Description

• This file is a real Normal capture of a user in a large network doing normal tasks. We make sure manually that the computer was not infected. The user knew that it was being monitored, but it was done for a long time.
• We only have the binetflows file because
• The user uses Linux operating system.

Labels for the Tuples

There are fourth DNS tuples:

• 147.32.83.210-147.32.192.2-53-udp. Label: From-Normal-UDP-DNS--72 With 237 flows

• 147.32.83.210-147.32.192.3-53-udp. Label: From-Normal-UDP-DNS--73 With 237 flows

• 147.32.83.210-147.32.80.9-53-udp. Label: From-Normal-UDP-DNS-Principal.Server-2 With 3100 flows

• 147.32.83.210-147.32.82.19-53-udp. Label: From-Normal-UDP-DNS-Secondary.Server-2 With 923 flows

• 2001:718:2:1663:b046:67ae:481a:4704-2001:718:2:1621::19-53-udp. Label: From-Normal-UDP-DNS-IPV6-1 With 237 flows

Timeline

This dataset is part of a larger capture that expanded for several days. This dataset is only an extract. ## Tue Jun 09 2015 12:59:56 This capture started.

Tue Jun 09 2015 17:53:37

This capture was stopped.