Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 709
  • Last Modified:

Fragment offset

I am designing packets to test IDS rules, how does one go about setting an offset of 2 or some other random number? I am currently using sendip to accomplish this task, I am assuming it will be the same for all other packet crafting utilities?

Thanks
0
progjm
Asked:
progjm
1 Solution
 
Dave HoweSoftware and Hardware EngineerCommented:
for fragments, its not the offset that counts (although NEGATIVE offsets can have significant benefits in rule penetration) but the final packet after reconstruction.

for tools like nemesis, you can usually supply the offset as a command line parameter, passing the actual payload as a file reference. that makes both trivially scriptable.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now