I need to set up an scenario where an attacker DoS attacks port 80 of an server while snort and others users try to connect to port 80 at the same time. Something like this:
- 1000 connections to port 80
- 800 analyzed by Snort
- 750 detected like DoS attack by Snort
How can I get these values? What tools I need besides snort?