FreeS/WAN survey of testing tools
Keywords: Linux, IPsec, VPN, security, FreeSWAN, testing, nettools

# Survey of testing tools

## http://freshmeat.net/projects/apsend

About: APSEND is a TCP/IP packet sender to test firewalls and other network applications. It also includes a syn flood option, the land DoS attack, a DoS attack against tcpdump running on a UNIX-based system, a UDP-flood attack, and a ping flood option. It currently supports the following protocols: IP, TCP, UDP, ICMP, Ethernet frames and you can also build any other type of protocol using the generic option. The scripting language of apsend is already written, but not yet public.

STATUS: The public web site seems to have died

## http://freshmeat.net/projects/hping2

About: hping2 is a network tool able to send custom ICMP/UDP/TCP packets and to display target replies like ping does with ICMP replies. It handles fragmentation and arbitrary packet body and size, and can be used to transfer files under supported protocols. Using hping2, you can: test firewall rules, perform [spoofed] port scanning, test net performance using different protocols, packet size, TOS (type of service), and fragmentation, do path MTU discovery, tranfer files (even between really Fascist firewall rules), perform traceroute-like actions under different protocols, fingerprint remote OSs, audit a TCP/IP stack, etc. hping2 is a good tool for learning TCP/IP.

This utility has rather complicated usage and no man page at present. The documentation is supposed to be in HPING2-HOWTO, but that file seems to be absent.

## http://freshmeat.net/projects/icmpush

About: ICMPush is a tool that send ICMP packets fully customized from command line. This release supports the ICMP error types Unreach, Parameter Problem, Redirect and Source Quench and the ICMP information types Timestamp, Address Mask Request, Information Request, Router Solicitation, Router Advertisement and Echo Request. Also supports ip-spoofing, broadcasting and other useful features. It's really a powerful program for testing and debugging TCP/IP stacks and networks.

## http://freshmeat.net/projects/isic

ISIC sends randomly generated packets to a target computer. Its primary uses are to stress-test an IP stack, to find leaks in a firewall, and to test the implementation of IDSes and firewalls. The user can specify how often the packets will be frags, have IP options, TCP options, an urgent pointer, etc. Programs for TCP, UDP, ICMP, IP w/ random protocols, and random ethernet frames are included.

## http://freshmeat.net/projects/sendpacket

Send Packet is a small but powerful program to test how your network responds to specific packet content. Via a config file and/or command line parameters, you can forge (modify the headers of) your own TCP/UDP/ICMP/IP packets and send them through your network. Also, following the Easy Sniffer modular philosophy, you can specify wich modules you'd like to build.

## http://freshmeat.net/projects/aicmpsend/

AICMPSEND is an ICMP sender with many features including ICMP flooding and spoofing. All ICMP flags and codes are implemented. You can use this program for various DoS attacks, for ICMP flooding and to test firewalls.

## http://freshmeat.net/projects/sendip/

SendIP is a command-line tool to send arbitrary IP packets. It has a large number of options to specify the content of every header of a RIP, TCP, UDP, ICMP, or raw IPv4/IPv6 packet. It also allows any data to be added to the packet. Checksums can be calculated automatically, but if you wish to send out wrong checksums, that is supported too.

## http://laurent.riesterer.free.fr/gasp/index.html

GASP stands for 'Generator and Analyzer System for Protocols'. It allows you to decode and encode any protocols you specify.

The main use is probably to test networks applications : you can construct packets by hand and test the behavior of your program when facing some strange packets. But you can image a lot of other application : e.g. manipulating graphical file or executable headers. Just describe the specification of the structured data.

GASP is divided in two parts : a compiler which take the specification of the protocols and generate the code to handle it, this code is a new Tcl command as GASP in build upon Tcl/Tk and extends the scripting facilities provided by Tcl.

## http://pdump.lucidx.com/

## http://freshmeat.net/projects/aps/

## http://freshmeat.net/projects/netsed/

## http://www.via.ecp.fr/~bbp/netsh/

## http://www.elxsi.de/

## http://www.laurentconstantin.com/us/lcrzo/

## http://www.joedog.org/libping/index.html

## http://feynman.mme.wilkes.edu/projects/xNetTools/

## http://freshmeat.net/projects/pktsrc/

## http://freshmeat.net/projects/lcrzoex/

## http://freshmeat.net/projects/rain/

rain is a powerful packet builder for testing the stability of hardware and software. Its features include support for all IP protocols and the ability to fully customize the packets it sends.

(Note, this is not the same as /usr/games/rain)

## http://freshmeat.net/projects/libnet

## http://freshmeat.net/projects/pftp

## http://freshmeat.net/projects/pung

pung is a simple server tester. It tries to connect via TCP/IP to a server but does not transfer any data. It is meant to be used in scripts that check a list of servers, helping to detect certain common problems.

## http://freshmeat.net/projects/thesunpacketshell

## http://freshmeat.net/projects/webperformancetrainer

## http://sourceforge.net/projects/va-ctcs

## http://synscan.nss.nu/programs.php

## http://sourceforge.net/projects/va-ctcs

## http://freshmeat.net/projects/ettercap/

## http://www.dtek.chalmers.se/~d3august/xt/index.html

## http://www.opersys.com/LTT/

## http://packetstorm.securify.com/DoS/indexdate.shtml

## TCP/IP noise simulator