Skip to content

This class allows to efficiently convert bigger than memory pcap files to a labeled feature-per-byte dataset in parquet format

License

Notifications You must be signed in to change notification settings

ancient-cthulhu/BytesProcessor

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 

Repository files navigation

BytesProcesser

This class allows to efficiently convert bigger than memory pcap files to a labeled feature-per-byte dataset in parquet format This allows for AI developers to access a dataset with a feature space of the first 1525 bytes of the ip layer as described on https://arxiv.org/pdf/2305.11039.pdf

The class uses the times and ips involved in events to extract and label the data, It also uses an additional time ranges list to consider when extracting data from the pcap even outside the events

Contributions are welcome, some points to work on are: -Include support port filtering logic -Include support for pcapng, possibly using a different parser than dpkt -Include support for more protocols

About

This class allows to efficiently convert bigger than memory pcap files to a labeled feature-per-byte dataset in parquet format

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%