This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Packet Testing Tool

Hi Guys,

does anyone know if there's a tool for probing / simulating ip-packets against the Firewall-Rules, e.g.:
simulate packet on internal if with source-ip, source-port für dest.-ip and dest.-port

test if the setted rules allow that packet or net and perhaps if , which DNAT-rule and network-security-rule allowes it?

this would make some things easier to test.

i still haven't a webinterface built-in-tool. does it perhaps exist?

if not would be nice to get it :-).

thanks a lot.


This thread was automatically locked due to age.
Parents
  • SCAPY could do what you want, but you have to learn how to 'program' it.

    NMAP could do at least some of it, and would probably be easier.

    tcpreplay can playback previously captured tcpdumps.

    I believe setting each PacketFilter rule in Astaro to log may help you identify which rule is allowing which traffic.

    Barry
Reply
  • SCAPY could do what you want, but you have to learn how to 'program' it.

    NMAP could do at least some of it, and would probably be easier.

    tcpreplay can playback previously captured tcpdumps.

    I believe setting each PacketFilter rule in Astaro to log may help you identify which rule is allowing which traffic.

    Barry
Children