-
Notifications
You must be signed in to change notification settings - Fork 23
P2PBotnet
Jens Keim edited this page Oct 22, 2019
·
1 revision
In addition to the parameters from BaseAttack the P2PBotnet currently supports the following attack parameters:
| Field name | Type | Description | Prerequisite |
|---|---|---|---|
| attack.duration | IntegerPositive | Duration of the attack in seconds | |
| src.bots.count | IntegerPositive | Number of bots that actively initiate communication with other bots | |
| trace.csv | FilePath | CSV abstract bot communication file (CABC) used as a base for attack packets | |
| trace.xml | FilePath | XML abstract bot communication file (XABC) used as a base for attack packets | |
| hidden_mark | Boolean | Signs the attack packets with a hidden mark ip.opt.sec_prot_auth_nsa == 1
|
|
| inject.ip | IPAddress | IP address of the attacker | |
| interval.selection.end | IntegerPositive | Line index for XABC-file used as the interval end | strategy: custom
|
| interval.selection.start | IntegerPositive | Line index for XABC-file used as the interval start | strategy: custom
|
| interval.selection.strategy | SpecificString([random, optimal, custom]) |
Interval selection strategy further details | |
| ip.reuse.external | Percentage | Percentage of public IPs from the input .pcap that should be reused. | |
| ip.reuse.local | Percentage | Percentage of local IPs from the input .pcap that should be reused. | |
| ip.reuse | Percentage | Percentage of IPs from the input .pcap that should be reused. | |
| ports.ephemeral | Boolean | Strategy of port selection for dst ports of packets: True or False | |
| nat.present | Boolean | If network-local bots are behind a Network Address Translation (NAT) system | |
| packet.padding | IntegerLimited([0,100]) | Padding added to the packets | |
| packets.limit | IntegerPositive | Limit for the total number of packets generated by the attack | |
| ttl.global | Boolean | Base probability distribution for assigning TTL on the CAIDA dataset |