Table Of Contents

Previous topic

1.7. Analysis Tools

Next topic

2. Extending SEER

This Page

1.8. Attack Tools

1.8.1. Flooder

Available for: Linux, BSD

The flooder agent responds to object type FLOODER

NODES(g)
set the nodes that will become flood sources
interface
IP of interface to init libnet with (REQUIRED ON WINDOWS, uncommon for linux or bsd)
dst
the target base address (REQUIRED)
dstmask
the mask to use to randomize the target (default is 255.255.255.255)
src
the source base address (defaults to the local address)
srcmask
the mask to use to randomize the source (default is 255.255.255.0)
proto
the protocol of the attack packets
lengthmin
the minimum data size of the attack packets
lengthmax
the maximum data size of the attack packets
ratetype
flat, rampup, rampdown, pulse, or ramppulse
highrate
pkts/sec when at highstate
hightime
milliseconds to spend at high state
lowrate
pkts/sec when at low state
lowtime
milliseconds to spend at low state
riseshape
shape of the rising ramp
risetime
milliseconds to spend ramping up to high state
fallshape
shape of the falling ramp
falltime
milliseconds to spend ramping down to low rate
sportmin
the minimum sport for UDP/TCP packets
sportmax
the maximum sport for UDP/TCP packets
dportmin
the minimum dport for UDP/TCP packets
dportmax
the maximum dport for UDP/TCP packets
tcpflags
the flags to use for TCP packets
typemin
the minimum type for ICMP packets
typemax
the maximum type for ICMP packets
codemin
the minimum code for ICMP packets
codemax
the maximum code for ICMP packets
myatt = messaging.newGroup('FLOODER', 'attack1')
myatt.nodes = 'net1'
myatt.dst = 'net4'
myatt.ratetype = 'pulse'
myatt.lowrate = '300'
myatt.highrate = 1000',
myatt.lowtime = '20000',
myatt.hightime = '15000'
myatt.lengthmin = '200'
myatt.lengthmax = '200'
myatt.proto = 'UDP'
myatt.sportmin = '57'
myatt.sportmax = '57'
myatt.dportmax = '3000'
myatt.dportmin = '2000'
myatt.START()