RE: Traffic generating tool survey

[<lordchariot () earthlink net>]

Our testing labs use things like Spirent WebAvalance and SmartBits. They are
valuable tools, but overkill many times.
For quick/dirty testing, I've setup a few linux boxes using Testmaker from
www.pushtotest.com.
It's a Java client with a scripting language that can be written to perform
almost any application-type of function. For example, I used it to saturate
a proxy with as many HTTP GETs as it could handle.

You need the boxes for it to run on, and I don't recommend using the MS
boxes as TestMaker clients. The TCP stack can't really handle the load. 
_____________
Erik Elsasser


> -----Original Message-----
> From: firewall-wizards-admin () honor icsalabs com 
> [mailto:firewall-wizards-admin () honor icsalabs com] On Behalf 
> Of David Lang
> Sent: Friday, July 16, 2004 9:32 PM
> To: firewall-wizards () honor icsalabs com
> Subject: [fw-wiz] Traffic generating tool survey
>
> I'm looking to find out what tools are out there for 
> generating traffic to 
> test firewalls.
>
> This needs to not just throw packets out there, but also be 
> able to be 
> configured to talk through application proxies (bonus points 
> for anything 
> that can be configured to test the checking that the proxy does)
>
> I know that a lot can be done with the in-kernel stuff that 
> Linux has, 
> combined with simple scripts and things like apache 
> benchmark, but the 
> problem I'm running into is a combination of capacity (I'm 
> getting proxy 
> firewalls that are fast enough that my throughput limits are 
> the machines 
> in the test harness, even when they are dual opteron systems) and 
> configurability. I need to test more combinations of things 
> then I have 
> time to code
>
> I've had people point me at the Spirent Communications Avalanch and 
> Reflector products (which start up around $150K, ouch) and am 
> seriously 
> considering them, but before I get ready to buy anything I 
> need to find 
> out what else is out there.
>
> David Lang
>
> -- 
> "Debugging is twice as hard as writing the code in the first place.
> Therefore, if you write the code as cleverly as possible, you are,
> by definition, not smart enough to debug it." - Brian W. Kernighan
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards