UNB ISCX 2012 pcap file labels

asked 2019-11-13 14:45:50 +0000

kostaspsy gravatar image

updated 2019-11-13 14:46:53 +0000

Hello,

Please excuse me if the post is not relevant to the forum's nature, but i can't find any better place to ask.

I have downloaded the UNB ISCX 2012 data set, including pcap files for 7 different days that contain normal and anomalous (insider intrusion network activity) packets.

I am pre-processing these files using a tool developed by UNB: CICFlowMeter-4.0. which generates a csv files of bi-directional flows, where each flow has a set of (80+) features. The data set is labeled.

My question is:

Can the ground truth be placed inside a pcap file? Because a pcap file is in a byte-format and i wouldn't expect normal/anomalous labels of ones and zeros to be found in the pcap file.

The output of CICFlowMeter-4.0 gives me the flows in csv format with their features. The last column (feauture) is Labels and every row has value "No Label" for this column.

I am trying to find a way to replicate their pre-processing step and get the features + the labels.

emphasized text

edit retag flag offensive close merge delete

Comments

Chuckc gravatar imageChuckc ( 2019-11-13 14:52:12 +0000 )edit

hello, i have the dataset and the tool i have extracted the features, but they do not contain label as they should. So i basically ask whether a pcap file can contain other information such as label or not.

kostaspsy gravatar imagekostaspsy ( 2019-11-13 15:06:28 +0000 )edit

Have you tried contacting the authors? https://github.com/ahlashkari/CICFlow...
"Contact us at [email protected] if there are any problems."

Chuckc gravatar imageChuckc ( 2019-11-13 15:47:23 +0000 )edit