Re: IDS testing. Libs for packet capture.
| Newsgroups | gmane.comp.security.ids |
|---|---|
| Message-ID | <OF269E7223.976147F0-ON07257514.007136C0-07257514.00718415@londen-insurance.com> |
Have you looked at tcpreplay? It allows you to playback libpcap packet
capture files in real-time (among other things).
http://tcpreplay.synfin.net/trac/
Skyler Bingham
GIAC {GSEC, GCIH, GCIA, GCFA}, CEH
(602) 957-1650 x1139
"Александр Сайко"
<saiko.a.s@gmail.
com> To
Sent by: [email protected]
listbounce@securi cc
tyfocus.com
Subject
IDS testing. Libs for packet
12/02/2008 04:18 capture.
PM
All,
I have been working in IDS testing. Now I'm focused on testing network
modules, like Snort, netstat, ect. I search for a tools to play
traffic from tcpdumps. Is anyone in the group working on something
like that? The idea is to develop some libpcap-like lib for playing
tcpdumps. The question is: had it been already done? Are there any
other common libs for packet captureing used in common IDSs?
---
Saiko Alexander
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------