PCAP on Laboratoire de Haute Sécurité

Darknet

frederic.beck@inria.fr (Frederic Beck) — Thu, 06 Jun 2024 00:00:00 +0000

Internet Monitoring Passive listening PCAP CSV

Darknet

Monitoring unused address space, or Darknet, consist in capturing all traffic towards a set of ip adresses directly connected to Internet, without any active computer connected. All inbound traffic is unsolicited.

Thanks to our Darknet using 4096 contiguous public IP addresses, we can mesure networks attack on internet in real time, and especially large scale phenomena such as Internet wide port scanning, DDoS backscatter or DNS amplification attempts.

Honeypot Traces

frederic.beck@inria.fr (Frederic Beck) — Thu, 06 Jun 2024 00:00:00 +0000

Internet Honeypots Low Interaction PCAP Traces

Honeypot traces

Our distributed honeypot platform based on TPot allows us to operate various sensors running up to 20+ honeypots each, centralizing the collect traces, logs and binaries in the LHS. The collected data is indexed in realtime in an Elasticsearch cluster.

Probes are placed on various dedicated network connections in the LHS, in the cloud or in our partners networks, thanks to the CyberGenAI joint project with DFKI (Germany) and OMU (Japan).