Test baselines for Zeek.
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Baseline
Traces
scripts
tests
.gitignore
Makefile
README
README.rst
btest.cfg
traces.cfg

README.rst

This test-suite uses the following trace files:

2009-M57-day11-18.trace.gz 2009-M57-day11-21.trace.gz

These traces are part of the 2009-M57-Patents scenario from DigitalCorpora.org.

To quote the web site:

DigitalCorpora.org is a website of digital corpora for use in computer forensics education research. All of the disk images, memory dumps, and network packet captures available on this website are freely available and may be used without prior authorization or IRB approval. We also have available a research corpus of real data acquired from around the world. Use of that dataset is possible under special arrangement.

For more information, see:

http://digitalcorpora.org http://digitalcorpora.org/corpora/scenarios/m57-patents-scenario

We fixed the checkums in the traces though.