Evading NIDS

[kanto.86]

Hi everybody

I'm trying to apply some evasion techniques to snort and other NIDS (nothing special: TTL, Fragmentation reassembly timeout, Overlapping segments).

But, to test the fragmentation, I need to disclose the connection timeout of IDS and target OS (I remember that windows and linux machines have different timeout).

So....Someone know if is it possible to perform this task with shell commands (perhaps hping and tcpdump)?

Thanks !

[kanto.86]

Ok I found it:

fragtest frag-timeout ipaddress