Miscellaneous

PCAP Replay

From this page, you can access the replay options and replay log.

Once a PCAP Replay Sensor is removed, its port number may be re-used. If multiple PCAP Replay Sensors are used and the same IP address is observed by multiple Sensors, by default eyeInspect will consider that IP address as a single asset. Set up IP reuse domains to prevent eyeInspect from merging assets based on those IP addresses. The same applies to when a Passive Sensor is listening to a network with identical IP addresses.

The following options are available from the secondary nav bar:

Back

Go back to the settings page.

Reload

Reload the displayed information.

Clear data

Clear the displayed data.

Add PCAP replay sensor

When working on a Bundled Configuration, the option to add a PCAP Replay Sensor is available. To add a PCAP Replay Sensor:

1. Click Add PCAP replay sensor
2. In the Add a new PCAP replay sensor dialog, enter the required information about the PCAP Replay Sensor
3. Click FINISH to save.

Once a PCAP Replay Sensor is removed, its port number may be re-used. If multiple PCAP Replay Sensors are used and the same IP address is observed by multiple Sensors, by default eyeInspect will consider that IP address as a single asset. Set up IP reuse domains to prevent eyeInspect from merging assets based on those IP addresses. The same applies to when a Passive Sensor is listening to a network with identical IP addresses.