[Guy Harris <guy@xxxxxxxxxx>]

> Look at tcpreplay:  http://www.anzen.com/research/nidsbench/, although
> that site seems to be down.

I think "bought by Network Flight Recorder" may be more accurate; if you
go to

	http://www.anzen.com/research/nidsbench/

it says

	NFR Security, Inc. has recently completed the acquisition of the
	Anzen Flight Jacket (AFJ) intrusion detection product.

and NFR doesn't seem to have any obvious place on their web site:

	http://www.nfr.com/

for free software such as that.

tcpdump.org has a CVS tree for tcpreplay:

	http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpreplay/

so you could probably get it via anonymous CVS - see

	http://www.tcpdump.org/

for instructions on using anonymous CVS to the tcpdump.org server, but
check out "tcpreplay" rather than "libpcap" or "tcpdump".

It appears you can get a tarball from

	http://packetstormsecurity.org/UNIX/IDS/nidsbench/