Methods / L4 / UDP-RAND
L4 · NetworkVolumetricUDPSignature-EvasionSpoofable
UDP-RAND stress test
Sends 64-byte randomized UDP payloads that change every packet, validating whether your filters rely on static signatures that a varying payload can slip past.
How it works
Every datagram carries a freshly randomized 64-byte payload, so no two packets look alike on the wire. This defeats simple static-signature matching and pattern-based drop rules that key on a fixed byte string. The method validates whether your mitigation falls back to behavioral and rate-based detection when content-matching alone cannot identify the flood.
Parameters
Packet rate600k ppsDatagrams emitted per second per thread
Payload bytes64 bytesRandomized payload, regenerated per packet
Threads1-16Parallel senders to scale volume
Duration10-600 sTest window length
Run it from the CLI
retro-cli
$ retro run udp-rand --target 203.0.113.45 --port 443 --duration 120
UDP-RAND FAQ
Is UDP-RAND testing legal?+
Only against infrastructure you own or are authorized to test. RETRO//STRESS requires authorized targets.
What does UDP-RAND stress?+
Sends 64-byte randomized UDP payloads that change every packet, validating whether your filters rely on static signatures that a varying payload can slip past.
Can I combine it with other methods?+
Yes, add it as a step in a packet chain to sequence it with other protocols.