[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IPSec test suite

To: Matthew Franz <mfranz@cisco.com>
Subject: Re: IPSec test suite
From: itojun@iijlab.net
Date: Tue, 10 Oct 2000 12:12:08 +0900
cc: Sandy Harris <sandy@storm.ca>, ipsec@lists.tislabs.com
In-reply-to: mfranz's message of Mon, 09 Oct 2000 21:08:01 GMT. <Pine.LNX.4.21.0010092048060.14530-100000@samara.cisco.com>
Sender: owner-ipsec@lists.tislabs.com


>> > I believe many IPsec implementations would benefit if there was
>> > a comprehensive suite of test cases available in an easily
>> > executable form that would look not only at the "normal" cases
>> > of IPsec and IKE connections but also ...
>> Methinks the route to it would be to modify one of the open source
>> IPSEC implementations. Even unmodified, one or more of them is
>> likely a good testing tool.
>IMHO a better path (because it is more portable) would be to add AH, ESP,
>IKE, et. al.  support to Libnet (http://www.packetfactory.net), which is a
>platform-independant API for generating various types of legal and illegal
>TCP/IP packets.  This avoids a Linux-*BSD holy war and allows non-open
>source Unices (and perhaps even Win32) to utilize such a toolset. 

	you may want to check www.tahi.org (TAHI project).
	they ship IPv6/IPsec (supports IPv4 too, I believe) conformance
	test suite as a free software.

itojun

References:

Re: IPSec test suite

From: Matthew Franz <mfranz@cisco.com>

Prev by Date: Re: Reliable delete notifies
Next by Date: Re: Reliable delete notifies
Prev by thread: Re: IPSec test suite
Next by thread: RE: IPSec test suite
Index(es):
- Main
- Thread