS).
Thanks a lot for your help! :D




------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support

Reply via email to