Index of /publicDatasets/CTU-Normal-30

[ICO]NameLast modifiedSizeDescription

[PARENTDIR]Parent Directory  -  
[   ]2017-05-01_normal.biargus2017-10-05 12:14 26M 
[   ]2017-05-01_normal.binetflow2017-10-05 12:14 4.7M 
[   ]2017-05-01_normal.capinfos2017-10-05 12:14 1.1K 
[   ]2017-05-01_normal.dnstop2017-10-05 12:13 21K 
[   ]2017-05-01_normal.passivedns2017-10-05 12:13 1.5M 
[   ]2017-05-01_normal.pcap2017-05-01 20:19 833M 
[   ]2017-05-01_normal.tcpdstat2017-10-05 12:14 2.1K 
[   ]2017-05-01_normal.weblogng2017-10-05 12:14 3.7M 
[TXT]README.html2022-06-27 18:28 3.3K 
[TXT]README.md2022-06-27 18:28 2.7K 
[DIR]bro/2017-05-02 19:37 -  
[DIR]suricata/2019-03-23 14:42 -  



IP Addresses

- Normal host:
- Default GW:


2017/05/01 16:16:00 CEST


websites: 241-360 websites from

2017/05/01 20:19:00 CEST



These files were generated in the Stratosphere Lab as part of the Malware Capture Facility Project in the CVUT University, Prague, Czech Republic. The goal is to store long-lived real botnet traffic and to generate labeled netflows files. Any question feel free to contact us: Sebastian Garcia:

You are free to use these files as long as you reference this project and the authors as follows: Garcia, Sebastian. Malware Capture Facility Project. Retrieved from