Penetration Testing mailing list archives

RE: Packet Generation


From: "Evans, Arian" <Arian.Evans () fishnetsecurity com>
Date: Mon, 17 Apr 2006 12:42:27 -0500

In the past I have used tools from Network Instruments.
http://www.networkinstruments.com/

NI is a competitor to WildPackets, but priced more
aggressively and I prefer the feature integration.

Others items:

-- www.komodia.com has a simple, free Win32 packet gen
util that I've used several times, but not for high-rate
transmission of packets (e.g.-multigig).

-- There was also one called Spastic for Win32 that was
supposed to be fast; didn't try it myself. </Google>

-- If you have money to blow, there is a company that
makes high-speed appliances for this purpose. I believe
the name is Spirent & Clearsight networks. If you look
at the NSS IPS testing reports, I believe they use this
solution as part of their testing.

-- Blade Software offers firewall and IDS/IPS testing
software that looks interesting, though again I have
not used it myself either. </cheap_disclaimers>

-- If you Google for firewall packet testing, firewalking,
etc., you will produce a lot of links for open source
utilities, including some interesting client/server
apps that let you craft packets; you could probably
replay a given recording of a valid protocol stream
fairly easily with one of these client/server apps.

Of course, everyone has mentioned hping already,

Arian J. Evans
FishNet Security

Note: Microsoft Office breaks text-based emails by default.
To see text messages properly formatted, turn off:
Tools>Options>|Email Options|+Remove Extra Line Breaks

816.421.6611 [fns office]
816.701.2045 [direct]
888.732.9406 [fns toll-free]
816.421.6677 [fns general fax]
913.710.7085 [mobile] <--best bet
aevans () fishnetsecurity com [email]

http://www.fishnetsecurity.com






-----Original Message-----
From: ankur jindal [mailto:ankurjn113 () hotmail com] 
Sent: Thursday, April 13, 2006 1:27 PM
To: pen-test () securityfocus com
Subject: Packet Generation


Hi
I have written a small IPS system and I wanted to test it 
against high speed 
(GBps if possible) and high amount of traffic. Could someone 
tell me what 
tools I can use to do that? What I am specifically looking 
for is packet 
generation tools that would create arbitrary traffic 
consisting of multiple 
protocols.

Thanks in advance
Ankur



--------------------------------------------------------------
----------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win 
the Analyst's 
Choice Award from eWeek. As attacks through web applications 
continue to rise, 
you need to proactively protect your applications from 
hackers. Cenzic has the 
most comprehensive solutions to meet your application 
security penetration 
testing and vulnerability management needs. You have an 
option to go with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed 
service can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to 
confirm your 
results from other product. Contact us at request () cenzic com 
for details.
--------------------------------------------------------------
----------------



------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security?
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's
Choice Award from eWeek. As attacks through web applications continue to rise,
you need to proactively protect your applications from hackers. Cenzic has the
most comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go with a
managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can
help you: http://www.cenzic.com/news_events/wpappsec.php
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request () cenzic com for details.
------------------------------------------------------------------------------


Current thread: