File size: 2,971 Bytes
215671c
 
fadaaab
215671c
 
fadaaab
215671c
fadaaab
215671c
fadaaab
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
215671c
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
fadaaab
215671c
 
fadaaab
215671c
fadaaab
215671c
fadaaab
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
215671c
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
[
  {
    "label": "bitcoin:p2p_getheaders_drain",
    "expect": "attack",
    "feat": {
      "pcap.bytes_per_s": 180355.703,
      "pcap.distinct_dst_ips": 1.0,
      "pcap.distinct_src_dst_pairs": 143.0,
      "pcap.distinct_src_ips": 1.0,
      "pcap.duration_s": 3.809,
      "pcap.mean_packet_size": 134.749,
      "pcap.packet_count": 5098.0,
      "pcap.packets_per_s": 1338.461,
      "pcap.rst_fraction": 0.041,
      "pcap.syn_to_handshake_ratio": 0.526,
      "pcap.tcp_fin": 0.0,
      "pcap.tcp_handshake_ack": 540.0,
      "pcap.tcp_rst": 208.0,
      "pcap.tcp_syn": 284.0,
      "pcap.tcp_syn_ack": 142.0,
      "pcap.tcp_total_packets": 5098.0,
      "pcap.top_dst_port": 48787.0,
      "pcap.top_dst_port_fraction": 0.508,
      "pcap.top_src_port": 48787.0,
      "pcap.top_src_port_fraction": 0.492,
      "pcap.total_bytes": 686948.0,
      "pcap.unique_dst_ports": 5.0,
      "pcap.unique_src_ports": 5.0,
      "resp.count": 0.0,
      "resp.resp_bytes_total": 0.0
    }
  },
  {
    "label": "solana:sol_tpu_quic_initial_cpu",
    "expect": "attack",
    "feat": {
      "pcap.bytes_per_s": 13828.406,
      "pcap.distinct_dst_ips": 0.0,
      "pcap.distinct_src_dst_pairs": 0.0,
      "pcap.distinct_src_ips": 0.0,
      "pcap.duration_s": 7.035,
      "pcap.mean_packet_size": 256.0,
      "pcap.packet_count": 380.0,
      "pcap.packets_per_s": 54.017,
      "pcap.rst_fraction": 0.0,
      "pcap.syn_to_handshake_ratio": 0.0,
      "pcap.tcp_fin": 0.0,
      "pcap.tcp_handshake_ack": 0.0,
      "pcap.tcp_rst": 0.0,
      "pcap.tcp_syn": 0.0,
      "pcap.tcp_syn_ack": 0.0,
      "pcap.tcp_total_packets": 0.0,
      "pcap.top_dst_port": 0.0,
      "pcap.top_dst_port_fraction": 0.0,
      "pcap.top_src_port": 0.0,
      "pcap.top_src_port_fraction": 0.0,
      "pcap.total_bytes": 97280.0,
      "pcap.unique_dst_ports": 0.0,
      "pcap.unique_src_ports": 0.0,
      "resp.count": 0.0,
      "resp.resp_bytes_total": 0.0
    }
  },
  {
    "label": "bitcoin:benign_bitcoin_light_client_normal",
    "expect": "benign",
    "feat": {
      "pcap.bytes_per_s": 45302.279,
      "pcap.distinct_dst_ips": 1.0,
      "pcap.distinct_src_dst_pairs": 67.0,
      "pcap.distinct_src_ips": 1.0,
      "pcap.duration_s": 3.236,
      "pcap.mean_packet_size": 113.65,
      "pcap.packet_count": 1290.0,
      "pcap.packets_per_s": 398.611,
      "pcap.rst_fraction": 0.057,
      "pcap.syn_to_handshake_ratio": 0.506,
      "pcap.tcp_fin": 2.0,
      "pcap.tcp_handshake_ack": 261.0,
      "pcap.tcp_rst": 73.0,
      "pcap.tcp_syn": 132.0,
      "pcap.tcp_syn_ack": 66.0,
      "pcap.tcp_total_packets": 1290.0,
      "pcap.top_dst_port": 48787.0,
      "pcap.top_dst_port_fraction": 0.518,
      "pcap.top_src_port": 48787.0,
      "pcap.top_src_port_fraction": 0.482,
      "pcap.total_bytes": 146609.0,
      "pcap.unique_dst_ports": 5.0,
      "pcap.unique_src_ports": 5.0,
      "resp.count": 0.0,
      "resp.resp_bytes_total": 0.0
    }
  }
]