Home Explore Help
Sign In
leon.boeck
/
ID2T-toolkit-BotnetTraffic
forked from SPIN/ID2T-toolkit
2
0
Fork 0
Files Issues 0 Wiki
Page: DB Table for Degree Statistics of each IP Address
Adding padding to the packets
Additional Plots
Calling the attack
Choosing an Interval from the Abstract Communication Input File
DB Table for Degree Statistics of each IP Address
DB Table for Extended Conversation Statistics
Ephemeral Ports assigment
Generate Random Ports
Home
Input of a CSV or XML File Containing Abstract Botnet Communication
Mapping IP Address to ASN
Mapping IPs to IDs
Mapping of PCAP Packets to Input CSV XML Messages
Supported Attack Parameters
Test for deterministic output
Timings of Messages and their Responses
botnet_comm_processor
DB Table for Degree Statistics of each IP Address
Marcel Juschak edited this page 6 years ago

Introduction

Because of anomalies when computing Degree Statistics from the original Data Base, these Statistics are now directly collected from the Input PCAP. In order not to accidentally change existing behavior, the data has been added to a new DB table "ip_degrees". In the future this table is supposed to be merged with "ip_statistics".

The new DB table "ip_degrees"

This table contains Degree Statistics of each IP Address found in the Input PCAP

Field Name Description
ipAddress IP Address of the host these statistics belong to
inDegree Number of unique IP Addresses to which at least one packet was sent
outDegree Number of unique IP Addresses from which at least one packet was received
overallDegree Number of unique IP Addresses to which at least one packet was sent OR from which at least one packet was received
Delete Page

This will delete the page "DB Table for Degree Statistics of each IP Address". Please be certain.

No
Yes