Computer Immune Systems
Data Sets
Synthetic Sendmail
Synthetic ftp
Synthetic lpr
Live lpr
Live named
Login and ps
Data Sets and Software



General information

UNM xlock data [mixed live and synthetic]

Data for the xlock program were collected on a machine running Linux.

Use the original Linux mapping file for these traces.

There are 71 synthetic traces, from a script designed to exercise many of xlock's command line options.

There is also a single live trace collected over one weekend. (weekend starting 8/29/97) Be warned - this file includes approximately 16 million system calls!

The exploit used here is a buffer overflow of one of the command line options.

CERT advisory

We have two sample traces (7/24/97 - 7/25/97) of this exploit.

 
Computer Science Department, Farris Engineering Building,
University of New Mexico, Albuquerque, NM 87131
Phone: (505) 277-3112 Fax: (505) 277-6927
Email: forrest@cs.unm.edu