Re: DOS attacks again Cisco Router

On Thu Aug 17 2006 at 13:42, hic sonni wrote:

>   I?ve dome a basic nessus test with unsafe check, after the test
> nessus reports a crash after a DOS attacks (malformed TCP packet?),
> when checked the router I found that the routed wasn?t crashed

Unfortunately this kind of test is not very reliable.

> but the CPU usage has a pick of 50%

Did the peak last for long?

> may be if we perform DDOS by using several other machines or it will
> give better result

Well, if you hammer a router from enough machines, you will exhaust it
sooner or later. What kind of flaw do you want to find exactly? Or
what protection do you want to set up?

>  My question is if there is modification in nessus scanning options
> or other options to make our attacks more harms?

No

> or what do suggest?

Maybe you can use "ping" and check if the router drops packets from time
to time, but this won't be very reliable either, and if this happens,
you won't know exactly which attack caused the problem.

-- 
http://arboi.da.ru/                     http://ma75.blogspot.com/
PGP key ID : 0x0BBABA91 - 0x1320924F0BBABA91
Fingerprint: 1048 B09B EEAF 20AA F645  2E1A 1320 924F 0BBA BA91
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus