IDS: RE: IPS test machine

["Arun Vishwanathan" <arun.vishwanathan () nevisnetworks com>]

This kind of topology proves useful in unit testing an IDS under
development. You can replay captured attack files/normal traffic files
using tools like Tomahawk. http://tomahawk.sourceforge.net/


Regards,
Arun

-----Original Message-----
From: Terry Vernon [mailto:tvernon24 () comcast net] 
Sent: Friday, February 24, 2006 1:18 PM
To: focus-ids () securityfocus com
Subject: IPS test machine

I am wondering how others are using a single machine with 2 dedicated
test
nics. I want to send data from one interface to another using the wires
and
not the loopback interface. Specifically I want to try to use analysis
software from 10.1.1.1 on interface A through the IPS and back to
interface
B where I will be listening. The purpose is to test an IPS I have. Any
ideas? 

-Terry


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708

to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------