[Snort-sigs] New tools for testing Snort rules and crafting pcaps
snort-sigs at davidwharton.us
Tue Nov 21 22:42:20 EST 2017
I know some of you may have already see this but for those who haven't
-- last week Secureworks released two open-source tools for IDS rule
testing and pcap creation: Dalton and Flowsynth.
Dalton is a system that allows a user to quickly and easily run network
packet captures against a Snort version of his choice using defined
rulesets and/or custom (ad-hoc) rules. Flowsynth is a tool for rapidly
modeling network traffic and creating pcaps. More details in the repo
I hope you find them useful; I know I sure do.
More information about the Snort-sigs