Snort mailing list archives

Re: need some attacks to test snort


From: Fossil <fossil_007 () yahoo com>
Date: Thu, 19 Apr 2007 22:42:44 -0700 (PDT)

Thank you Joel
Sure, I will try BASE. About the ICMP, ya thats true but i want to study more about how this rules get fired and how 
attacks are made, so i was looking for more attacks for my understanding and learning about the network security. so if 
you have more info regarding where i can download those codes i will more than helpful.
best regards
fossil


Fossil,

#1 -- Don't use ACID, use BASE.  http://base.secureideas.net
#2 -- You can use something like nessus to make Snort alert to make  
sure it's generating alerts, however, if you already receiving ICMP  
alerts, then you know it working properly.

Joel

+---------------------------------------------------------------------+
Joel Esler                                         Security Consultant
     gpg key: http://demo.sourcefire.com/jesler.pgp.key
+---------------------------------------------------------------------+



On Apr 19, 2007, at 9:43 PM, Fossil wrote:

Hello every one
i have installed snort and Acid
now i need some attacks - code by which i can check snort. i mean  
some example code, script by running that on other machine, the  
snort generates alert.

is there a site where i can download some attacks for testing  
purpose. i have the ICMP or ping based attacks but i want other  
ones. is there a source where i can download that code

any help will be appreciated
Thanks and regards
fossil









__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: