[Oisf-users] Fast replay of pcap files

Gene Albin gene.albin at gmail.com
Fri Jul 15 01:14:46 UTC 2011

Hi all,
  I'm experimenting with replaying various pcap files in Suricata.  It
appears that the pcap files are replaying at the same speed they were
recorded.  I'd like to be able to replay them faster so that 1) I can stress
the detection engine, and 2) expedite post-event analysis.

  One way to accomplish this is by using tcpreplay -t, but when running on
the same machine that takes lots of cycles away from Suricata and sends the
recorded pcap traffic onto an interface that already has live traffic.

  Is there some other way to replay captured traffic through Suricata at an
accelerated speed?

Gene Albin
gene.albin at gmail.com
gene_albin at bigfoot.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110714/058a1845/attachment-0002.html>

More information about the Oisf-users mailing list