summaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorIdo Barnea <ibarnea@cisco.com>2016-12-21 17:15:04 +0200
committerIdo Barnea <ibarnea@cisco.com>2016-12-22 10:18:40 +0200
commitd99346269fed5539d483113a4b37928619c6640a (patch)
tree29785f11d04e444181f7161b03ea73352deb3b4d /doc
parente528048b2a9c99899cf1f69a2c11f51a383384db (diff)
UDP NAT --learn mode 1,3 support - doc + regression tests
Signed-off-by: Ido Barnea <ibarnea@cisco.com>
Diffstat (limited to 'doc')
-rwxr-xr-xdoc/trex_book.asciidoc6
1 files changed, 3 insertions, 3 deletions
diff --git a/doc/trex_book.asciidoc b/doc/trex_book.asciidoc
index ffb3e474..a2cdde1e 100755
--- a/doc/trex_book.asciidoc
+++ b/doc/trex_book.asciidoc
@@ -1056,12 +1056,12 @@ sudo ./t-rex-64 -f cap2/dns.yaml --client_cfg my_cfg.yaml
TRex can learn dynamic NAT/PAT translation. To enable this feature add `--learn-mode <mode>` to the command line.
To learn the NAT translation, TRex must embed information describing the flow a packet belongs to, in the first
-packet of each flow. This can be done in two different methods, depending on the chosen <mode>.
+packet of each flow. This can be done in different methods, depending on the chosen <mode>.
*mode 1:*::
-Flow info is embedded in the ACK of the first TCP SYN.
-In this mode, there is a limitation that bidirectional UDP templates (for example, DNS) are not supported.
+In case of TCP flow, flow info is embedded in the ACK of the first TCP SYN. +
+In case of UDP flow, flow info is embedded in the IP identification field of the first packet in the flow. +
This mode was developed for testing NAT with firewalls (which usually do not work with mode 2).
In this mode, TRex also learn and compensate for TCP sequence number randomization that might be done by the DUT.
TRex can learn and compensate for seq num randomization in both directions of the connection.