Snort mailing list archives

RE: Slightly OT: high speed packet generation softw are


From: "larosa, vjay" <larosa_vjay () emc com>
Date: Mon, 1 Dec 2003 16:26:33 -0500

Try tcpreplay. You can replay full pcap files back on to a network. It is
pretty fast but it depends on the speed of your hardware. I have used it in
the past for IDS benchmarking and was very impressed.

vjl

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of doug () pnl gov
Sent: Monday, December 01, 2003 2:45 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Slightly OT: high speed packet generation software

I'm curious to know what everyone else uses for high speed packet 
generation. I'm not so much interested in single packets, but rather, 
something that can generate a lot of traffic. Noise is irrelevant, as I'm 
an looking to do IDS testing. I've looked a little at a few on freshmeat 
(packETH, pacgen, http_load) but have no experience with any of them. By 
high speed, I mean something that'll push 100Mb/s, and (hardware allowing) 
1Gb/s

Ideally, it would be nice to have something that emulated sessions between 
a couple of ip addresses, but I'll take a variety of packet generation.

-- 
Douglas J Nordwall      http://rex.nmhu.edu/~musashi    
System Administrator    Pacific Northwest National Labs



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: