Replay Instrument

Replay Instrument can be used to replay packets from pcap -file to mirror-bridge interface on Sensor. Replay Instrument can replay the data from pcap -file as-is or with configurable custom speed. With Replay Instrument the sensor can be used to analyze data captured into pcap -file using any available passive Instruments (Zeek or Suricata IDS, Traffic Recorder, Netflow, etc.). Replay Instrument can also be used to verify IDS rulesets using previously recorded traffic to verify that loaded rulesets raise relevant alerts. The recorded traffic can be replayed once, or looped multiple times.

Properties

Developer SensorFleet Oy
Categories Traffic Analysis, Testing
Network access type Active
Required interfaces
  • Interface where to replay data
Dependencies None
Data retention Does not store data
Management UI No