16 reputation
2
bio website
location
age
visits member for 1 year, 7 months
seen Apr 2 '13 at 3:21

Jan
11
awarded  Scholar
Jan
11
accepted Any one know about UDP traffic on source port 26221?
Jan
11
comment Where can I find worm traffic sample?
Thanks a lot @pnp and sorry for the mistake. Your feedback is useful. Thanks again.Regards
Dec
29
comment Any one know about UDP traffic on source port 26221?
Does the two unused ip addresses mean any thing?
Dec
29
comment Any one know about UDP traffic on source port 26221?
Hi @Rook, thanks for your reply. I allready used wireshark. I want to add an information,in wireshark all the packets are black (which means udp checksum is bad, and I don't know how this information can help) and the destination port takes an increasing manner and then starts from 6000,sometimes for about 10 packet it keeps the same dst port, at the end some known ports are used, for all packets the protocol is UDP, it didn't show any other protocol name other than udp. regards. thanks again.
Dec
29
asked Any one know about UDP traffic on source port 26221?
Dec
8
comment Where can I find worm traffic sample?
@pnpI'd like to ask about this. My program is small and targeting the scan activity phase of the worm, is it useful to use these large data set ?? and most of the dataset I saw is talking about DoS and I don't find one which targeting worm, any suggestion or advice?
Dec
8
comment Where can I find worm traffic sample?
Thanks a lot @pnp it looks great, I didn't check yet but I will feed you back with what is happedn.someone else give me another site for dataset didn't be mentioned in your question answers and may help you: iscx
Dec
7
awarded  Student
Dec
7
comment Where can I find worm traffic sample?
@Henning Klevjer: Hi , I opened the suggested samples, they are also not showing what I'm lookong for.the first one contains 1 packet only so it useless because I want to notice scanning activity and the other one contains anomaly in the packet payload for one packet which is not targeted in my program, any other suggestions?? :-(
Dec
7
comment Where can I find worm traffic sample?
Thanks everybody for your time and advice
Dec
7
comment Where can I find worm traffic sample?
Thanks a lot,yes ,as I mentioned in my question, I saw them but when I tried to open the file of slammer.pcap i've got a warning and I was afraid from open it, is there any procedures or measrements should be taken when work with these type of files,are they harmful to my pc? do you know further sites have these type of traffic?
Dec
7
asked Where can I find worm traffic sample?