On 11/27/2015 11:01 AM, Burak Özalp wrote:
Thank you! I edited the data part and at most i could send 1.800.000 packets
per second. Does it possible to increase the pps ? I think that netsniff-ng is
a good alternative to netmap, especially about tcp_syn flood attacks.
Hmm, likely depends on your network tuning and hardware, people have
reported to get ~6Mpps on TCP SYNs:
https://www.mail-archive.com/[email protected]/msg87192.html
What kernel/settings do you have for fine-tuning?
On 27-11-2015 11:13, Daniel Borkmann wrote:
On 11/27/2015 08:57 AM, Burak Özalp wrote:
Hi everyone;
First of all, you've done great job with netsniff-ng!Congrulations!
I want to use trafgen to simulate an syn_flood attack. In --help, i saw that
" trafgen --dev eth0 --conf tcp_syn.cfg -u `id -u bob` -g `id -g bob`"
command. Could you please share tcp_syn.cfg file?
Did you try:
trafgen -e > tcp_syn.cfg
It has a built-in example for getting started. You can test it with:
trafgen -e | trafgen -i - -o eth0 --cpp -n 1
If you want to analyse the packet on TX (a la wireshark), you need to:
trafgen -e | trafgen -i - -o eth0 --qdisc-path --cpp -n 1
Cheers,
Daniel
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
