Pixilate is a commandline packet generation utility that reads Cisco PIX 6.2x or Cisco IOS ACLs as input and generates the appropriate packets. Use it in conjunction with your favorite sniffer listening off of a span port for ACL validation. You can optionally send per-ACL payloads.