On Dec 18, 2007 7:58 AM, Gustavo Comerlatto <[EMAIL PROTECTED]> wrote: > I think that when the network cable is unplugged the interface is still > there, because the wireshark continues to show the devices and to enable his > detection, what's your opinion?? > > thanks a lot for the answer!!! >
There's just no way to know what is really happening with the information you've given. It's probably operating system/network driver dependent. Anyways, you shouldn't be running tcpreplay on the IDS box. Run tcpreplay on a different box and use a cross-over cable to connect the two directly to each other. This will be much more accurate and will remove any possibility of the disconnected network cable causing a problem. On a side note, 3.0.1 is ancient... I would strongly recommend upgrading if you have the time. Good luck, Aaron -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
