LANDER:attack-udp22-20061106

   From Predict

   README version: 1510, last modified: 2010-06-17.

   This file describes the trace dataset "attack-udp22-20061106" provided by
   the LANDER project.

   The most recent version of this file can be found on-line at
   http://wiki.isi.edu/predict/index.php/LANDER:attack-udp22-20061106.

LANDER Metadata

   http://wiki.isi.edu/predict/index.php/LANDER:attack-udp22-20061106/landermeta)

+------------------------------------------------------------------------------------------------+
|dataSetName               |attack-udp22-20061106                                                |
|--------------------------+---------------------------------------------------------------------|
|status                    |usc-web-and-predict                                                  |
|--------------------------+---------------------------------------------------------------------|
|shortDesc                 |attack on UDP port 22                                                |
|--------------------------+---------------------------------------------------------------------|
|longDesc                  |This short (8sec) attack was captured by a large hosting service. The|
|                          |attack consists of very short packets (15 bytes) sent to UDP port 22 |
|                          |at a rate of about 180kpps, when background traffic is about 53Kpps. |
|                          |The trace contains all traffic, a few seconds before and after the   |
|                          |attack.                                                              |
|--------------------------+---------------------------------------------------------------------|
|datasetCategory           |IP Packet Headers                                                    |
|--------------------------+---------------------------------------------------------------------|
|datasetSubCategory        |USC Phase I IP Packet Header Data                                    |
|--------------------------+---------------------------------------------------------------------|
|requestReviewRequired     |true                                                                 |
|--------------------------+---------------------------------------------------------------------|
|productReviewRequired     |false                                                                |
|--------------------------+---------------------------------------------------------------------|
|ongoingMeasurement        |false                                                                |
|--------------------------+---------------------------------------------------------------------|
|collectionStartDate       |2006-11-06                                                           |
|--------------------------+---------------------------------------------------------------------|
|collectionStartTime       |00:00:00                                                             |
|--------------------------+---------------------------------------------------------------------|
|collectionEndDate         |2006-11-06                                                           |
|--------------------------+---------------------------------------------------------------------|
|collectionEndTime         |00:00:00                                                             |
|--------------------------+---------------------------------------------------------------------|
|availabilityStartDate     |                                                                     |
|--------------------------+---------------------------------------------------------------------|
|availabilityStartTime     |                                                                     |
|--------------------------+---------------------------------------------------------------------|
|availabilityEndDate       |                                                                     |
|--------------------------+---------------------------------------------------------------------|
|availabilityEndTime       |                                                                     |
|--------------------------+---------------------------------------------------------------------|
|anonymization             |false                                                                |
|--------------------------+---------------------------------------------------------------------|
|archivingAllowed          |                                                                     |
|--------------------------+---------------------------------------------------------------------|
|keywords                  |packet-header, dos, full-IP-anonymization                            |
|--------------------------+---------------------------------------------------------------------|
|format                    |pcap                                                                 |
|--------------------------+---------------------------------------------------------------------|
|access                    |https                                                                |
|--------------------------+---------------------------------------------------------------------|
|hostName                  |USC-LANDER                                                           |
|--------------------------+---------------------------------------------------------------------|
|privateAccessInstructions |See http://www.isi.edu/ant/traces/index.html#getting_datasets for    |
|                          |information on obtaining this dataset.                               |
|                          |See                                                                  |
|                          |http://wiki.isi.edu/predict/index.php/LANDER:attack-udp22-20061106   |
|                          |for details on this dataset.                                         |
+------------------------------------------------------------------------------------------------+

Dataset Contents

   attack-udp22-20061106.README.txt copy of this README
   data/
   attack-udp22-20061106.pcap.gz    gzip of a pcap trace
   _sha1sum                         SHA-1 checksum

   Subdirectory "data" contains a gzip-compressed pcap file containing packet
   headers of background traffic and the udp port 22 attack.

   The file "_sha1sum" contains SHA1 checksums of individual compressed
   files. The integrity of the distribution thus can be checked by
   independently calculating SHA1 sums of files and comparing them with those
   listed in the file. If you have the sha1sum utility installed on your
   system, you can do that by executing:

     sha1sum --check _sha1sum

   This has to be done before files are uncompressed.

Citation

   If you use this trace to conduct additional research, please cite it as:

   Scrambled Internet Trace Measurement dataset, PREDICT ID
   USC-LANDER/attack-udp22-20061106. Traces taken 2006-11-06. Provided by the
   USC/LANDER project http://www.isi.edu/ant/lander.

Results Using This Dataset

   Traces similar to this one have been used the following previously
   published work:

   [ None as yet ]

User Annotations

Suggestion: Edit the annotations at
http://wiki.isi.edu/predict/index.php?title=LANDERNOTES:attack-udp22-20061106action=edit

   Currently no annotations.

Categories

   Retrieved from
   "http://wiki.isi.edu/predict/index.php?title=LANDER:attack-udp22-20061106oldid=1510"
   Categories:

     * LANDER:PredictCategory:IP Packet Headers
     * LANDER:PredictCategory:IP Packet Headers/USC Phase I IP Packet Header
       Data
     * LANDER
     * LANDER:Datasets
     * Datasets