topic Re: Generating L4 Traffic in Web Security

Generating L4 Traffic

sjmeyers_ironport — Thu, 17 May 2007 12:01:32 GMT

Hi Guys,

Have just setup the S650 any ideas on how to generate malware traffic without installing malware internally?

Cheers

Steve

MalWare Generating Tool

DaltonHamilton_ironport — Wed, 06 Feb 2008 01:06:35 GMT

I've written an OSX application that acts as a web-crawler. I point it at a single web-site and it takes off (with certain control paramaters). If you point it to a questionable starting point, within minutes your S-Series will start showing all sorts of malware and other L4TM stats.
Again the application runs on Mac OSX so if you have a Mac and want the app you can email me at dalton@ironport.com.

thanks
Dalton Hamilton
IronPort Cisco

Re: Generating L4 Traffic

conorgeraghty_ironport — Fri, 24 Apr 2009 19:39:24 GMT

you mention that you have a site that can provide testing capabilities for IronPort. I do not have a MAC, do you know of another method whereby I can generate malware and other L4TM stats so that I can confirm my device is working.

Cheers

Re: Generating L4 Traffic

jowolfer — Tue, 28 Apr 2009 00:03:08 GMT

You should be able to just telnet to a forbidden site. Such as:

telnet ieplugin.com 80

This will create a TCP socket with this malware server and the L4TM will pick it up and block / monitor it accordingly.

Since you are not using a browser, you are safe.