Design


Ease of use
run on a single host

Portability
*BSD, Linux, Solaris, Windows 2000

Extensibility
user-level packet interception, rewriting, relay
simple modules + ruleset glue
not tied to a particular testing methodology