Mailing List Archive: Amount of attacks

On Thu, Mar 24, 2005 at 11:33:29AM +0100, David Guerrero
wrote:

> i'm trying to do an IDS evaluation using nessus, and i
> need to know the amount of malicious packets sent during
> the test. Is there a way of doing this?

Do you mean after the fact or a priori? After the fact,
sniff the network traffic generated by nessusd; a priori,
it's not feasible since the actual attacks depend on the
plugins you enable, the preferences you select, what hosts
and port are discovered, ...

George

--
theall@tenablesecurity.com