Changes between Version 39 and Version 40 of GENIExperimenter/Tutorials/NFV/Ryu/HandlingIntrusionwithRyu-portscanning

Timestamp:

10/30/17 20:36:47 (7 years ago)

Author:

Nabeel Akhtar

Comment:

--

GENIExperimenter/Tutorials/NFV/Ryu/HandlingIntrusionwithRyu-portscanning

@@ -267 +267 @@
 3. Now we will generate traffic from the sources 1 (s1) to the destination node using iperf and see how it effects the CPU utilization at VNF1 and VNF2 running Snort IDS. Note that if we run multiple instances of iperf, we can generate significant load on the VNF instances. To run iperf client on a source, execute:
 
-''' iperf -u -c destination -t 500 & '''
+''' iperf -u -c destination -t 5000 & '''
 
 {{{
@@ -274 +274 @@
  <tr> 
 <td> <img src = "http://csr.bu.edu/rina/grw-bu2016/tutorial_files/image068.gif" > </td>
-<td>  <i>Note that you can run multiple instances of iperf by running <span style="background:#c0c0c0"> iperf -c destination -t 500 & </span> multiple times in s1 node. This flow lasts for 500 seconds. For this experiment, you may try to run 4-5 iperf instances to generate load of around 50% on both VNF1 and VNF2. To kill all the flows generated at a node, run <span style="background:#c0c0c0"> killall –v iperf </span> </i> 
+<td>  <i>Note that you can run multiple instances of iperf by running <span style="background:#c0c0c0"> iperf -c destination -t 5000 & </span> multiple times in s1 node. This flow lasts for 5000 seconds. For this experiment, you may try to run 4-5 iperf instances to generate load of around 50% on both VNF1 and VNF2. To kill all the flows generated at a node, run <span style="background:#c0c0c0"> killall –v iperf </span> </i> 
  </td></tr></table>
 }}} 
@@ -280 +280 @@
 == (7) Generate Intrusion Traffic ==
 
-1. In a separate window for source, ping destination: 
+1. We will generate attack traffic from source 2 (s2), so only s2 is blocked by the system. In a separate window for source 2 (s2), ping destination: 
 
 ''' ping destination'''
@@ -288 +288 @@
 2. Download the Port Scan attack generator file.
 
-''' wget !https://raw.githubusercontent.com/akhtarnabeel/public/master/AttackAnalyzer/PortScanAttack.sh '''
-        
+''' wget !https://raw.githubusercontent.com/akhtarnabeel/public/master/NFV-GENI/PortScanAttack.sh '''
+
 
 change file permissions so you can run it
@@ -312 +312 @@
 {{{
 #!html
-<img src="https://raw.githubusercontent.com/akhtarnabeel/public/master/Figures/output.png" hspace=20>
+<img src="https://github.com/akhtarnabeel/public/raw/master/NFV-GENI/Figures/output.png" hspace=20>
  }}}
 
@@ -323 +323 @@
 {{{
 #!html
-<img src="https://raw.githubusercontent.com/akhtarnabeel/public/master/Figures/sample.png" style="width:500px;" hspace=20>
+<img src="https://github.com/akhtarnabeel/public/raw/master/NFV-GENI/Figures/sample.png" style="width:500px;" hspace=20>
  }}}
 
@@ -330 +330 @@
 
 == (8) Re-run experiment without load balancer ==
-
 
 We will re-run the experiment without load balancer to see the effects of load balancer. Ideally, you should quickly detect attack using load balancer.