Re: missing #includes in /usr/include headers (was RE: Generating SYN packets.)

2001-03-09 Thread Kris Kennaway
On Fri, Mar 09, 2001 at 12:08:17PM -0800, Jonathan Graehl wrote: > Specific to your problem: it seems that requires , > but does not #include it. n_long is defined in in_systm.h and used in ip_icmp.h > and ip.h (not tcp.h) I have complained without response (on freebsd-arch, maybe > not the ri

RE: generating SYN packets with /usr/ports/net/nemesis and sh

2001-03-09 Thread Jonathan Graehl
Replying to self (multiple personality disorder?): Once caveat ... if you're trying to simulate the resource-exhaustion effects of a true SYN flood (rather than simply testing the ability of your firewall / intrusion detection system to react to a flood), then you will need to prevent autogenerat

Re: missing #includes in /usr/include headers (was RE: Generating SYN packets.)

2001-03-09 Thread Dag-Erling Smorgrav
"Jonathan Graehl" <[EMAIL PROTECTED]> writes: > Specific to your problem: it seems that requires > , but does not #include it. n_long is defined in > in_systm.h and used in ip_icmp.h and ip.h (not tcp.h) I have > complained without response (on freebsd-arch, maybe not the right > place) of simila

generating SYN packets with /usr/ports/net/nemesis and sh

2001-03-09 Thread Jonathan Graehl
#!/bin/sh i=5; while [ $i -lt 50100 ]; do nemesis-tcp -S 209.68.199.246 -D 209.68.199.242 -fS -x $i -y 25; i=$(($i + 1)); done ... seems to work fine; a perl script would give a more legible for loop though ;) -- Jonathan Graehl email: [EMAIL PROTECTED] web: http://jonathan.graehl.org/

missing #includes in /usr/include headers (was RE: Generating SYN packets.)

2001-03-09 Thread Jonathan Graehl
: Friday, March 09, 2001 8:04 AM > To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' > Subject: Generating SYN packets. > > > Folks: > > Andreas Klemm, who ported cflowd to FreeBSD, suggested I use this vehicle to > see if I could get some help. > > I

Re: Generating SYN packets.

2001-03-09 Thread Robert Watson
Generally speaking, the most portable way to generate IP packets is to do so using the raw IP socket interface. However, I've also successfully generated packets using IPDIVERT, BPF, and custom kernel modules :-). I found the IPDIVERT performed quite nicely and was useful for exploring firewall

Re: Generating SYN packets.

2001-03-09 Thread Will Andrews
On Fri, Mar 09, 2001 at 08:03:58AM -0800, Walter Goralski wrote: > The missing piece has been DOS SYN attacks. I have the really common > "synk4.c" source that is all over the Web, but I get errors when I try to > compile it ("it's the linux includes" someone told me). Now, I last used my They're

Generating SYN packets.

2001-03-09 Thread Walter Goralski
Folks: Andreas Klemm, who ported cflowd to FreeBSD, suggested I use this vehicle to see if I could get some help. I am a course developer for Juniper Networks, and I have just written a 2-day advanced course on router firewall filters (this is one reason for the cflowd). We have participants i