fragroute intercepts, modifies, and rewrites egress
traffic, implementing most of the attacks described
in the Secure Networks "Insertion, Evasion, and
Denial of Service: Eluding Network Intrusion
Detection" paper. It features a simple ruleset
language to delay, duplicate, drop, fragment,
overlap, print, reorder, segment, source-route, or
otherwise monkey with all outbound packets
destined for a target host, with minimal support for
randomized or probabilistic behaviour. This tool was
written in good faith to aid in the testing of
intrusion detection systems, firewalls, and basic
TCP/IP stack behaviour.
