GAR-Project / project

DDoS attacks detection by using SVM on SDN networks.
https://gar-project.github.io/project/
139 stars 28 forks source link

Wrong result #15

Open exitclear opened 1 year ago

exitclear commented 1 year ago

Hello, because I can't connect to the influxdb on H4, my Telegraf configuration chooses to collect the data of the switch, but why are all the "icmp_inachos" data I export from the influxdb 0? I also carried out ddos attacks and normal traffic, but the data obtained are all 0 thank you!

Aptul commented 1 year ago

How did you make it connect to the switch?

exitclear commented 1 year ago

How did you make it connect to the switch?

Cancel the comment on the switch through the telograf.conf configuration file, and add the comment on the host

pcolladosoto commented 1 year ago

Hi @exitclear! I'm not really sure about what you problem is... I guess you mean that there's no data reaching InfluxDB: is that it?

Just like you said, you cannot reach the InfluxDB instance from the hosts belonging to the Mininet scenario: they "live" in two completely different networks. What you can do, however, is make the data reach InfluxDB through a regular file. After all, Mininet will only provide "network stacks" mimicking other systems, but all of them share the same (i.e. the host's) filesystem. You can try to run ls from within h4, for instance, and see what you get. You can take a look at this section of the documentation to find a bit more information on what's really going on behind the scenes.

I might be completely missing my shot here though: as I said, I'm not really sure about what they problem is... Could you maybe provide a bit more information?

exitclear commented 1 year ago

Thank you for your reply @pcolladosoto !I ran ls from h4, but the file I got is consistent with the file in Ubuntu. As you said, I can send data to InfluxDB through a regular file, but what should I do?Or can I have any way to connect these two networks? Thank you!