[tcpdump-workers] deduct local IPs from pcap-files, possible?

Hi, Sorry for asking again, but I got no useful answer last time. Hopefully more luck this time... I receive many pcap-files from our clients. Now I am constructing an algorithm using libpcap that deducts time differences between the servers by matching packets on both ends of the connection and

Re: [tcpdump-workers] Testbed for Botnet Detection

Anurag, > I have developed a botnet detection system as part of my Master's project. > This works like BotMiner but analyzes activities in depth. Though I have > tested individual modules but have not been able to test the complete system > with real-life network log. What exactly are you loo

Re: [tcpdump-workers] Testbed for Botnet Detection

Have you tried honeynet? http://www.honeynet.org/ On Wed, May 19, 2010 at 2:16 AM, Anurag wrote: > I have developed a botnet detection system as part of my Master's project. > This works like BotMiner but analyzes activities in depth. Though I have > tested individual modules but have not been

[tcpdump-workers] Testbed for Botnet Detection

I have developed a botnet detection system as part of my Master's project. This works like BotMiner but analyzes activities in depth. Though I have tested individual modules but have not been able to test the complete system with real-life network log. I would highly appreciate if someone coul