Fragrouter is aimed at testing the correctness of a NIDS, according to the specific TCP/IP attacks listed in the Secure Networks NIDS evasion paper. ``Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection.'' It does this by routing network traffic in such a way as to elude most network intrusion detection systems.
