On Dec 18, 2007 10:32 AM, Gustavo Comerlatto <[EMAIL PROTECTED]> wrote: > thanks for the help. > > I was thinking in use the tool to test ddos detection systems... Do you > think its really impossible to do that with the IDS and the traffic replayer > on the same computer?
In general, bad idea if you ask me. Talk to your IDS vendor to see what they recommend. Some IDS's can tell the difference between a packet coming IN and going OUT of an interface, so running tcpreplay on the same box would clearly not work in those situations. > As a solution, I was thinking in create an interface only to use with the > IDS and the traffic, do you know how to do that? In other computer there is > one interface called virbr0, I've tried to use the traffic replayer and it > worked fine... You're probably better off using the technical support services available for your operating system/hardware then asking people here how to configure your system. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
