-
Notifications
You must be signed in to change notification settings - Fork 1
Creating New Datasets
Download fullstats.tar.gz from this link to get flowcreator.pl
Download tcpdemuxer from this link
In the tcpdemuxer package, replace the 'dumpfiles.c' and 'Makefile' with the files from here.
In the folder with the Makefile, run make on terminal. This will produce an executable 'demuxer'.
In Line 13 of the flowcreater.pl code, my $path_demux = "demuxer";. Replace demuxer with the file path to the executable 'demuxer' created previously.
Run ./flowcreater tracefilelist where 'tracefilelist' is a list with each line containing a path to a series of tracefiles to be processed. (Get this from Andrew W. Moore)
The flowcreator produces a modified version of the tracefiles and puts them in a directory 'out' based on characteristics of the flow (src ip, dest ip, port number, …). It also produces the files 'filelist', 'logfile' 'conn_stats', and 'senses'. 'Filelist' contains a list of the paths of the newly produced files. The 'senses' file tells us if each of these paths are client → server or vice-versa.
Download the entire script folder from here. Once this has been completed run overall.scpt, ensuring that its in the same directory as filelist. The function doesn't require arguments. Also ensure you have downloaded [OTHER FILES HERE].
The following programs may need to be installed (R, libpcap0.8, libpcap0.8-dev, libpcap0.8, libpcap0.8-dev:i386, libpcap0.8:i386). You can use the sudo apt-get install commands on Linux.
You should now have a .csv file containing the attributes which you can append headers to, or use to produce .arff files.