MAWILab

Data set: 2001/10/16






Traffic Trace: 2001/10/16

Info: http://mawi.wide.ad.jp/mawi/samplepoint-B/2001/200110161400.html
tcpdump file: http://mawi.wide.ad.jp/mawi/samplepoint-B/2001/200110161400.dump.gz

Anomalous Traffic:

"Anomalous" and "Suspicious" labels (admd file): 200110161400_anomalous_suspicious.xml

Overview of the anomalies:

# of anomalies: 63
# of anomalies as function of the # of alarms and # of detectors reporting the alarms:


Breakdown of the anomalies:

CategoryLabelDetectors
SYN scanAnomalous Hough
Scan HTTPAnomalous Gamma, KL
Ping floodAnomalous Gamma, PCA
Ping floodSuspicious Gamma, PCA
Ping floodSuspicious Gamma, PCA
Scan HTTPSuspicious Gamma, PCA
Ping floodSuspicious PCA
Ping floodSuspicious PCA
HTTPAnomalous Gamma
HTTPAnomalous Gamma, PCA
HTTPAnomalous Gamma, KL, PCA
HTTPAnomalous Gamma, KL, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
HTTPSSuspicious PCA
HTTPSuspicious PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
HTTPSuspicious PCA
UnknownAnomalous Gamma, PCA
UnknownAnomalous Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
UnknownSuspicious PCA
CategoryLabelDetectors

Other:

"Notice" labels (admd file): 200110161400_notice.xml