MAWILab

Data set: 2011/02/06

2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

Traffic Trace: 2011/02/06

Info: http://mawi.wide.ad.jp/mawi/samplepoint-F/2011/201102061400.html
tcpdump file: http://mawi.wide.ad.jp/mawi/samplepoint-F/2011/201102061400.dump.gz

Anomalous Traffic:

"Anomalous" and "Suspicious" labels (admd file): 201102061400_anomalous_suspicious.xml

Overview of the anomalies:

# of anomalies: 46
# of anomalies as function of the # of alarms and # of detectors reporting the alarms:

Breakdown of the anomalies:

Category	Label	Detectors
SYN scan	Anomalous	Hough, Gamma
Ping flood	Anomalous	Hough
SYN scan	Anomalous	Hough, Gamma, KL
SYN scan	Anomalous	Hough, Gamma, KL
SYN scan	Anomalous	Hough, Gamma, KL
SYN scan	Suspicious	Hough
Ping flood	Suspicious	Hough, Gamma
SYN scan	Suspicious	Hough, Gamma
HTTP	Anomalous	Hough, Gamma, KL
HTTP	Anomalous	Hough, Gamma
HTTP	Anomalous	Hough, Gamma
HTTP	Anomalous	Gamma, KL
HTTP	Anomalous	Hough, Gamma, KL
HTTP	Anomalous	Hough, Gamma, KL
HTTP	Anomalous	Gamma, KL
HTTP	Suspicious	Hough
HTTPS	Suspicious	Hough, Gamma
HTTP	Suspicious	Hough, Gamma
HTTP	Suspicious	Gamma
HTTP	Suspicious	Hough, Gamma
Unknown	Anomalous	Hough, Gamma, KL
Unknown	Anomalous	Hough, Gamma
Unknown	Anomalous	Hough, Gamma
Unknown	Anomalous	Gamma, KL
Unknown	Anomalous	Gamma, KL
Unknown	Anomalous	Hough, Gamma, KL
Unknown	Anomalous	Hough, Gamma, KL
Unknown	Anomalous	Hough, Gamma, KL
Unknown	Anomalous	Gamma, KL
Unknown	Anomalous	Gamma, KL
Unknown	Anomalous	Hough, Gamma, KL
Unknown	Anomalous	Gamma, KL
Unknown	Anomalous	Gamma, KL
Unknown	Suspicious	Hough
Unknown	Suspicious	Hough
Unknown	Suspicious	Hough, Gamma
Unknown	Suspicious	Gamma, KL
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma
Unknown	Suspicious	Gamma, KL
Category	Label	Detectors

Other:

"Notice" labels (admd file): 201102061400_notice.xml