|
|
@@ -69,7 +69,7 @@ In this section, we provide examples on how ID2T is used.
|
|
|
### Injecting an attack into an existing dataset
|
|
|
In the following we inject the _PortscanAttack_ into the dataset *pcap_capture.pcap*:
|
|
|
|
|
|
-`` ./id2t -i /home/user/pcap_capture.pcap -a PortscanAttack ip.src=10.192.168.178.2 mac.src=32-08-24-DC-8D-27 inject.at-timestamp=1476301843 ``
|
|
|
+`` ./id2t -i /home/user/pcap_capture.pcap -a PortscanAttack ip.src=192.168.178.2 mac.src=32-08-24-DC-8D-27 inject.at-timestamp=1476301843 ``
|
|
|
|
|
|
__Explanation__: The parameter ``-i/--input`` takes the path to the PCAP file. This triggers the statistics calculation of the file. After the calculation, the statistics are stored into a SQLite database. If the statistics were already computed in an earlier run, the data is retrieved from the generated database. This saves time as the calculation of the statistics may take long time - depending on the PCAP file size.
|
|
|
|
Aidmar Wainakh