RE: Packet Generation

From: Evans, Arian (Arian.Evans@fishnetsecurity.com)
Date: Mon Apr 17 2006 - 13:42:27 EDT


In the past I have used tools from Network Instruments.
http://www.networkinstruments.com/

NI is a competitor to WildPackets, but priced more
aggressively and I prefer the feature integration.

Others items:

-- www.komodia.com has a simple, free Win32 packet gen
util that I've used several times, but not for high-rate
transmission of packets (e.g.-multigig).

-- There was also one called Spastic for Win32 that was
supposed to be fast; didn't try it myself. </Google>

-- If you have money to blow, there is a company that
makes high-speed appliances for this purpose. I believe
the name is Spirent & Clearsight networks. If you look
at the NSS IPS testing reports, I believe they use this
solution as part of their testing.

-- Blade Software offers firewall and IDS/IPS testing
software that looks interesting, though again I have
not used it myself either. </cheap_disclaimers>

-- If you Google for firewall packet testing, firewalking,
etc., you will produce a lot of links for open source
utilities, including some interesting client/server
apps that let you craft packets; you could probably
replay a given recording of a valid protocol stream
fairly easily with one of these client/server apps.

Of course, everyone has mentioned hping already,

Arian J. Evans
FishNet Security

Note: Microsoft Office breaks text-based emails by default.
To see text messages properly formatted, turn off:
Tools>Options>|Email Options|+Remove Extra Line Breaks

816.421.6611 [fns office]
816.701.2045 [direct]
888.732.9406 [fns toll-free]
816.421.6677 [fns general fax]
913.710.7085 [mobile] <--best bet
aevans@fishnetsecurity.com [email]

http://www.fishnetsecurity.com

> -----Original Message-----
> From: ankur jindal [mailto:ankurjn113@hotmail.com]
> Sent: Thursday, April 13, 2006 1:27 PM
> To: pen-test@securityfocus.com
> Subject: Packet Generation
>
>
> Hi
> I have written a small IPS system and I wanted to test it
> against high speed
> (GBps if possible) and high amount of traffic. Could someone
> tell me what
> tools I can use to do that? What I am specifically looking
> for is packet
> generation tools that would create arbitrary traffic
> consisting of multiple
> protocols.
>
> Thanks in advance
> Ankur
>
>
>
> --------------------------------------------------------------
> ----------------
> This List Sponsored by: Cenzic
>
> Concerned about Web Application Security?
> Why not go with the #1 solution - Cenzic, the only one to win
> the Analyst's
> Choice Award from eWeek. As attacks through web applications
> continue to rise,
> you need to proactively protect your applications from
> hackers. Cenzic has the
> most comprehensive solutions to meet your application
> security penetration
> testing and vulnerability management needs. You have an
> option to go with a
> managed service (Cenzic ClickToSecure) or an enterprise software
> (Cenzic Hailstorm). Download FREE whitepaper on how a managed
> service can
> help you: http://www.cenzic.com/news_events/wpappsec.php
> And, now for a limited time we can do a FREE audit for you to
> confirm your
> results from other product. Contact us at request@cenzic.com
> for details.
> --------------------------------------------------------------
> ----------------
>
>

------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security?
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's
Choice Award from eWeek. As attacks through web applications continue to rise,
you need to proactively protect your applications from hackers. Cenzic has the
most comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go with a
managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can
help you: http://www.cenzic.com/news_events/wpappsec.php
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@cenzic.com for details.
------------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:50 EDT