search

sleinen / samplicator

Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
GNU General Public License v2.0
389 stars 132 forks source link

Ability to replicate packets with the original source IP and the samplicator server IP at the same time. #59

Open sebastianlopz opened 5 years ago

sebastianlopz commented 5 years ago

Hello there, I would like to know if it is possible redirect packets keeping the original IP and an alternate source IP at the same time with this tool.

I'm currently running samplicator 1.3.6.

i.e: source Net: 10.0.0.X / 25 Samplicator Server: 10.2.0.1 Destination Server 1 - IP: 172.27.0.1 Destination Server 2 - IP 10.1.0.1

FWD packets to server 1 with an alternate Source IP. (preferable the IP of the server where samplicator tool is running) FWD packets to server 2 with the original Source IP.

Thanks!

mikearagonhub commented 5 years ago

This is not possible. Samplicate process can either run in spoofing or not spoofing mode not both. You can run multiple instances (processes) but they cannot listen on the same port on the same host. You could consider running multiple instances on different ports and have multiple exporters one for each port on devices exporting flow. One instance in spoofing going to server1 and another to server2 without spoofing. HTH

sebastianlopz commented 5 years ago

Thanks for your quick response!