.TH TCPBRIDGE 1 2005-06-12 "" "Programmer's Manual" .\" DO NOT EDIT THIS FILE (tcpbridge.1) .\" .\" It has been AutoGen-ed Sunday June 12, 2005 at 10:24:35 PM PDT .\" From the definitions tcpbridge_opts.def .\" and the template file agman1.tpl .\" .SH NAME tcpbridge \- Bridge network traffic across two interfaces .SH SYNOPSIS .B tcpbridge .\" Mixture of short (flag) options and long options .RB [ -\fIflag\fP " [\fIvalue\fP]]... [" --\fIopt-name\fP " [[=| ]\fIvalue\fP]]..." .PP All arguments must be options. .PP tcpbridge is a tool for briding network traffic across two interfaces and optionally modifying the packets in betweeen .SH "DESCRIPTION" This manual page documents, briefly, the \fBtcpbridge\fP command. The basic operation of tcpbridge is to be a network bridge between two subnets. All packets recieved on one interface are sent via the other. Optionally, packets can be edited in a variety of ways according to your needs. .SH OPTIONS .TP .BR -d " \fInumber\fP, " --dbug "=" \fInumber\fP Enable debugging output. This option may appear up to 1 times. The default \fInumber\fP for this option is: .ti +4 0 .sp If configured with --enable-debug, then you can specify a verbosity level for debugging output. Higher numbers increase verbosity. .TP .BR -v ", " --verbose Print decoded packets via tcpdump to STDOUT. This option may appear up to 1 times. .sp .TP .BR -A " \fIstring\fP, " --decode "=" \fIstring\fP Arguments passed to tcpdump decoder. This option may appear up to 1 times. This option must appear in combination with the following options: verbose. .sp When enabling verbose mode (\fB-v\fP) you may also specify one or more additional arguments to pass to \fBtcpdump\fP to modify the way packets are decoded. By default, -n and -l are used. Be sure to quote the arguments like: -A "-axxx" so that they are not interpreted by tcpbridge. The following arguments are vaild: [ -aAeNqRStuvxX ] [ -E spi@ipaddr algo:secret,... ] [ -s snaplen ] .TP .BR -i " \fIstring\fP, " --intf1 "=" \fIstring\fP Primary interface (listen in uni-directional mode). This option may appear up to 1 times. .sp .TP .BR -I " \fIstring\fP, " --intf2 "=" \fIstring\fP Secondary interface (send in uni-directional mode). This option may appear up to 1 times. .sp .TP .BR -u ", " --unidir Send and receive in only one direction. This option may appear up to 1 times. .sp Normally, tcpbridge will send and receive traffic in both directions (bi-directionally). However, if you choose this option, traffic will be sent uni-directionally. .TP .BR -D " \fIstring\fP, " --dmac "=" \fIstring\fP Rewrite destination MAC addresses. This option may appear up to 1 times. .sp Takes a pair of comma deliminated ethernet MAC addresses which will replace the destination MAC address of outbound packets. The first MAC address will be used for the server traffic and the optional second MAC address will be used for the client traffic. Example: .nf --dmac 00:12:13:14:15:16,00:22:33:44:55:66 .fi .TP .BR -S " \fIstring\fP, " --smac "=" \fIstring\fP Rewrite source MAC addresses. This option may appear up to 1 times. .sp Takes a pair of comma deliminated ethernet MAC addresses which will replace the source MAC address of outbound packets. The first MAC address will be used for the server traffic and the optional second MAC address will be used for the client traffic. Example: .nf --smac 00:12:13:14:15:16,00:22:33:44:55:66 .fi .TP .BR -l " \fInumber\fP, " --limit "=" \fInumber\fP Limit the number of packets to send. This option may appear up to 1 times. The default \fInumber\fP for this option is: .ti +4 -1 .sp By default, tcpbridge will send packets forever or until Ctrl-C. Alternatively, you can specify a maximum number of packets to send. .TP .BR -x " \fIstring\fP, " --include "=" \fIstring\fP Include only packets matching rule. This option may appear up to 1 times. This option must not appear in combination with any of the following options: exclude. .sp Override default of sending all packets stored in the capture file and only send packets which match the provided rule. Rules can be one of: .sp .IR "S:,... " - Source IP must match specified CIDR(s) .sp .IR "D:,... " - Destination IP must match specified CIDR(s) .sp .IR "B:,... " - Both source and destination IP must match specified CIDR(s) .sp .IR "E:,... " - Either IP must match specified CIDR(s) .sp .IR "P: " - Must be one of the listed packets where the list corresponds to the packet number in the capture file. .nf -x P:1-5,9,15,72- .fi would send packets 1 thru 5, the 9th and 15th packet, and packets 72 until the end of the file .sp .IR "F:''" - BPF filter. See the \fItcpdump(8)\fP man page for syntax. .br .TP .BR -X " \fIstring\fP, " --exclude "=" \fIstring\fP Exclude any packet matching this rule. This option may appear up to 1 times. This option must not appear in combination with any of the following options: include. .sp Override default of sending all packets stored in the capture file and only send packets which do not match the provided rule. Rules can be one of: .sp .IR "S:,... " - Source IP must not match specified CIDR(s) .sp .IR "D:,... " - Destination IP must not match specified CIDR(s) .sp .IR "B:,... " - Both source and destination IP must not match specified CIDR(s) .sp .IR "E:,... " - Either IP must not match specified CIDR(s) .sp .IR "P: " - Must not be one of the listed packets where the list corresponds to the packet number in the capture file. .nf -x P:1-5,9,15,72- .fi would drop packets 1 thru 5, the 9th and 15th packet, and packets 72 until the end of the file .br .TP .BR -T " \fIstring\fP, " --vlan "=" \fIstring\fP Specify 802.1q VLAN tag mode. This option may appear up to 1 times. .sp Allows you to rewrite ethernet frames to add a 802.1q header to standard 802.3 ethernet headers or remove the 802.1q VLAN tag information. .sp 1 \fBadd\fP Rewrites the existing 802.3 ethernet header as an 802.1q VLAN header .sp 1 \fBdel\fP Rewrites the existing 802.1q VLAN header as an 802.3 ethernet header .TP .BR -t " \fInumber\fP, " --vlan-tag "=" \fInumber\fP Specify the new 802.1q VLAN tag value. This option may appear up to 1 times. This option must appear in combination with the following options: vlan. .sp .TP .BR -c " \fInumber\fP, " --vlan-cfi "=" \fInumber\fP Specify the 802.1q VLAN CFI value. This option may appear up to 1 times. This option must appear in combination with the following options: vlan. .sp .TP .BR -p " \fInumber\fP, " --vlan-pri "=" \fInumber\fP Specify the 802.1q VLAN priority. This option may appear up to 1 times. This option must appear in combination with the following options: vlan. .sp .TP .BR -P ", " --pid Print the PID of tcpbridge at startup. .sp .TP .BR -V ", " --version Print version information. .sp .TP .BR -h ", " --less-help Display less usage information and exit. .sp .TP .BR \-H , " \--help" Display usage information and exit. .TP .BR \-! , " \--more-help" Extended usage information passed thru pager. .TP .BR \- " [\fIrcfile\fP]," " \--save-opts" "[=\fIrcfile\fP]" Save the option state to \fIrcfile\fP. The default is the \fIlast\fP configuration file listed in the \fBOPTION PRESETS\fP section, below. .TP .BR \- " \fIrcfile\fP," " \--load-opts" "=\fIrcfile\fP," " --no-load-opts" Load options from \fIrcfile\fP. The \fIno-load-opts\fP form will disable the loading of earlier RC/INI files. \fI--no-load-opts\fP is handled early, out of order. .SH OPTION PRESETS Any option that is not marked as \fInot presettable\fP may be preset by loading values from configuration ("RC" or ".INI") file(s). The \fIhomerc\fP file is "\fI$$/\fP", unless that is a directory. In that case, the file "\fI.tcpbridgerc\fP" is searched for within that directory. .SH "SIGNALS" tcpbridge understands the following signals: .sp .IR "\fBSIGUSR1\fP" Suspend tcpbridge .sp .IR "\fBSIGCONT\fP" Restart tcpbridge .br .SH "SEE ALSO" tcpdump(1), tcpprep(1), tcprewrite(1), tcpreplay(1) .SH "BUGS" tcpbridge can only send packets as fast as your computer's interface, processor and system bus will allow. Connecting both interfaces to the same subnet may create a broadcast storm and take down the network. Improper use of the packet editing functions may have other undefined and possible negative consequences. Some operating systems by default do not allow for forging source MAC addresses. Please consult your operating system's documentation and the tcpreplay FAQ if you experiance this issue. .SH AUTHOR Copyright 2000-2005 Aaron Turner For support please use the tcpreplay-users@lists.sourceforge.net mailing list. .PP Released under the Free BSD License. .PP This manual page was \fIAutoGen\fP-erated from the \fBtcpbridge\fP option definitions.