Re: IDS Testing tool

From: Anton A. Chuvakin (anton_at_chuvakin.org)
Date: 06/11/04

  • Next message: crayola_at_optonline.net: "Dragon Vs. Sourcefire NIDS" 
    Date: Fri, 11 Jun 2004 01:13:29 -0400 (EDT)
To: Arun Vishwanathan <arun.vishwanathan@nevisnetworks.com>

    >Is anyone aware of any open source equivalent of Blade's IDS Informer
    >tool to test IDSes? I am aware that TCPReplay can be used to test IDSes
    >but then we will need to make actual attacks at least once to capture
    >the traffic. Any help would be appreciated.
    What's wrong with just blasting it with a vuln scanner? Nessus will
    generate a lot of noise in most NIDSs and can even be tweaked for more
    "noisyness"

    Best, 

    -- 
Anton A. Chuvakin, Ph.D., GCIA, GCIH
     http://www.info-secure.org
   http://www.securitywarrior.com
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: crayola_at_optonline.net: "Dragon Vs. Sourcefire NIDS"