| [ |
| { |
| "label": "bitcoin:p2p_getheaders_drain", |
| "expect": "attack", |
| "feat": { |
| "pcap.bytes_per_s": 180355.703, |
| "pcap.distinct_dst_ips": 1.0, |
| "pcap.distinct_src_dst_pairs": 143.0, |
| "pcap.distinct_src_ips": 1.0, |
| "pcap.duration_s": 3.809, |
| "pcap.mean_packet_size": 134.749, |
| "pcap.packet_count": 5098.0, |
| "pcap.packets_per_s": 1338.461, |
| "pcap.rst_fraction": 0.041, |
| "pcap.syn_to_handshake_ratio": 0.526, |
| "pcap.tcp_fin": 0.0, |
| "pcap.tcp_handshake_ack": 540.0, |
| "pcap.tcp_rst": 208.0, |
| "pcap.tcp_syn": 284.0, |
| "pcap.tcp_syn_ack": 142.0, |
| "pcap.tcp_total_packets": 5098.0, |
| "pcap.top_dst_port": 48787.0, |
| "pcap.top_dst_port_fraction": 0.508, |
| "pcap.top_src_port": 48787.0, |
| "pcap.top_src_port_fraction": 0.492, |
| "pcap.total_bytes": 686948.0, |
| "pcap.unique_dst_ports": 5.0, |
| "pcap.unique_src_ports": 5.0, |
| "resp.count": 0.0, |
| "resp.resp_bytes_total": 0.0 |
| } |
| }, |
| { |
| "label": "solana:sol_tpu_quic_initial_cpu", |
| "expect": "attack", |
| "feat": { |
| "pcap.bytes_per_s": 13828.406, |
| "pcap.distinct_dst_ips": 0.0, |
| "pcap.distinct_src_dst_pairs": 0.0, |
| "pcap.distinct_src_ips": 0.0, |
| "pcap.duration_s": 7.035, |
| "pcap.mean_packet_size": 256.0, |
| "pcap.packet_count": 380.0, |
| "pcap.packets_per_s": 54.017, |
| "pcap.rst_fraction": 0.0, |
| "pcap.syn_to_handshake_ratio": 0.0, |
| "pcap.tcp_fin": 0.0, |
| "pcap.tcp_handshake_ack": 0.0, |
| "pcap.tcp_rst": 0.0, |
| "pcap.tcp_syn": 0.0, |
| "pcap.tcp_syn_ack": 0.0, |
| "pcap.tcp_total_packets": 0.0, |
| "pcap.top_dst_port": 0.0, |
| "pcap.top_dst_port_fraction": 0.0, |
| "pcap.top_src_port": 0.0, |
| "pcap.top_src_port_fraction": 0.0, |
| "pcap.total_bytes": 97280.0, |
| "pcap.unique_dst_ports": 0.0, |
| "pcap.unique_src_ports": 0.0, |
| "resp.count": 0.0, |
| "resp.resp_bytes_total": 0.0 |
| } |
| }, |
| { |
| "label": "bitcoin:benign_bitcoin_light_client_normal", |
| "expect": "benign", |
| "feat": { |
| "pcap.bytes_per_s": 45302.279, |
| "pcap.distinct_dst_ips": 1.0, |
| "pcap.distinct_src_dst_pairs": 67.0, |
| "pcap.distinct_src_ips": 1.0, |
| "pcap.duration_s": 3.236, |
| "pcap.mean_packet_size": 113.65, |
| "pcap.packet_count": 1290.0, |
| "pcap.packets_per_s": 398.611, |
| "pcap.rst_fraction": 0.057, |
| "pcap.syn_to_handshake_ratio": 0.506, |
| "pcap.tcp_fin": 2.0, |
| "pcap.tcp_handshake_ack": 261.0, |
| "pcap.tcp_rst": 73.0, |
| "pcap.tcp_syn": 132.0, |
| "pcap.tcp_syn_ack": 66.0, |
| "pcap.tcp_total_packets": 1290.0, |
| "pcap.top_dst_port": 48787.0, |
| "pcap.top_dst_port_fraction": 0.518, |
| "pcap.top_src_port": 48787.0, |
| "pcap.top_src_port_fraction": 0.482, |
| "pcap.total_bytes": 146609.0, |
| "pcap.unique_dst_ports": 5.0, |
| "pcap.unique_src_ports": 5.0, |
| "resp.count": 0.0, |
| "resp.resp_bytes_total": 0.0 |
| } |
| } |
| ] |
