Thanks Aaron,
I just want to test if I send original IPsec packet(ESP in transport mod)
again would it be dropped or not. That's it. I know this (replay attack
protection) is done at IPsec layer. I just want to make sure if replay
packet gets dropped ot not. Is there any tool which can send Ipsec packet
again?
Thanks,
On Fri, Jun 15, 2012 at 10:55 PM, Aaron Turner <synfina...@gmail.com> wrote:
> Not sure exactly what "replay attack" you're looking for. At best,
> you could replay the exact original IPSec packet again, which should
> just be dropped on the floor. I'd suggest you look at tools like
> Metasploit or ask on security related mailing lists.
>
> Regards,
> Aaron
>
> On Fri, Jun 15, 2012 at 4:49 AM, isshed <isshed....@gmail.com> wrote:
> >> Hello All,
> >>
> >> I have implimented an application which supports IPsec ESP Transport
> mod.
> >> I want to test the replay attack. Is there any IPsec Replay attack
> >> generation tool availabe which can be used to test the scenario?
> >> Do I use tcpdump for the same? Can you please provide the info/method to
> >> do the same?
> >>
> >> Thanks,
> >> Isshed
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > Live Security Virtual Conference
> > Exclusive live event will cover all the ways today's security and
> > threat landscape has changed and how IT managers can respond. Discussions
> > will include endpoint security, mobile security and the latest in malware
> > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> > _______________________________________________
> > Tcpreplay-users mailing list
> > Tcpreplay-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
>
>
> --
> Aaron Turner
> http://synfin.net/ Twitter: @synfinatic
> http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix &
> Windows
> Those who would give up essential Liberty, to purchase a little temporary
> Safety, deserve neither Liberty nor Safety.
> -- Benjamin Franklin
> "carpe diem quam minimum credula postero"
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Tcpreplay-users mailing list
> Tcpreplay-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support
