Snort mailing list archives

RE: testing ids


From: Latha K <latha_lkris () yahoo com>
Date: Tue, 18 Mar 2003 13:59:27 -0800 (PST)


I have recently developed a IDS test tool 'Vaayu'  that parses snort 1.8.7 signature files for 'attack strings' and 
sends them in HTTP and UDP payloads.

The tool opens a HTTP session with a web server and sends a attack in each request packet. It can generate HTTP, UDP 
and ICMP traffic containing attacks.

The tool can be downloaded from

http://www.geocities.com/latha_lkris

-lkris



Here's the link to the attack scripts (Perl required):
http://snort.sourceforge.net/attack_scripts-0.1.tar.gz

-Ray
   -----Original Message-----
   From: Mark Novak [mailto:markno@tw...]
   Sent: Friday, March 14, 2003 12:42 PM
   To: Ray Ellington
   Subject: RE: [Snort-users] testing ids


   Ray,

   I'd like a copy of the scripts as well.

   Thanks,

   Mark Novak
   Williamson Printing Corporation
   800-843-5423
   markno@tw...
     -----Original Message-----
     From: snort-users-admin@li...
[mailto:snort-users-admin@li...]On Behalf Of Ray Ellington
     Sent: Friday, March 14, 2003 11:21 AM
     To: Julio; snort-users@li...
     Subject: RE: [Snort-users] testing ids


     I've got the attack scripts if you want them.  I forgot where I got them
from.
     -Ray
       -----Original Message-----
       From: snort-users-admin@li...
[mailto:snort-users-admin@li...]On Behalf Of Julio
       Sent: Friday, March 14, 2003 11:23 AM
       To: snort-users@li...
       Subject: [Snort-users] testing ids


       Hello,

       I beginner in IDS and I would like test my ids, what tool I can use
for it?

       Any suggestion ?

       Thanks

       Julio
 




---------------------------------
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!

Current thread: