SNORT Testing

[sshamay () netvision net il]

We are doing some performance tests on “snort” .

The tests are focused on measuring the throughput rates of snort under different mixture of traffic (good traffic + a 
percentage of malicious traffic)

I need your help, how should be the test environment, which tools to use etc.

We think to mix these tools (mucus & False Positive Generator (FPG, a plugin of FLoP)
) with Ixia traffic generator to send good traffic

What do you think ???

http://www.cs.ucsb.edu/~rsg/Mucus/
http://www.geschke-online.de/FLoP/




------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------