Traffic Replay Instrument
Replay Instrument can be used to replay packets from pcap -file
to mirror-bridge interface on Sensor. Replay Instrument can replay the data
from pcap -file as-is or with configurable custom speed. With
Replay Instrument the sensor can be used to analyze data captured into
pcap -file using any available passive Instruments (Zeek or
Suricata IDS, Traffic Recorder, Netflow, etc.). Replay Instrument can also be
used to verify IDS rulesets using previously recorded traffic to verify that
loaded rulesets raise relevant alerts. The recorded traffic can be replayed
once, or looped multiple times.
Properties
| Developer | SensorFleet Oy |
| Categories | Traffic Analysis, Testing |
| Network access type | Active |
| Required interfaces |
|
| Dependencies | None |
| Data retention | Does not store data |
| Management UI | No |