Re: [Tcpreplay-users] Rewriting only local endpoint

[Aaron T. <syn...@gm...>]

Hi Rob,

Sounds pretty easy.    Basically you've got two choices:

1) If you know the IP address(es) of the clients, use the "nat" option
in tcpreplay 2.3.5 to rewrite the addresses.

2) If you don't know the IP address(es), you'll need to run the pcap
file through tcpprep to generate a file which will tell tcpreplay
which packets are client->server and which are server->client.
There's a bunch of algorithms that tcpprep uses to do this, so you'll
need to pick the best one for your traffic.

Regards,
Aaron

On 4/17/07, Rob Campbell <a.r...@gm...> wrote:
> Hi all,
>
>   I'm using TCPReplay V2.3.5.  I know this isn't supported anymore
> likely, but the question would apply to most versions, and likely
> TCPRewrite in V3.
>
>   If you run a pcap through normally, all of the IP addresses in the
> pcap are maintained.
>
>   Using the "-e" command line argument you can rewrite the IP
> addresses of the local client to whatever you want and also set all of
> the server IPs to a specific address.
>
>   Is there any way though to just rewrite the local client IP address
> and leave all of the various server IP addresses alone?  The only way
> I can see to rewrite my client IP now is to also change all of the
> various sever IP addresses to one specific remote IP address as well.
>
>
>   Thanks,
>
>
> Rob
>
>
> --
>
> ---------------------------------------
> Rob Campbell
> a.r...@gm...
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Tcpreplay-users mailing list
> Tcp...@li...
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>


-- 
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix