3. Replay pcap

_images/MoteurDeDetectionON.png

Once the detection engine is running, you can play pcap from the 'Replay pcaps' tab. This pcap will be proceed as network stream.

_images/SPDC47.PNG

Adding pcap is only possible with compatible GCenter versions. It is currently added only on the command line from the GCap CLI tool. Moreover, it is necessary that the detection virtual interface 'myvirt' is activated on the GCap.

_images/SPDC48.PNG

Ability to change pcap replay speed from that originally captured from 'Set replay speed'.

The selected pcap can be replayed individually ('Replay once') or in a loop ('Replay forever'). This choice is selected using the 'TAB' key.

Note

The "replay pcap" function is not operational when multi-tenancy per interface is used.

You can do it with the following CLI command :

replay-pcaps [NomDuPcap]