3 ms·

I was at first excited about an undergraduate program that would have homeworks like this, then I saw the PhD tag. Something like scapy is perfect for this, I'

I was at first excited about an undergraduate program that would have homeworks like this, then I saw the PhD tag. Something like scapy is perfect for this, I'm not sure about the speed though.

acveilleux 11y ago
Should be fairly fast still in low traffic volume mode. The challenge is doing at scale. With low volume traffic, the code spends most of it's time blocked waiting for the next packet so the response is very quick. With high volumes, especially high volume of small packets, the code can get seriously backlogged and even miss packets altogether if the raw interface isn't serviced fast enough. H/W acceleration is needed to do this at backbone volumes. Once upon a time (over 10 years ago) I was working in the field of high-volume NIDS and keeping up with (then blazing fast) GiGE LAN volumes was very challenging with the CPU alone back then. And that was with tuned rule sets / minimal pre-processors / no other I/O in the hot path.
bonyt 11y ago
I took the undergraduate version of this class (at Stony Brook), the homework assignments were similar (usually, just the graduate version with a slightly lower bar to success - I partnered with a grad student so I had to do the graduate version.) Our assignments were (1) a toy implementation of RSA, complete with the ability to generate SSL certificates (so, ASN.1 encoding, etc) using only a bignum library and (2) implementing a known buffer overflow attack on an old version of sendmail. ( http://web.nvd.nist.gov/view/vuln/detail?vulnId=CAN-2002-1337 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CAN-2002-133... ) https://web.archive.org/web/20140106173814/http://www.cs.stonybrook.edu/~mbaig/courses/cse509ta/project2.html https://web.archive.org/web/20140106173814/http://www.cs.sto...
schneidmaster 11y ago
The hints at the bottom recommend using scapy (along with a few other libraries).

I was at first excited about an undergraduate program that would have homeworks like this, then I saw the PhD tag. Something like scapy is perfect for this, I'm not sure about the speed though.

acveilleux 11y ago

Should be fairly fast still in low traffic volume mode. The challenge is doing at scale. With low volume traffic, the code spends most of it's time blocked waiting for the next packet so the response is very quick. With high volumes, especially high volume of small packets, the code can get seriously backlogged and even miss packets altogether if the raw interface isn't serviced fast enough. H/W acceleration is needed to do this at backbone volumes. Once upon a time (over 10 years ago) I was working in the field of high-volume NIDS and keeping up with (then blazing fast) GiGE LAN volumes was very challenging with the CPU alone back then. And that was with tuned rule sets / minimal pre-processors / no other I/O in the hot path.

bonyt 11y ago

I took the undergraduate version of this class (at Stony Brook), the homework assignments were similar (usually, just the graduate version with a slightly lower bar to success - I partnered with a grad student so I had to do the graduate version.) Our assignments were (1) a toy implementation of RSA, complete with the ability to generate SSL certificates (so, ASN.1 encoding, etc) using only a bignum library and (2) implementing a known buffer overflow attack on an old version of sendmail. ( http://web.nvd.nist.gov/view/vuln/detail?vulnId=CAN-2002-1337 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CAN-2002-133... ) https://web.archive.org/web/20140106173814/http://www.cs.stonybrook.edu/~mbaig/courses/cse509ta/project2.html https://web.archive.org/web/20140106173814/http://www.cs.sto...

schneidmaster 11y ago

The hints at the bottom recommend using scapy (along with a few other libraries).