[c-nsp] IKE exhaustion attack

[Ge Moua]

We got hit by this yesterday on one of our PIX/VPN gateways.


:-)
Regards,
Ge Moua | Email: moua0100 at umn.edu

Network Design Engineer
University of Minnesota | Networking & Telecommunications Services
2218 University Ave SE | Minneapolis, MN 55414-3029
Office: 612.626.2779 | Pager: 612.###.#### | Fax: 612.626.1818
 

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Luan Nguyen
Sent: Friday, July 28, 2006 1:57 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] IKE exhaustion attack

Hi all,
 How big is this IKE exhaustion attack
http://www.cisco.com/warp/public/707/cisco-sr-20060726-ike.shtml ?
Is there any tools to generate IKE packet?  can IXIA generate IKE packets
with transform-set?
I saw this one http://tattoo.sourceforge.net/iplayer/ but it looks somewhat
overwhelming
I also read about the Rapid7 Striker ISAKMP Protocol Test Suite but couldn't
find it anywhere

Thanks.

Luan

Sorry for the wrong subject on the other thread
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/