diff --git a/salt/tcpreplay/init.sls b/salt/tcpreplay/init.sls
new file mode 100644
index 000000000..a6cc62c32
--- /dev/null
+++ b/salt/tcpreplay/init.sls
@@ -0,0 +1,18 @@
+{% if grains['role'] == 'so-sensor' or grains['role'] == 'so-eval' %}
+
+so-tcpreplayimage:
+ cmd.run:
+   - name: docker pull --disable-content-trust=false docker.io/soshybridhunter/so-tcpreplay:HH1.1.4
+
+so-tcpreplay:
+  docker_container.running:
+    - require:
+      - so-tcpreplay
+    - network_mode: "host"
+    - image: docker.io/soshybridhunter/so-tcpreplay:HH1.1.4
+    - name: so-tcpreplay
+    - user: root
+    - interactive: True
+    - tty: True
+    
+{% endif %}