nanog mailing list archives

Re: anti-ddos test solutions ?


From: kowsik <kowsik () gmail com>
Date: Wed, 17 Mar 2010 21:32:53 -0700

http://labs.mudynamics.com/2009/04/10/ddos-testing-network-applications/
http://www.pcapr.net/dos

YMMV, but mudos converts *any* IP packet into a DoS generator (it's free).

K.
---
http://www.pcapr.net
http://labs.mudynamics.com
http://twitter.com/pcapr

On Wed, Mar 17, 2010 at 11:28 AM, Stefan Fouant
<sfouant () shortestpathfirst net> wrote:
-----Original Message-----
From: Charles N Wyble [mailto:charles () knownelement com]
Sent: Wednesday, March 17, 2010 12:16 PM
To: nanog () nanog org
Subject: Re: anti-ddos test solutions ?

bit gossip wrote:
Nessus is a vulnerability scanner:

http://www.nessus.org/nessus/

Ixia provides a full Nessus implementation in one of its platform.


Well these days I would use http://www.openvas.org and
http://www.metasploit.org
for vulnerability scanning and analysis.

However that wouldn't be a DDoS, but could certainly lead to DOS.

If you can get your hands on a PCAP from a previous attack, you could also use something like Bit-Twist which will 
allow you to manipulate things like the destination IP and also the transmission rate, etc.  Pretty useful tool to 
include in the DDoS simulation toolbox.

http://bittwist.sourceforge.net/

Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D





Current thread: