-
Notifications
You must be signed in to change notification settings - Fork 23
P2PBotnet
Jens Keim edited this page Oct 22, 2019
·
1 revision
In addition to the parameters from BaseAttack the P2PBotnet currently supports the following attack parameters:
Field name | Type | Description | Prerequisite |
---|---|---|---|
attack.duration | IntegerPositive | Duration of the attack in seconds | |
src.bots.count | IntegerPositive | Number of bots that actively initiate communication with other bots | |
trace.csv | FilePath | CSV abstract bot communication file (CABC) used as a base for attack packets | |
trace.xml | FilePath | XML abstract bot communication file (XABC) used as a base for attack packets | |
hidden_mark | Boolean | Signs the attack packets with a hidden mark ip.opt.sec_prot_auth_nsa == 1
|
|
inject.ip | IPAddress | IP address of the attacker | |
interval.selection.end | IntegerPositive | Line index for XABC-file used as the interval end | strategy: custom
|
interval.selection.start | IntegerPositive | Line index for XABC-file used as the interval start | strategy: custom
|
interval.selection.strategy | SpecificString([random , optimal , custom ]) |
Interval selection strategy further details | |
ip.reuse.external | Percentage | Percentage of public IPs from the input .pcap that should be reused. | |
ip.reuse.local | Percentage | Percentage of local IPs from the input .pcap that should be reused. | |
ip.reuse | Percentage | Percentage of IPs from the input .pcap that should be reused. | |
ports.ephemeral | Boolean | Strategy of port selection for dst ports of packets: True or False | |
nat.present | Boolean | If network-local bots are behind a Network Address Translation (NAT) system | |
packet.padding | IntegerLimited([0,100]) | Padding added to the packets | |
packets.limit | IntegerPositive | Limit for the total number of packets generated by the attack | |
ttl.global | Boolean | Base probability distribution for assigning TTL on the CAIDA dataset |