I think the best DOS tool (meaning the flooding tool) is putting this IDS on a box with gigabit interface and create a gigabit traffic.. the other DOS tool (rulebase-tricks) to do the job has to be specific for that IDS.. like trying some dirty IDS tricks like performing attacks with spoofed IPs.. or like that.. In order to do it you need to know what kind of IDS it is, and what is it's standard rulebase and .. just use your brain to pick up some cool stuff from it.. I've had some packetstrings, that cause DOS, but they are version and software limited.. so it's of no use to you.. I don't think you can simulate real life flooding stuff.. as for flooding you have to be sitting behind a BIG carrier ... or having tons of hosts allarounddaplanet.. all of it is connected with lotsa problems you'll run into (law, money,...) generally having a general IDS DOS tester is not a good idea, as IDS knowledgebase updates every now and then.. so it's not that efficient.. -----Ursprüngliche Nachricht----- Von: Mark Villanova [mailto:markat_private] Gesendet: Mittwoch, 5. September 2001 21:00 An: pen-testat_private Betreff: DoS tools I am looking to hammer an open source firewall/IDS to really put it through its paces. What I need is an all in one TCP/IP/UDP denial of service tool. My client wants to see the results of these real world tools against this box to prove how effective a well managed open source solution can be. I have heard ? datapool ? is good but have been unable to find it so far. Any suggestions on such a tool are welcome. Thanks, --Mark ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
This archive was generated by hypermail 2b30 : Thu Sep 06 2001 - 16:10:15 PDT