MAWILab

Data set: 2006/12/05






Traffic Trace: 2006/12/05

Info: http://mawi.wide.ad.jp/mawi/samplepoint-F/2006/200612051400.html
tcpdump file: http://mawi.wide.ad.jp/mawi/samplepoint-F/2006/200612051400.dump.gz

Anomalous Traffic:

"Anomalous" and "Suspicious" labels (admd file): 200612051400_anomalous_suspicious.xml

Overview of the anomalies:

# of anomalies: 93
# of anomalies as function of the # of alarms and # of detectors reporting the alarms:


Breakdown of the anomalies:

CategoryLabelDetectors
SYN scanAnomalous Hough, Gamma, PCA
SYN scanAnomalous Hough, Gamma, KL
SYN scanAnomalous Hough, Gamma, KL, PCA
SYN scanSuspicious Hough, Gamma
Ping floodSuspicious Gamma, PCA
SYN scanSuspicious Hough, Gamma
RST scanSuspicious Gamma
HTTPAnomalous Hough
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPAnomalous Hough, Gamma, PCA
HTTPSuspicious Hough
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Hough, Gamma
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Hough, Gamma
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma
HTTPSuspicious Gamma
HTTPSuspicious Gamma
HTTPSuspicious Gamma
FTPSuspicious Gamma, PCA
HTTPSuspicious Gamma
HTTPSuspicious Gamma, PCA
SSHSuspicious Gamma, PCA
HTTPSSuspicious Hough, Gamma
FTPSuspicious Gamma
HTTPSuspicious Hough, Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
SSHSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma, PCA
HTTPSuspicious Gamma
HTTPSuspicious Hough, Gamma
HTTPSuspicious Gamma, PCA
HTTPSuspicious Hough, Gamma, PCA
UnknownAnomalous Hough
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Hough, Gamma, KL, PCA
UnknownAnomalous Gamma, KL, PCA
UnknownAnomalous Gamma, KL
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Hough, Gamma
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Gamma
UnknownSuspicious Gamma
UnknownSuspicious Hough, Gamma, PCA
UnknownSuspicious Gamma
UnknownSuspicious Gamma
UnknownSuspicious Gamma
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma
UnknownSuspicious Gamma
UnknownSuspicious Gamma, PCA
UnknownSuspicious Gamma, PCA
CategoryLabelDetectors

Other:

"Notice" labels (admd file): 200612051400_notice.xml