leader 回复于:2003-11-26 14:51:45 |
apache自己的ab不就是一个嘛。在它的bin里面编译完就有。
Foundstone的blast也是一个。 [url]http://www.foundstone.com/resources/freetools.htm[/url] |
blueant0 回复于:2003-11-26 15:16:16 |
多谢楼上,没用过。我去研究研究 |
blueant0 回复于:2003-11-26 16:01:21 |
我在Foundstone找到了一个叫做FSMax的测试软件感觉比Blast好些,但是没有找到并发用户的设置,请问能不能给解释解释。
FSMax v2.0 - Copyright(c) 1999-2003, Foundstone, Inc. Server stress tester for buffer overflow/DOS conditions Usage - fsmax /s < script.txt > results.txt /s = reads script from stdin /? = Help Script Format host:[ip address],[port],[min],[max] = host parameters Additional host parameters in order: timeout - ms to wait for socket response - default = 0 delay - ms to wait before sending commands- default = 250 pause - ms to wait before receiving - default = 0 retnum - number of CR/LF's to end buffer - default is one reopen - T/F reopen connection before each command norecv - T/F no receive after intial connect - default is off verbose - T/F verbose output- off by default trial - T/F display buffer w/o sending Command syntax c:[command text] = preloop commands lc:[command buffer] = loop commands c:[command text] = post loop command Script Example host:12.12.12.2,80,400,500,5000,250,0,2,true,true lc:GET /some * url/ lc:POST /some * url/ or a mail server example host:12.12.12.2,110,40,50,5000,1000,4000,1,false,true lc:user hac*ker lc:pass hack*pass Things to Know - First four host params are required, others are optional. - When using optional params, you must specify all except the last. - Min is the size of buffer to start testing at until Max is reached. - Timeout in milliseconds to wait on socket response - default 0 ms. - Delay in milliseconds before sending commands - default 250 ms. - By default, CR/LF are included. AddRet number defines CR/LF's to add. 0 = CR/LF's are not added in loop commands. 1 = CR/LF's are added to loop commands only. 2 = Double CR/LF's are added (useful in GET requests) - There is currently one preloop/loop/postloop command sequence. - Each section can have multiple commands. - Each command will be sent to the target host in sequence. - The loop commands will be repeated as a whole, max-min times. - Only the loop commands will send arbitrary buffers to the target. - The asterisk is the buffer place holder, spaces are preserved. - For a buffer of 30, your string will expand like this: 'GET /some - url/ HTTP/1.0' = 'GET /some NNNN url/ HTTP/1.0' 'GET /some*url/ HTTP/1.0' = 'GET /someNNNNNNurl/ HTTP/1.0' - Buffer size of 30 = 28 characters plus CR/LF. - Buffers with double CR/LF's send 26 characters. - Any/all commands are optional - add as many as you like. |
leader 回复于:2003-11-26 22:38:18 |
FSMax按它的设计意图,就是对Buffer Overflow有意义。对于Buffer Overflow来讲,它更关注的是Buffer的大小,也就是输入数据的长度,而非并发次数。所以它不支持并发测试。
仔细看了看Blast的Usage,似乎也只是个类似的工作。看来你只有用ab了。ab是支持并发的。我用过。只是效果一般。 坦白讲,我以前做IDS或FW测试时,并发一般都是用包发生器做的,而非软件实现的。当session太多时,有时PC会根本不继续新建session,而包发生器则不会。所以小试一把的话,ab可以试试,如果太大量的话,可以考虑多用几台机器,一起ab试试。呵。希望对你有帮助。 |
blueant0 回复于:2003-11-27 09:59:04 |
再次感谢楼上,还有一事要麻烦。就是有没有ab的usage?我看了看man不是很明白。连个example都没有 |
blueant0 回复于:2003-11-27 10:28:12 |
找到了一个讲解ab的文档
http://i18n.linux.net.cn/others/ApacheManual/programs/ab.html |
blueant0 回复于:2003-11-27 13:28:29 |
找了个webload 6.0听说好用,不过没找到license,哪位给帮帮忙?嘿嘿 |
geel 回复于:2003-11-27 16:08:14 |
用ab的话大部分时候是测试ab的性能而不是测试apache,呵呵。 |
blueant0 回复于:2003-11-28 15:09:22 |
那请高人指点一下咯 |
srjiao 回复于:2003-12-15 15:08:34 |
blueant0你能给我一份 webload6.0么?我只找到了webload6.0的破解文件,我们交换一下阿 |
srjiao 回复于:2003-12-15 15:10:11 |
我的mail,srjiao@126.com,和我联系阿 |
wooyc 回复于:2003-12-16 14:43:30 |
不知道,你们听说过Web Application Stress没有,是微软的产品。
http://www.vchelp.net/itbookreview/view_paper.asp?paper_id=616 上面这个链接是讲如何使用的,软件是免费的。 http://www.microsoft.com/downloads/details.aspx?FamilyID=e2c0585a-062a-439e-a67d-75a89aa36495&displaylang=en 上面这个是微软的下载地址。 |