....Whenever you have a requirement that explicitly dictates network as the subject of the test.
How is determined by the requirement. is this an RFC style functional test? is this a throughput test with certain levels of predetermined errors in the packet stream? Is this an attempted denial of service (DoS) style test? Each type is going to dictate a class of tools and a specific manufacturer set.