[Snort-users] Stress testing
s_i_d_j at ...131...
Thu Mar 29 00:30:43 EST 2001
I guess thats pretty much that way. I could put an extra 10% CPU utilization
without any IP spoofing and with -O and an entire subnet (1-255). Don't have
the setup to test so can't try anything which might bring down the network.
----- Original Message -----
From: "Joseph Nicholas Yarbrough" <nyarbrough at ...262...>
To: "Siddhartha Jain" <s_i_d_j at ...131...>
Sent: Wednesday, March 21, 2001 8:26 AM
Subject: Re: [Snort-users] Stress testing
> On Wednesday 21 March 2001 08:54, you wrote:
> > Hi,
> > Could anyone suggest tool/tools for stress testing an IDS. I am looking
> > something specifically testing an IDS and not just networks.
> > Siddhartha
> > _________________________________________________________
> > Do You Yahoo!?
> > Get your free @yahoo.com address at http://mail.yahoo.com
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> But seriously, nmap with Aggressive scaning, OS detection, and spoof a
> lot of hosts (like 200) will load it down. try to get cpu up to 100%
> sustained. If you can load the box down, you can actually get it to drop
> packets enough to get a real scan off *undetected*. this is tested in my
> with an 850mhz athlon (128 meg pc133 RAM) on linux 2.2.18.
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
More information about the Snort-users