RE: Snort signature packet generator

From: Simon and Lori Chang (simonandlorichang_at_earthlink.net)
Date: 11/09/04

  • Next message: Aaron: "Re: Snort signature packet generator: Thanks" 
    To: <focus-ids@securityfocus.com>
Date: Tue, 9 Nov 2004 16:27:15 -0500

    I have used Nemesis in my test lab network and it works pretty well.

    I've also spoken with Jeff Nathan, the maintainer of Nemesis. He said that,
    although it's been a long while since he had done anything with it, he is
    planning to resume his maintainer duties soon. He has started a Nemesis
    mailing list for just such purpose.

    SC

    -----Original Message-----
    From: Derek Armstrong [mailto:derek.v.armstrong@gmail.com]
    Sent: Monday, November 08, 2004 12:03 PM
    To: focus-ids@securityfocus.com
    Subject: Re: Snort signature packet generator

    Have you looked at nemesis? http://nemesis.sourceforge.net/
    I have used it to manual craft packets for IDS and firewall testing.

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    --------------------------------------------------------------------------

    --------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it with real-world attacks from
    CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    --------------------------------------------------------------------------

  • Next message: Aaron: "Re: Snort signature packet generator: Thanks"