Re: Signature and Traffic generation

From: Martin Roesch (roesch@sourcefire.com)
Date: 03/15/02 

Date: Fri, 15 Mar 2002 13:36:10 -0500
From: Martin Roesch <roesch@sourcefire.com>
To: <kaleal.nospam@hawaii.rr.com>, <focus-ids@securityfocus.com>

Check out Hailstorm from Cenzic, I think it'll probably do what you want...

     -Marty

On 3/15/02 1:00 PM, "kaleal.nospam@hawaii.rr.com"
<kaleal.nospam@hawaii.rr.com> wrote:

> Anyone have tools to do signature generation for IDS testing? I am
> attempting to do a test of several different IDS products before deployment,
> and it is common knowledge that using a smartbits is not an efficient
> testing mechanism. What I am looking for is a way to generate a set of (50
> ? 100? ) signatures in a 50-100M dataload. This would enable me to test
> real world speed under pressure, with real signatures..
>
> Does any such thing exist?
>
> Thanks!
>
> kaleal@hawaii.rr.com
>
> 

-- 
Martin Roesch - Founder/CEO, Sourcefire Inc. - (410)290-1616
Sourcefire: Professional Snort Sensor and Management Console appliances
roesch@sourcefire.com - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org

Relevant Pages

  • Re: IDS Testing
    ... !dSR - Digital Security Research ... Subject: IDS Testing ... IDS Informant is a much improved solution over stick and snot. ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Pen-Test)
  • Re: IDS Testing
    ... Subject: IDS Testing ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Pen-Test)
  • Re: IDS Testing
    ... Subject: IDS Testing ... > sometimes connect manually to a web server where the IDS is in the path ... attack on your actual target. ...
    (Pen-Test)