Nessus will do that, he just mentioned that if your curently reciving ICMP
alerts then you know Snort is runing. You also look might look at
metasploit.
-----Original Message-----
From: snort-users-bounces@lists.sourceforge.net [mailto:snort-users-
bounces@lists.sourceforge.net] On Behalf Of Fossil
Sent: Friday, April 20, 2007 12:43 AM
To: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] need some attacks to test snort
Thank you Joel
Sure, I will try BASE. About the ICMP, ya thats true but i want to
study more about how this rules get fired and how attacks are made, so
i was looking for more attacks for my understanding and learning about
the network security. so if you have more info regarding where i can
download those codes i will more than helpful.
best regards
fossil
Fossil,
#1 -- Don't use ACID, use BASE. http://base.secureideas.net
#2 -- You can use something like nessus to make Snort alert to make
sure it's generating alerts, however, if you already receiving ICMP
alerts, then you know it working properly.
Joel
+---------------------------------------------------------------------+
Joel Esler Security Consultant
gpg key: http://demo.sourcefire.com/jesler.pgp.key
+---------------------------------------------------------------------+
On Apr 19, 2007, at 9:43 PM, Fossil wrote:
Hello every one
i have installed snort and Acid
now i need some attacks - code by which i can check snort. i mean
some example code, script by running that on other machine, the
snort generates alert.
is there a site where i can download some attacks for testing
purpose. i have the ICMP or ping based attacks but i want other
ones. is there a source where i can download that code
any help will be appreciated
Thanks and regards
fossil
________________________________
Ahhh...imagining that irresistible "new car" smell?
Check out new cars at Yahoo! Autos.
<http://us.rd.yahoo.com/evt=48245/*http://autos.yahoo.com/new_cars.html
;_ylc=X3oDMTE1YW1jcXJ2BF9TAzk3MTA3MDc2BHNlYwNtYWlsdGFncwRzbGsDbmV3LWNhc
nM->
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
