Re: Generating Traffic to Stress Test IDS

From: John Ladwig (jladwig@aravox.com)
Date: 01/24/02 

From: John Ladwig <jladwig@aravox.com>
To: mchapman@citadel.com (Mitchel Chapman)
Date: Thu, 24 Jan 2002 12:12:33 -0600 (CST)

Not to cast any aspersions on SmartBits, but Marcus Ranum recently posted
a nice paper on stressing IDS systems, available at:

    http://www.snort.org/docs/Benchmarking-IDS-NFR.pdf
 
> SpirentCom has a great product to spew loads of packets
> http://smartbits.spirentcom.com/
> You might want to check them out.
>
> -----Original Message-----
> From: Chad Gough [mailto:chad131@yahoo.com]
> Sent: Thursday, January 24, 2002 9:27 AM
> To: focus-ids@lists.securityfocus.com
> Subject: Generating Traffic to Stress Test IDS
>
>
> Does anyone know of any good tools that can generate alot of network traffic
> to see at what point an IDS starts dropping packets?
>
> Thanks,
> Chad

Relevant Pages

  • RE: IDS Testing Method
    ... way to test the IDS is to use a vulnerability scanner like Nessus and scan a ... dropping packets. ... Subject: IDS Testing Method ...
    (Focus-IDS)
  • Re: IDS Testing Method
    ... >> If it is snort, you can use sneeze.pl to generate alerts. ... Also the common ... >> not dropping packets. ... generate events on other IDS that do not ...
    (Focus-IDS)