AW: DoS tools

[Nistor.Lubomir () Star-21 De]

I think the best DOS tool (meaning the flooding tool) is putting this IDS on
a box with gigabit interface and create a gigabit traffic..

the other DOS tool (rulebase-tricks) to do the job has to be specific for
that IDS..
like trying some dirty IDS tricks like performing attacks with spoofed IPs..
or like that..
In order to do it you need to know what kind of IDS it is, and what is it's
standard rulebase and .. just use your brain to pick up some cool stuff from
it..
I've had some packetstrings, that cause DOS, but they are version and
software limited.. so it's of no use to you.. 

I don't think you can simulate real life flooding stuff.. as for flooding
you have to be sitting behind a BIG carrier ... or having tons of hosts
allarounddaplanet.. all of it is connected with lotsa problems you'll run
into (law, money,...)

generally having a general IDS DOS tester is not a good idea, as IDS
knowledgebase updates every now and then.. so it's not that efficient..


-----Ursprüngliche Nachricht-----
Von: Mark Villanova [mailto:mark () readylinkhealthcare net]
Gesendet: Mittwoch, 5. September 2001 21:00
An: pen-test () securityfocus com
Betreff: DoS tools


I am looking to hammer an open source firewall/IDS to really put it
through its paces. What I need is an all in one TCP/IP/UDP denial of
service tool.  My client wants to see the results of these real world
tools against this box to prove how effective a well managed open source
solution can be.  I have heard  ? datapool ? is good but have been
unable to find it so far.  Any suggestions on such a tool are welcome.

Thanks,

--Mark


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/