thanks for the help.
I was thinking in use the tool to test ddos detection systems... Do you
think its really impossible to do that with the IDS and the traffic replayer
on the same computer?
As a solution, I was thinking in create an interface only to use with the
IDS and the traffic, do you know how to do that? In other computer there is
one interface called virbr0, I've tried to use the traffic replayer and it
worked fine...
I'm sending my configurations in other mail with other problem, the
installation of the tcpreplay 3.2.3,,,
Tomorrow I`ll try the configuration you told me
thanks a lot again for the help
Gustavo
On Dec 18, 2007 6:27 PM, Aaron Turner <[EMAIL PROTECTED]> wrote:
> On Dec 18, 2007 7:58 AM, Gustavo Comerlatto <[EMAIL PROTECTED]> wrote:
> > I think that when the network cable is unplugged the interface is still
> > there, because the wireshark continues to show the devices and to enable
> his
> > detection, what's your opinion??
> >
> > thanks a lot for the answer!!!
> >
>
> There's just no way to know what is really happening with the
> information you've given. It's probably operating system/network
> driver dependent.
>
> Anyways, you shouldn't be running tcpreplay on the IDS box. Run
> tcpreplay on a different box and use a cross-over cable to connect the
> two directly to each other. This will be much more accurate and will
> remove any possibility of the disconnected network cable causing a
> problem.
>
> On a side note, 3.0.1 is ancient... I would strongly recommend
> upgrading if you have the time.
>
> Good luck,
> Aaron
>
>
> --
> Aaron Turner
> http://synfin.net/
> http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix
> They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety. -- Benjamin Franklin
>
> -------------------------------------------------------------------------
> SF.Net email is sponsored by:
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services
> for just about anything Open Source.
>
> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
> _______________________________________________
> Tcpreplay-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
>
-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Tcpreplay-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
