Re: router stress testing tools

From: Ghaith Nasrawi (libero_at_aucegypt.edu)
Date: 02/07/05

  • Next message: Erik Winkler: "Re: Wireless Pentest Question"
    Date: Mon,  7 Feb 2005 16:38:13 +0000
    To: "neil.gardner" <neil.gardner@alliedtelesyn.co.nz>
    
    

    http://www.spirentcom.com/analysis/index.cfm?WS=68&wt=2

    ---------- Initial Header -----------

    From : "neil gardner" neil.gardner@alliedtelesyn.co.nz
    To : infosecgroup@gmail.com, pen-test@securityfocus.com
    Cc :
    Date : Mon, 07 Feb 2005 09:00:58 +1300
    Subject : Re: router stress testing tools

    > We do Router performance and protocol testing on a constant basis (New
    > products and new software for an existing range) and use Ixia chassis
    > extensively. They can be a little temperamental, but the scriptability,
    > flexibility and options are fantastic.
    >
    > Things like setting up a max number of sessions is trivial and would
    > take only a few seconds to setup and execute.
    >
    > However, on a more budget level, max number of sessions should be
    > trivial to setup. Just put hping in a loop and increase source IP and
    > set it going. You may have to throttle slightly if you're not interested
    > in ramp rate and want mas sessions instead - however ramp rate is
    > probably a better (faster) indication of a DOS.
    >
    > Cheers - Neil Gardner
    > Senior Test Engineer
    > Allied Telesyn Research
    >
    > >>> bill williams <infosecgroup@gmail.com> 6/02/2005 11:01:39 a.m. >>>
    > I am looking for information and tools to stress test routers. Any
    > information, white papers, tools, settings for hping, etc. would be
    > appreciated. The incident I am trying to reproduce is related to
    > scanning through the router and the router running out of sessions
    > creating a DOS attack, I think? This testing is in response to yet
    > another "your scanner brought the router, down incident" and I am sure
    > you can imagine the rest. We do have a duplicate router in our testing
    > facility so don't worry I am not trying to DOS anyone.
    >
    >
    >
    > NOTICE: This message contains privileged and confidential
    > information intended only for the use of the addressee
    > named above. If you are not the intended recipient of
    > this message you are hereby notified that you must not
    > disseminate, copy or take any action in reliance on it.
    > If you have received this message in error please
    > notify Allied Telesyn Research Ltd immediately.
    > Any views expressed in this message are those of the
    > individual sender, except where the sender has the
    > authority to issue and specifically states them to
    > be the views of Allied Telesyn Research.
    >

    -----

     (o_
     //\ Ghaith Nasrawi
     V_/_

    PAST, n.
    That part of Eternity with some small fraction of
    which we have a slight and regrettable
    acquaintance. A moving line called the Present
    parts it from an imaginary period known as the
    Future. These two grand divisions of Eternity, of
    which the one is continually effacing the other,
    are entirely unlike. The one is dark with sorrow
    and disappointment, the other bright with
    prosperity and joy. The Past is the region of
    sobs, the Future is the realm of song. In the one
    crouches Memory, clad in sackcloth and ashes,
    mumbling penitential prayer; in the sunshine of
    the other Hope flies with a free wing, beckoning
    to temples of success and bowers of ease. Yet the
    Past is the Future of yesterday, the Future is the
    Past of to-morrow. They are one -- the knowledge
    and the dream. (The Devil's Dictionary)


  • Next message: Erik Winkler: "Re: Wireless Pentest Question"

    Relevant Pages

    • Re: router stress testing tools
      ... We do Router performance and protocol testing on a constant basis (New ... Things like setting up a max number of sessions is trivial and would ... probably a better indication of a DOS. ... notify Allied Telesyn Research Ltd immediately. ...
      (Pen-Test)
    • Drop out over VPN
      ... We are running TS on Windows 2000 using an ADSL VPN (router to router). ... reset the sessions on the server until the remote ... Even though remote users could not reconnect, ...
      (microsoft.public.windows.terminal_services)
    • Re: (Maybe OT) Dont know if DNS will help me here.
      ... Two servers, one AD Domain Controller also running as the DNS server. ... of the XP virtual sessions. ... forwarding it to another IP address. ... This is something your router would have to do, ...
      (microsoft.public.windows.server.dns)