CICFlowMeter icon indicating copy to clipboard operation
CICFlowMeter copied to clipboard

CICFlowmeter-V4.0 (formerly known as ISCXFlowMeter) is an Ethernet traffic Bi-flow generator and analyzer for anomaly detection that has been used in many Cybersecurity datsets such as Android Adware-...

Results 64 CICFlowMeter issues
Sort by recently updated
recently updated
newest added

Please where can I find the "Combined2.csv" file?

For some network attack traffic, some characteristics are unnecessary and time-consuming to calculate. May I ask in which files I should delete them and retain some of the features?

I believe either this dataset has not been generated properly or it does not have tor based traffic since there are no handshakes (commonly used for identification of TOR) part...

I can't understand what the purpose of this check is, or in actual fact what is actually being checked. How is the direction determined based solely on ips without context/history,...

I am using CICIFlowMeter for Converting [UNSW-NB15 Dataset pcaps](https://research.unsw.edu.au/projects/unsw-nb15-dataset) to CSV files . but it’s just generating an empty CSV with zero values. ![Screenshot 2022-06-20 101120](https://user-images.githubusercontent.com/78276661/174623721-0ae013f4-00cc-49d1-bc46-a28b0c4b3aeb.jpg) ![Screenshot 2022-06-20 101238](https://user-images.githubusercontent.com/78276661/174623725-a0493566-df73-4647-8bd5-26395d284117.jpg) But...

``` public void updateFlowBulk (BasicPacketInfo packet){ if(this.src == packet.getSrc()){ updateForwardBulk(packet,blastBulkTS); }else { updateBackwardBulk(packet,flastBulkTS); } } ``` The src/dest values are byte arrays. This is a memory address comparison that will...

I want to generate flow from CICFLOWMETER by its showing all packets ignored. Here is a snapshot of my problem. ![Capture](https://user-images.githubusercontent.com/100867664/165626583-eec904cb-be35-4728-be9b-efbdb0000997.PNG)

Hi, I have a pcap with packets captured at a constant length. But their actual packet size varies. This is clearly seen on the 'packets on wire' comment in pcap....

For example, this is DRDoS_NTP, and its port is not 123. ![image](https://user-images.githubusercontent.com/51431481/98764094-08c5e700-2416-11eb-87e4-a60888af764e.png) This is DRDoS_SNMP, and its port is not 161. ![image](https://user-images.githubusercontent.com/51431481/98764154-2abf6980-2416-11eb-909e-99e315d9ed9d.png)