Mausezahn

From Wikipedia, the free encyclopedia

Mausezahn is a fast network traffic generator written in C which allows the user to craft nearly every possible and "impossible" packet. According to the author Mausezahn is a "closed source but free software".

Typical applications of Mausezahn include:

  • Testing or stressing IP multicast networks
  • Penetration testing of firewalls and IDS
  • Finding weaknesses in network software or appliances
  • Creation of malformed packets to verify whether a system processes a given protocol correctly
  • Didactical demonstrations as lab utility

Mausezahn allows to send an arbitrary sequence of bytes directly out of the network interface card. An integrated packet builder provides a simple command line interface for more complicated packets.

Contents

[edit] Features

As of version 0.25 Mausezahn supports the following features:[1]

  • VLAN tagging
  • MPLS label stacks
  • BPDU packets as used by the Spanning Tree Protocol
  • CDP messages
  • DNS messages
  • ARP messages
  • IP, UDP, and TCP header creation
  • ICMP packets
  • Address, port, and TCP sequence number sweeps
  • Random MAC or IP addresses, FQDN addresses
  • A very high packet transmission rate (approximately 100,000 packets per second)

A drawback of Mausezahn is that it only sends exactly the packet the user has specified. Therefore it is rather less suited for vulnerability audits where additional algorithms are required to detect open ports behind a firewall and to automatically evade Intrudion Detection Systems (IDS). However, a network administrator could implement audit routines via a bash script that utilizes Mausezahn for creating the actual packets. For more advanced audit tools see for example Nessus and Nmap.

[edit] Platforms

Mausezahn currently runs only on Linux systems (other platforms are planned).

[edit] References

[edit] External links