Index of /publicDatasets/IoTDatasets/CTU-Honeypot-Capture-2-154

	Name	Last modified	Size	Description
	Parent Directory		-
	bro/	2019-02-13 16:02	-
	suricata/	2022-01-30 12:27	-
	2018-10-16-08-43-55-192.168.100.109.capinfos	2019-02-13 16:02	1.1K
	README.md	2021-03-09 10:33	2.0K
	2018-10-16-08-43-55-192.168.100.109.dnstop	2019-02-13 16:02	2.9K
	README.html	2021-03-09 10:33	3.0K
	2018-10-16-08-43-55-192.168.100.109.passivedns	2019-02-13 16:02	4.3K
	README.json	2022-03-27 13:52	15K
	2018-10-16-08-43-55-192.168.100.109.pcap	2021-03-09 10:32	7.2M

IoT Lab Capture

• Description:
• Model: Edimax IC-7113W
• Duration:

Description of Files

• .capinfos
  • Capinfos file
• .dnstop
  • DNS top file
• .passivedns
  • Passive DNS file
• .pcap
  • Original pcap file
• bro
  • Folder with all the bro output files

IP Addresses

- Infected device: 192.168.100.109
- Default GW: 192.168.100.1

Generic Dataset name: CTU-Honeypot-Capture-2

Origin device: IP camera 1

Timeline

Start. 2018/05/21

Mon May 21 14:16:37 CEST 2018

The port redirection was not working for the last couple of days. The rule was applied again, and now the port redirection works well, just remember the limited bandwidth.

Thu Jul 12 12:12 CEST 2018

Sniffing computer went off due to maintenance.

Thu Jul 12 12:54:16 CEST 2018

Sniffing computer is back on.

Thu Jul 12 14:26:13 CEST 2018

Capturing traffic is working again.

Sat Jul 14 08:22 CEST 2018

Electricity outage at the building.

Sat Jul 14 09:41:12 CEST 2018

Electricity is back on, capturing started again.

Wed Jul 18 11:47:47 CEST 2018

Reboot of the sniffing computer.

Wed Jul 18 11:53:46 CEST 2018

Reboot of the sniffing computer.

Thu Jul 26 14:53:58 CEST 2018

Camera disconnected.

Tue Jul 31 10:24:53 CEST 2018

Camera connected again.

Fri Aug 10 14:19:56 CEST 2018

Camera maintenance from IP 147.32.217.200

Mon Sep 10 08:01 CEST 2018

Electricity outage at the university building.

Thu Oct 18 CEST 2018

Configuration of the lab infrastructure.

Disclaimer

These files were generated in the Stratosphere Laboratory as part of the Aposemat Project for collecting IoT malware captures Done in the CVUT University, Prague, Czech Republic. The goal is to store long-lived real iot malware traffic and to generate labeled netflows files. Any question feel free to contact us at: Sebastian Garcia: sebastian.garcia@agents.fel.cvut.cz

You need authorization from the Stratosphere Lab to use these files.

Suricata run with rules updated on 2021-03-09