Re: [Tcpreplay-users] little doubt with tcpreplay

[Aaron T. <syn...@gm...>]

On Dec 18, 2007 7:58 AM, Gustavo Comerlatto <gus...@gm...> wrote:
> I think that when the network cable is unplugged the interface is still
> there, because the wireshark continues to show the devices and to enable his
> detection, what's your opinion??
>
> thanks a lot for the answer!!!
>

There's just no way to know what is really happening with the
information you've given.  It's probably operating system/network
driver dependent.

Anyways, you shouldn't be running tcpreplay on the IDS box.  Run
tcpreplay on a different box and use a cross-over cable to connect the
two directly to each other.  This will be much more accurate and will
remove any possibility of the disconnected network cable causing a
problem.

On a side note, 3.0.1 is ancient... I would strongly recommend
upgrading if you have the time.

Good luck,
Aaron


-- 
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety.  -- Benjamin Franklin