Extraction of features from DARPA dataset tcpdump files

[Shekhar Reddy Gaddam]

Dear Dr. Vern,

I'd like to extract 41 features and their corresponding attack classes based on
the DARPA 1999 dataset and 2000 dataset
(http://www.ll.mit.edu/IST/ideval/data/data_index.html) like the KDD Cup 99
dataset ( http://kdd.ics.uci.edu/databases/kddcup99/kddcup.names ). Is it
possible  to extract all the 41 features from tcpdump files. I was able to
extract 12 features only. I'm newbie to the bro tool, and i'd like to know if i
can extract all the 41 features from tcpdump files.

         

Regards,

Shekhar




-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/