This kind of topology proves useful in unit testing an IDS under development. You can replay captured attack files/normal traffic files using tools like Tomahawk. http://tomahawk.sourceforge.net/
Regards, Arun -----Original Message----- From: Terry Vernon [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 1:18 PM To: [email protected] Subject: IPS test machine I am wondering how others are using a single machine with 2 dedicated test nics. I want to send data from one interface to another using the wires and not the loopback interface. Specifically I want to try to use analysis software from 10.1.1.1 on interface A through the IPS and back to interface B where I will be listening. The purpose is to test an IPS I have. Any ideas? -Terry ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------ ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
