chigirin / slowhttptest Goto Github PK

- What steps will reproduce the problem?

running a test like 
slowhttptest -c 2000 -X -r 200 -w 512 -y 1024 -n 5 -z 32 -k 8 -u http://testurl 
-p 10 -l 350 

Then monitoring sowhttptest CPU usage with top shows that usage start around 
30% during the connections ramping up phase but when reaching the DDOs state 
then i see a 99% CPU use and my laptop runs hot.

If i use a tool like cpulimit to artificially limit the CPU use of slowhttptest 
to something like 20% it results in a same level of efficiency aka my test url 
is still DOSed, indicating that slowhttptest may not really need to use all 
this power.




- What version of the product are you using? On what operating system?

tested with last release and last trunk on fedora 16 64bit. My laptop is quite 
powerful, it's a core i7 sandybrige. When runnin slowhttptest the CPU 
overclocks itself to 3.4Ghz in order to accomodate the 99% usage. If limited to 
20% my CPU is able to stay cool and limits its clock to a more usual clock 
speed.

Add IP v6 support

Compilation fails since 1.5 and later revisions (281 at this time) :

Checked out revision 281.
[sheepdestroyer@sheepora ~]$ cd slowhttptest-read-only/
[sheepdestroyer@sheepora slowhttptest-read-only]$ ./configure
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking for g++... g++
checking whether the C++ compiler works... yes
checking for C++ compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C++ compiler... yes
checking whether g++ accepts -g... yes
checking for style of include used by make... GNU
checking dependency style of g++... gcc3
checking for gcc... gcc
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... gcc3
checking for SSL_library_init in -lssl... yes
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking fcntl.h usability... yes
checking fcntl.h presence... yes
checking for fcntl.h... yes
checking limits.h usability... yes
checking limits.h presence... yes
checking for limits.h... yes
checking netdb.h usability... yes
checking netdb.h presence... yes
checking for netdb.h... yes
checking netinet/in.h usability... yes
checking netinet/in.h presence... yes
checking for netinet/in.h... yes
checking for stdlib.h... (cached) yes
checking for string.h... (cached) yes
checking sys/socket.h usability... yes
checking sys/socket.h presence... yes
checking for sys/socket.h... yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking for unistd.h... (cached) yes
checking for stdbool.h that conforms to C99... yes
checking for _Bool... yes
checking for an ANSI C-conforming const... yes
checking for size_t... yes
checking whether time.h and sys/time.h may both be included... yes
checking sys/select.h usability... yes
checking sys/select.h presence... yes
checking for sys/select.h... yes
checking for sys/socket.h... (cached) yes
checking types of arguments for select... int,fd_set *,struct timeval *
checking for vprintf... yes
checking for _doprnt... no
checking for atexit... yes
checking for gettimeofday... yes
checking for poll... yes
checking for select... yes
checking for socket... yes
checking for strerror... yes
checking for strstr... yes
checking for strtol... yes
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating man/Makefile
config.status: creating config.h
config.status: executing depfiles commands
[sheepdestroyer@sheepora slowhttptest-read-only]$ make
 cd . && /bin/sh /home/sheepdestroyer/slowhttptest-read-only/missing --run automake-1.11 --foreign
aclocal.m4:16: warning: this file was generated for autoconf 2.67.
You have another version of autoconf.  It may work, but is not guaranteed to.
If you have problems, you may need to regenerate the build system entirely.
To do so, use the procedure documented by the package, typically `autoreconf'.
configure.ac:6: version mismatch.  This is Automake 1.11.3,
configure.ac:6: but the definition used by this AM_INIT_AUTOMAKE
configure.ac:6: comes from Automake 1.11.1.  You should recreate
configure.ac:6: aclocal.m4 with aclocal and run automake again.
WARNING: `automake-1.11' is probably too old.  You should only need it if
         you modified `Makefile.am', `acinclude.m4' or `configure.ac'.
         You might want to install the `Automake' and `Perl' packages.
         Grab them from any GNU archive site.
CDPATH="${ZSH_VERSION+.}:" && cd . && /bin/sh 
/home/sheepdestroyer/slowhttptest-read-only/missing --run autoconf
/bin/sh ./config.status --recheck
running CONFIG_SHELL=/bin/sh /bin/sh ./configure --no-create --no-recursion
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /usr/bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking for g++... g++
checking whether the C++ compiler works... yes
checking for C++ compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C++ compiler... yes
checking whether g++ accepts -g... yes
checking for style of include used by make... GNU
checking dependency style of g++... gcc3
checking for gcc... gcc
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... gcc3
checking for SSL_library_init in -lssl... yes
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking fcntl.h usability... yes
checking fcntl.h presence... yes
checking for fcntl.h... yes
checking limits.h usability... yes
checking limits.h presence... yes
checking for limits.h... yes
checking netdb.h usability... yes
checking netdb.h presence... yes
checking for netdb.h... yes
checking netinet/in.h usability... yes
checking netinet/in.h presence... yes
checking for netinet/in.h... yes
checking for stdlib.h... (cached) yes
checking for string.h... (cached) yes
checking sys/socket.h usability... yes
checking sys/socket.h presence... yes
checking for sys/socket.h... yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking for unistd.h... (cached) yes
checking for stdbool.h that conforms to C99... yes
checking for _Bool... yes
checking for an ANSI C-conforming const... yes
checking for size_t... yes
checking whether time.h and sys/time.h may both be included... yes
checking sys/select.h usability... yes
checking sys/select.h presence... yes
checking for sys/select.h... yes
checking for sys/socket.h... (cached) yes
checking types of arguments for select... int,fd_set *,struct timeval *
checking for vprintf... yes
checking for _doprnt... no
checking for atexit... yes
checking for gettimeofday... yes
checking for poll... yes
checking for select... yes
checking for socket... yes
checking for strerror... yes
checking for strstr... yes
checking for strtol... yes
configure: creating ./config.status
 /bin/sh ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating man/Makefile
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing depfiles commands
(CDPATH="${ZSH_VERSION+.}:" && cd . && /bin/sh 
/home/sheepdestroyer/slowhttptest-read-only/missing --run autoheader)
rm -f stamp-h1
touch config.h.in
cd . && /bin/sh ./config.status config.h
config.status: creating config.h
config.status: config.h is unchanged
make  all-recursive
make[1]: Entering directory `/home/sheepdestroyer/slowhttptest-read-only'
Making all in src
make[2]: Entering directory `/home/sheepdestroyer/slowhttptest-read-only/src'
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowhttptestmain.o -MD -MP -MF 
.deps/slowhttptestmain.Tpo -c -o slowhttptestmain.o slowhttptestmain.cc
mv -f .deps/slowhttptestmain.Tpo .deps/slowhttptestmain.Po
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowhttptest.o -MD -MP -MF 
.deps/slowhttptest.Tpo -c -o slowhttptest.o slowhttptest.cc
slowhttptest.cc: In member function ‘bool 
slowhttptest::SlowHTTPTest::run_test()’:
slowhttptest.cc:953:30: error: ‘usleep’ was not declared in this scope
make[2]: *** [slowhttptest.o] Error 1
make[2]: Leaving directory `/home/sheepdestroyer/slowhttptest-read-only/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/sheepdestroyer/slowhttptest-read-only'
make: *** [all] Error 2

What steps will reproduce the problem?
1. Any https target

run_test:initial -1 of 180 bytes sent on slow post socket 4:

should be replaced by connection in progress in log file.

What steps will reproduce the problem?
1. make

What is the expected output? What do you see instead?
./configure runs successfully, however, multiple compile errors after running 
make.  Missing include files.

What version of the product are you using? On what operating system?
Using slowhttptest version 1.4 on Arch Linux using gcc 4.7.

Please provide any additional information below.

After running make:

make  all-recursive
make[1]: Entering directory `/home/phil/slowhttptest-1.4'
Making all in src
make[2]: Entering directory `/home/phil/slowhttptest-1.4/src'
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowhttptestmain.o -MD -MP -MF 
.deps/slowhttptestmain.Tpo -c -o slowhttptestmain.o slowhttptestmain.cc
slowhttptestmain.cc: In function 'bool parse_int(int&, long int)':
slowhttptestmain.cc:114:21: error: 'optarg' was not declared in this scope
slowhttptestmain.cc:116:50: error: 'optopt' was not declared in this scope
slowhttptestmain.cc:120:57: error: 'optopt' was not declared in this scope
slowhttptestmain.cc: In function 'int main(int, char**)':
slowhttptestmain.cc:170:78: error: 'getopt' was not declared in this scope
slowhttptestmain.cc:224:23: error: 'optarg' was not declared in this scope
slowhttptestmain.cc:271:40: error: 'optopt' was not declared in this scope
make[2]: *** [slowhttptestmain.o] Error 1
make[2]: Leaving directory `/home/phil/slowhttptest-1.4/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/phil/slowhttptest-1.4'
make: *** [all] Error 2


After including "#include <getopt.h>" in slowhttptestmain.cc:

make  all-recursive
make[1]: Entering directory `/home/phil/slowhttptest-1.4'
Making all in src
make[2]: Entering directory `/home/phil/slowhttptest-1.4/src'
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowhttptestmain.o -MD -MP -MF 
.deps/slowhttptestmain.Tpo -c -o slowhttptestmain.o slowhttptestmain.cc
mv -f .deps/slowhttptestmain.Tpo .deps/slowhttptestmain.Po
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowhttptest.o -MD -MP -MF 
.deps/slowhttptest.Tpo -c -o slowhttptest.o slowhttptest.cc
slowhttptest.cc: In member function 'bool 
slowhttptest::SlowHTTPTest::run_test()':
slowhttptest.cc:873:30: error: 'usleep' was not declared in this scope
make[2]: *** [slowhttptest.o] Error 1
make[2]: Leaving directory `/home/phil/slowhttptest-1.4/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/phil/slowhttptest-1.4'
make: *** [all] Error 2

After including "#include <unistd.h>" in slowhttptestmain.cc:

make  all-recursive
make[1]: Entering directory `/home/phil/slowhttptest-1.4'
Making all in src
make[2]: Entering directory `/home/phil/slowhttptest-1.4/src'
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowhttptest.o -MD -MP -MF 
.deps/slowhttptest.Tpo -c -o slowhttptest.o slowhttptest.cc
mv -f .deps/slowhttptest.Tpo .deps/slowhttptest.Po
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowsocket.o -MD -MP -MF 
.deps/slowsocket.Tpo -c -o slowsocket.o slowsocket.cc
slowsocket.cc: In member function 'void slowhttptest::SlowSocket::close()':
slowsocket.cc:268:3: error: '::close' has not been declared
make[2]: *** [slowsocket.o] Error 1
make[2]: Leaving directory `/home/phil/slowhttptest-1.4/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/phil/slowhttptest-1.4'
make: *** [all] Error 2

After including "#include <unistd.h>" in slowsocket.cc

make  all-recursive
make[1]: Entering directory `/home/phil/slowhttptest-1.4'
Making all in src
make[2]: Entering directory `/home/phil/slowhttptest-1.4/src'
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowhttptest.o -MD -MP -MF 
.deps/slowhttptest.Tpo -c -o slowhttptest.o slowhttptest.cc
mv -f .deps/slowhttptest.Tpo .deps/slowhttptest.Po
g++ -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT slowsocket.o -MD -MP -MF 
.deps/slowsocket.Tpo -c -o slowsocket.o slowsocket.cc
mv -f .deps/slowsocket.Tpo .deps/slowsocket.Po
g++  -g -O2  -L/usr/local/lib -lssl -o slowhttptest slowhttptestmain.o 
slowhttptest.o slowsocket.o slowstats.o slowurl.o slowlog.o text-generator.o 
range-generator.o  -lssl 
make[2]: Leaving directory `/home/phil/slowhttptest-1.4/src'
Making all in man
make[2]: Entering directory `/home/phil/slowhttptest-1.4/man'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/home/phil/slowhttptest-1.4/man'
make[2]: Entering directory `/home/phil/slowhttptest-1.4'
make[2]: Leaving directory `/home/phil/slowhttptest-1.4'
make[1]: Leaving directory `/home/phil/slowhttptest-1.4'

Success!

I have prepared the slowhttptest Debian package. I'm just Debian Maintainer has 
no rights to upload new package to Debian but the package could be uploaded to 
Debian via sponsoring method, Debian Developer should review it.

BTW, The lintian (Debian package checker) has warned me that there are a few 
warnings in the manpage file.

I have fixed it, patch is attached.

Please review

It is not possible to build slowhttptest if libssl.so is not in the default 
library search path or /usr/local/bin. ./configure works as intended when 
started with CPPFLAGS and LDFLAGS, e.g. 

LDFLAGS=-Wl,-rpath,/home/foo/buildlib\ -L/home/foo/build//lib 
CPPFLAGS=-I/home/foo/build/include ./configure --prefix=/home/foo/slowhttptest/

and the build proceeds until linking finally fails. It turns out that 
src/Makefile.am explicitly removes CFLAGS and LDFLAGS. Instead of

CFLAGS=-Wall -I/usr/local/include
LDFLAGS=-L/usr/local/lib -lssl


it should probably set

CFLAGS=@CFLAGS@
CFLAGS+=-Wall -I/usr/local/include
LDFLAGS=@LDFLAGS@
LDFLAGS+=-L/usr/local/lib -lssl

or 

CFLAGS=@CFLAGS@ -Wall -I/usr/local/include
LDFLAGS=@LDFLAGS@ -L/usr/local/lib -lssl

It would be nice if you add the original and complete license as text file 
(COPYING) to the source files. Thanks.

What steps will reproduce the problem?
1. slowhttptest -c 1000 -u http://[2001:8db:aaaa:1::2]
2.
3.

What is the expected output? What do you see instead?
Error in getaddrinfo: Servname not supported for ai_socktype
Sun Mar 30 14:24:01 2014:main: error setting up slow HTTP test

What version of the product are you using? On what operating system?
1.6 on ubuntu

Please provide any additional information below.

the tool does not seem to support ipv6 servers :(, i have tried making an 
change to your code (modifying the ai_socktype and ai_family) and then 
recompilling the tool. i still received the same output

support web proxy for probe connection

Tool will not compile. States "OpenSSL missing". Output below:

root@bt:/pentest/web/slowhttptest-1.2# ./configure 
-prefix=/pentest/web/slowhttptest-1.2
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking for g++... g++
checking whether the C++ compiler works... yes
checking for C++ compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C++ compiler... yes
checking whether g++ accepts -g... yes
checking for style of include used by make... GNU
checking dependency style of g++... gcc3
checking for gcc... gcc
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking dependency style of gcc... gcc3
checking for SSL_library_init in -lssl... no
configure: error: OpenSSL is missing

root@bt:/pentest/web/slowhttptest-1.2# openssl
OpenSSL>

Just a thought, why doy you need it?
I'd suggest an option to disable it with configure

Hi

tested today the last revision but it seems the problem is not solved :

#slowhttptest -c 6000 -X -r 200 -w 512 -y 1024 -n 5 -z 32 -k 8 -u 
http://testurl -p 10 -l 6000

- during initialization phase the cpu stays at around 35% and pending 
connections ramp up :

Fri Sep 21 13:26:37 2012:slow HTTP test status on 30th second:
initializing:        0
pending:             3527
connected:           28
error:               0
closed:              0
service available:   NO
Fri Sep 21 13:26:42 2012:slow HTTP test status on 35th second:
initializing:        0
pending:             4133
connected:           28
error:               0
closed:              0
service available:   NO
Fri Sep 21 13:26:47 2012:slow HTTP test status on 40th second:
initializing:        0
pending:             4781
connected:           28
error:               0
closed:              0
service available:   NO
Fri Sep 21 13:26:52 2012:slow HTTP test status on 45th second:
initializing:        0
pending:             5412
connected:           28
error:               0
closed:              0
service available:   NO
Fri Sep 21 13:26:57 2012:slow HTTP test status on 50th second:
initializing:        0
pending:             5972
connected:           28
error:               0
closed:              0
service available:   NO


- but after all 6000 connections are in pending mode, the cpu usage is now 99% 
and closed connections start increasing:

Fri Sep 21 13:27:12 2012:slow HTTP test status on 65th second:
initializing:        0
pending:             5924
connected:           28
error:               0
closed:              48
service available:   NO
Fri Sep 21 13:27:17 2012:slow HTTP test status on 70th second:
initializing:        0
pending:             5364
connected:           28
error:               0
closed:              608
service available:   NO
Fri Sep 21 13:27:22 2012:slow HTTP test status on 75th second:
initializing:        0
pending:             4769
connected:           28
error:               0
closed:              1203
service available:   NO
Fri Sep 21 13:27:27 2012:slow HTTP test status on 80th second:
initializing:        0
pending:             4193
connected:           28
error:               0
closed:              1779
service available:   NO
Fri Sep 21 13:27:32 2012:slow HTTP test status on 85th second:
initializing:        0
pending:             3606
connected:           28
error:               0
closed:              2366
service available:   NO
Fri Sep 21 13:27:37 2012:slow HTTP test status on 90th second:
initializing:        0
pending:             2997
connected:           28
error:               0
closed:              2975
service available:   NO



- finally i reach a state where almost all connections whent from pending to 
closed, just 129 left and it stays that way for a long time with cpu at 99% and 
target DoSed:

Fri Sep 21 13:33:17 2012:slow HTTP test status on 430th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:22 2012:slow HTTP test status on 435th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:27 2012:slow HTTP test status on 440th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:32 2012:slow HTTP test status on 445th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:37 2012:slow HTTP test status on 450th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:42 2012:slow HTTP test status on 455th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:47 2012:slow HTTP test status on 460th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:52 2012:slow HTTP test status on 465th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:33:57 2012:slow HTTP test status on 470th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:34:02 2012:slow HTTP test status on 475th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:34:07 2012:slow HTTP test status on 480th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:34:12 2012:slow HTTP test status on 485th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO
Fri Sep 21 13:34:17 2012:slow HTTP test status on 490th second:
initializing:        0
pending:             129
connected:           28
error:               0
closed:              5843
service available:   NO

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.


hello i have problem 
root@bt:~/slowhttptest-1.1# ./configure –prefix=PREFIX
configure: error: invalid variable name: `–prefix'
how to fix this

Add a probe socket to monitor the actual DoS on the server, e.g. monitor if 
server is able to serve normal, not slow request.

Build failure on FreeBSD

select() is limitied to 1024 file descriptors. 
Switch to poll(). 

What steps will reproduce the problem?
After installation just enter "slowhttptest -u https://www.google.at or 
anything of the Wiki tutorials. 

What is the expected output? What do you see instead?
root@xfs:~# slowhttptest -u https://www.google.at
Option - requires an argument.
Try 'slowhttptest -h' for more information


What version of the product are you using? On what operating system?
newest version. clean Xubuntu

I can't compile the program. Log in attach.

Number of connections capped at 4090 no matter what server I test on. Why does 
it not go higher than 4090?

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.