Snort mailing list archives
Re: Traffic generator
From: Ravi Kumar <ravivsn () rocsys com>
Date: Tue, 06 Jul 2004 11:39:06 +0530
Praveen,To generate normal UDP/IP/TCP packets you can use raw sockets or libnet library. Libnet is a library which provides API to generate packets, it has support to many protocols.
You can also check for tools based on libnet.To answer your requirement, If I am not wrong you want to generate packets with content as snort signature content, in that case you have tools which can directly help you.
Google for snot, stick , sneeze. They generates false positives on old version of snort. Cheers, -Ravi ROCSYS Technologies Ltd Hyderabad http://www.rocsys.com praveen kundurthi wrote:
Can anyone of you let me know if there is any traffic generator for generation tcp UDP and IP packets where we can configure the packet..In snort signatures there is a filed"Content" which shows the content of the packet.. Regards, __________________________________ Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers! http://promotions.yahoo.com/new_mail ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training.Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training.Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort deployment questions shashank . joshi (Jul 05)
- Traffic generator praveen kundurthi (Jul 05)
- Re: Traffic generator sgt_b (Jul 05)
- Re: Traffic generator Sadettin Orçin Demiray (Jul 08)
- Re: Traffic generator Ravi Kumar (Jul 05)
- Re: Traffic generator Glenn Forbes Fleming Larratt (Jul 06)
- Re: Traffic generator Dirk Geschke (Jul 07)
- Re: Traffic generator Ernesto (Jul 07)
- Re: Traffic generator sgt_b (Jul 05)
- <Possible follow-ups>
- Snort deployment questions shashank (Jul 14)
- Traffic generator praveen kundurthi (Jul 05)