Re: Signature and Traffic generation

From: Martin Roesch (roesch@sourcefire.com)
Date: 03/15/02


Date: Fri, 15 Mar 2002 13:36:10 -0500
From: Martin Roesch <roesch@sourcefire.com>
To: <kaleal.nospam@hawaii.rr.com>, <focus-ids@securityfocus.com>

Check out Hailstorm from Cenzic, I think it'll probably do what you want...

     -Marty

On 3/15/02 1:00 PM, "kaleal.nospam@hawaii.rr.com"
<kaleal.nospam@hawaii.rr.com> wrote:

> Anyone have tools to do signature generation for IDS testing? I am
> attempting to do a test of several different IDS products before deployment,
> and it is common knowledge that using a smartbits is not an efficient
> testing mechanism. What I am looking for is a way to generate a set of (50
> ? 100? ) signatures in a 50-100M dataload. This would enable me to test
> real world speed under pressure, with real signatures..
>
> Does any such thing exist?
>
> Thanks!
>
> kaleal@hawaii.rr.com
>
>

-- 
Martin Roesch - Founder/CEO, Sourcefire Inc. - (410)290-1616
Sourcefire: Professional Snort Sensor and Management Console appliances
roesch@sourcefire.com - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org