fuzzer tcp ip and firewall

Hi all. Anybody knows any fuzzer that works with tcp ip packets?
Im searching one fuzzer to audit the xp sp2 firewall. Ill try CIRT fuzzer but i dont know what port to use. Xp firewall like a network service has got any port?
Thx

You will need to check the ones that are available in BT and or the internet.

Just out of curiosity, what are you trying to do exactly that would require a TCP "fuzzer"?

Do you understand what your fuzzing requirements are? Are you trying to fuzz the fields in the IP or TCP headers, or do you actually want to send malformed data within TCP segments or UDP datagrams? Are you trying to see if certain oddly formed fields in the TCP or IP headers allow a firewall bypass?

Like you say. Im trying to see if certain oddly formed fields in the TCP or IP headers allow a firewall bypass. But i dont know exactly how to do it. Like you see, firewalls bypassing are my obsesion.

Perhaps try with Scapy then.

Hi, my question is how do i get to combine several evasion techniques to deliver a payload to a vulnerable host bypass the NIDS? Is there a way i could append a malformed payload from metasploit?

Thanks