LANDER:attack-tcpsyn-20061106

   From Predict

   README version: 1508, last modified: 2010-06-17.

   This file describes the trace dataset "attack-tcpsyn-20061106" provided by
   the LANDER project.

   The most recent version of this file can be found on-line at
   http://wiki.isi.edu/predict/index.php/LANDER:attack-tcpsyn-20061106.

LANDER Metadata

   http://wiki.isi.edu/predict/index.php/LANDER:attack-tcpsyn-20061106/landermeta)

+-------------------------------------------------------------------------------------------------+
|dataSetName               |attack-tcpsyn-20061106                                                |
|--------------------------+----------------------------------------------------------------------|
|status                    |usc-web-and-predict                                                   |
|--------------------------+----------------------------------------------------------------------|
|shortDesc                 |tcp syn attack with background traffic                                |
|--------------------------+----------------------------------------------------------------------|
|longDesc                  |This tcp syn attack was captured by a large hosting service. The      |
|                          |attack lasted 22 sec and the attack packet rate was about twice the   |
|                          |background traffic, 80Kpps, vs. 40Kpps. The trace contains all packets|
|                          |during the attack.                                                    |
|--------------------------+----------------------------------------------------------------------|
|datasetCategory           |IP Packet Headers                                                     |
|--------------------------+----------------------------------------------------------------------|
|datasetSubCategory        |USC Phase I IP Packet Header Data                                     |
|--------------------------+----------------------------------------------------------------------|
|requestReviewRequired     |true                                                                  |
|--------------------------+----------------------------------------------------------------------|
|productReviewRequired     |false                                                                 |
|--------------------------+----------------------------------------------------------------------|
|ongoingMeasurement        |false                                                                 |
|--------------------------+----------------------------------------------------------------------|
|collectionStartDate       |2006-11-06                                                            |
|--------------------------+----------------------------------------------------------------------|
|collectionStartTime       |00:00:00                                                              |
|--------------------------+----------------------------------------------------------------------|
|collectionEndDate         |2006-11-06                                                            |
|--------------------------+----------------------------------------------------------------------|
|collectionEndTime         |00:00:00                                                              |
|--------------------------+----------------------------------------------------------------------|
|availabilityStartDate     |                                                                      |
|--------------------------+----------------------------------------------------------------------|
|availabilityStartTime     |                                                                      |
|--------------------------+----------------------------------------------------------------------|
|availabilityEndDate       |                                                                      |
|--------------------------+----------------------------------------------------------------------|
|availabilityEndTime       |                                                                      |
|--------------------------+----------------------------------------------------------------------|
|anonymization             |false                                                                 |
|--------------------------+----------------------------------------------------------------------|
|archivingAllowed          |                                                                      |
|--------------------------+----------------------------------------------------------------------|
|keywords                  |packet-header, dos, full-IP-anonymization                             |
|--------------------------+----------------------------------------------------------------------|
|format                    |pcap                                                                  |
|--------------------------+----------------------------------------------------------------------|
|access                    |https                                                                 |
|--------------------------+----------------------------------------------------------------------|
|hostName                  |USC-LANDER                                                            |
|--------------------------+----------------------------------------------------------------------|
|privateAccessInstructions |See http://www.isi.edu/ant/traces/index.html#getting_datasets for     |
|                          |information on obtaining this dataset.                                |
|                          |See                                                                   |
|                          |http://wiki.isi.edu/predict/index.php/LANDER:attack-tcpsyn-20061106   |
|                          |for details on this dataset.                                          |
+-------------------------------------------------------------------------------------------------+

Dataset Contents

   attack-tcpsyn-20061106.README.txt copy of this README
   data/
   attack-tcpsyn-20061106.pcap.gz    gzip of a pcap trace
   _sha1sum                          SHA-1 checksum

   Subdirectory "data" contains a gzip-compressed pcap file containing packet
   headers of background traffic and the tcp syn attack.

   The file "_sha1sum" contains SHA1 checksums of individual compressed
   files. The integrity of the distribution thus can be checked by
   independently calculating SHA1 sums of files and comparing them with those
   listed in the file. If you have the sha1sum utility installed on your
   system, you can do that by executing:

     sha1sum --check _sha1sum

   This has to be done before files are uncompressed.

Citation

   If you use this trace to conduct additional research, please cite it as:

   Scrambled Internet Trace Measurement dataset, PREDICT ID
   USC-LANDER/attack-tcpsyn-20061106. Traces taken 2006-11-06. Provided by
   the USC/LANDER project http://www.isi.edu/ant/lander.

Results Using This Dataset

   Traces similar to this one have been used the following previously
   published work:

   [ None as yet ]

User Annotations

Suggestion: Edit the annotations at
http://wiki.isi.edu/predict/index.php?title=LANDERNOTES:attack-tcpsyn-20061106action=edit

   Currently no annotations.

Categories

   Retrieved from
   "http://wiki.isi.edu/predict/index.php?title=LANDER:attack-tcpsyn-20061106oldid=1508"
   Categories:

     * LANDER:PredictCategory:IP Packet Headers
     * LANDER:PredictCategory:IP Packet Headers/USC Phase I IP Packet Header
       Data
     * LANDER
     * LANDER:Datasets
     * Datasets