MAWILab

Data set: 2003/09/25






Traffic Trace: 2003/09/25

Info: http://mawi.wide.ad.jp/mawi/samplepoint-B/2003/200309251400.html
tcpdump file: http://mawi.wide.ad.jp/mawi/samplepoint-B/2003/200309251400.dump.gz

Anomalous Traffic:

"Anomalous" and "Suspicious" labels (admd file): 200309251400_anomalous_suspicious.xml

Overview of the anomalies:

# of anomalies: 142
# of anomalies as function of the # of alarms and # of detectors reporting the alarms:


Breakdown of the anomalies:

CategoryLabelDetectors
Ping floodAnomalous Hough, Gamma, PCA
Ping floodAnomalous Hough, PCA
Ping floodAnomalous Hough, PCA
Ping floodAnomalous Hough, PCA
Ping floodAnomalous Hough, Gamma, PCA
Ping floodAnomalous Hough, PCA
Ping floodAnomalous Hough, PCA
Ping floodAnomalous Hough
Ping floodAnomalous Hough
Ping floodAnomalous Hough, PCA
Ping floodAnomalous Gamma, KL, PCA
Ping floodAnomalous Gamma, KL
Ping floodAnomalous Gamma, PCA
Ping floodAnomalous Hough, Gamma, KL, PCA
Ping floodAnomalous Gamma, KL
Ping floodAnomalous Gamma, KL
Ping floodAnomalous Hough, Gamma, KL, PCA
NetbiosAnomalous Gamma, PCA
NetbiosAnomalous Hough, KL, PCA
Ping floodAnomalous Hough, Gamma, PCA
RST scanAnomalous Hough, Gamma, KL, PCA
Ping floodAnomalous Hough, Gamma, KL, PCA
Ping floodSuspicious Hough, Gamma, PCA
Ping floodSuspicious Gamma, PCA
SYN scanSuspicious Hough, Gamma, PCA
Ping floodSuspicious Gamma, PCA
Ping floodSuspicious Gamma, PCA
SYN scanSuspicious Gamma, PCA
Ping floodSuspicious Gamma, PCA
RST scanSuspicious Gamma, PCA
Ping floodSuspicious Gamma, PCA
SYN scanSuspicious Gamma, PCA
Ping floodSuspicious Gamma, PCA
Ping floodSuspicious Hough, Gamma
NetbiosSuspicious Hough, PCA
SYN scanSuspicious Hough, Gamma, PCA
Ping floodSuspicious Hough, PCA
Ping floodSuspicious Gamma, PCA
Ping floodSuspicious Gamma, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Gamma, KL
HTTPAnomalous Gamma, KL, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Gamma, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Gamma, PCA
HTTPSuspicious Gamma
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
FTPSuspicious Hough, Gamma
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
UnknownAnomalous Hough, PCA
UnknownAnomalous Hough
UnknownAnomalous Hough, Gamma
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Gamma, PCA
UnknownAnomalous Gamma, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Gamma, PCA
UnknownAnomalous Gamma, KL, PCA
UnknownAnomalous Gamma, KL, PCA
UnknownAnomalous Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, KL, PCA
UnknownAnomalous Gamma, KL
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Gamma, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough, PCA
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Gamma, PCA
UnknownSuspicious Hough, Gamma
UnknownSuspicious Hough, Gamma
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Hough, Gamma
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
CategoryLabelDetectors

Other:

"Notice" labels (admd file): 200309251400_notice.xml