Re: [Openpacket-users] Open source flow datasets?
Brought to you by:
crazy_j,
taosecurity
From: Donal <irl...@gm...> - 2008-08-22 00:12:28
|
Have applied to CAIDA for captures which I will use one of the available tools to parse to flow data. Thanks for suggestions, though if, apart from what's offered on the website, they do actually provide flow data out of band to researchers, that would be great! Donal On Fri, Aug 22, 2008 at 6:13 AM, Erik Hjelmvik <eri...@gm...> wrote: > Hi CS and others, > > Do you guys know if CAIDA can provide full pcap files, i.e. with full > application payloads, or do they only have flow data? > Anonymized IP's is OK with me. > > /erik > > 2008/8/21 CS Lee <ge...@gm...>: >> hi donai, >> >> As far as I know, sample dataset for flow is not available public ally, >> arbor is successful in a way where they are pushing their products to ISP >> level and they are definitely benefit from that. And most ISPs will avoid >> sharing the flow data too as you can't consider the data belongs to them as >> well(they provide connectivities/links) unless it is specified. >> >> If you are doing it for your own researh only, maybe u can grab the pcap and >> generate flow data out of it. We would definitely love to have dataset >> sharing. Anyway, caida is always sharing large data set they have. >> >> http://www.caida.org/data/ >> >> I'm not too sured if they are sharing flow data, you might ask them. >> >> Cheers ;] >> >> On Thu, Aug 21, 2008 at 8:12 PM, Donal <irl...@gm...> wrote: >>> >>> Hi guys, as per openpacket... I am trying to get my hands on old/new >>> flow data, expired, anonymised or otherwise. I have contacted >>> Arbor(Danny McP and local SE's) and am talking to the encumbent Telcos >>> here in Australia. I was hoping someone might be aware of repositories >>> of such datasets >>> or would know who to ask potentially? >>> >>> It is purely for mine own research efforts in assigning value to >>> shared infrastructures and to perhaps facilitate theories/presentation >>> at the next SecurityMetrics conference! >>> >>> Will anonymize with FLAIM http://en.wikipedia.org/wiki/FLAIM >>> >>> -- >>> >>> ________________________________________________________________________________ >>> Donal ( http://bsdosx.blogspot.com/ ) >>> >>> "Any intelligent fool can make things bigger, more complex, and more >>> violent. It takes a touch of genius -- and a lot of courage -- to move >>> in the opposite direction." E. F. Schumacher >>> >>> ------------------------------------------------------------------------- >>> This SF.Net email is sponsored by the Moblin Your Move Developer's >>> challenge >>> Build the coolest Linux based applications with Moblin SDK & win great >>> prizes >>> Grand prize is a trip for two to an Open Source event anywhere in the >>> world >>> http://moblin-contest.org/redirect.php?banner_id=100&url=/ >>> _______________________________________________ >>> Openpacket-users mailing list >>> Ope...@li... >>> https://lists.sourceforge.net/lists/listinfo/openpacket-users >> >> >> >> -- >> Best Regards, >> >> CS Lee<geek00L[at]gmail.com> >> >> http://geek00l.blogspot.com >> >> ------------------------------------------------------------------------- >> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge >> Build the coolest Linux based applications with Moblin SDK & win great >> prizes >> Grand prize is a trip for two to an Open Source event anywhere in the world >> http://moblin-contest.org/redirect.php?banner_id=100&url=/ >> _______________________________________________ >> Openpacket-users mailing list >> Ope...@li... >> https://lists.sourceforge.net/lists/listinfo/openpacket-users >> >> > -- ________________________________________________________________________________ Donal ( http://bsdosx.blogspot.com/ ) "Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius -- and a lot of courage -- to move in the opposite direction." E. F. Schumacher |