Jesper from Redhat has some good examples of using trafgen to send high pps rates: http://netoptimizer.blogspot.ca/2014/04/trafgen-fast-packet-generator.html http://netoptimizer.blogspot.dk/2014/04/basic-tuning-for-network-overload.html
it also helps to just throw more CPUs at it with '-P 4' on your command line On Fri, Nov 27, 2015 at 5:10 AM, Daniel Borkmann <[email protected]> wrote: > On 11/27/2015 11:01 AM, Burak Özalp wrote: > >> Thank you! I edited the data part and at most i could send 1.800.000 >> packets per second. Does it possible to increase the pps ? I think that >> netsniff-ng is a good alternative to netmap, especially about tcp_syn flood >> attacks. >> > > Hmm, likely depends on your network tuning and hardware, people have > reported to get ~6Mpps on TCP SYNs: > > https://www.mail-archive.com/[email protected]/msg87192.html > > What kernel/settings do you have for fine-tuning? > > > On 27-11-2015 11:13, Daniel Borkmann wrote: >> >>> On 11/27/2015 08:57 AM, Burak Özalp wrote: >>> >>>> Hi everyone; >>>> >>>> First of all, you've done great job with netsniff-ng!Congrulations! >>>> I want to use trafgen to simulate an syn_flood attack. In --help, i saw >>>> that >>>> >>>> " trafgen --dev eth0 --conf tcp_syn.cfg -u `id -u bob` -g `id -g bob`" >>>> >>>> command. Could you please share tcp_syn.cfg file? >>>> >>> >>> Did you try: >>> >>> trafgen -e > tcp_syn.cfg >>> >>> It has a built-in example for getting started. You can test it with: >>> >>> trafgen -e | trafgen -i - -o eth0 --cpp -n 1 >>> >>> If you want to analyse the packet on TX (a la wireshark), you need to: >>> >>> trafgen -e | trafgen -i - -o eth0 --qdisc-path --cpp -n 1 >>> >>> Cheers, >>> Daniel >>> >> >> > -- > You received this message because you are subscribed to the Google Groups > "netsniff-ng" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
