#CCGEN ONLINE HOW TO#
#CCGEN ONLINE ARCHIVE#
#CCGEN ONLINE DOWNLOAD#

Important! Note that wrong, misleading configurations are possible.

rep: is the number of repetition that the same configuration must be injected in different flows (by default '1').

Implemented options: 'None' (default), 'tcp', 'udp', 'tcp/udp'. This is important for techniques that can only be implemented in certain protocols.

const: is included to specify additional constraints.

bitspkt: accounts for the number of covert bits that each packet (or transition between packets) contains.

In the ccgen/docs/techniques.md file, together with the description of the technique, you will find suitable examples of mapping files, which are stored in the ccgen/MappingFiles folder.

mapping: refers to the parameters and symbol-to-value correspondence to use in the injection of the covert channels.

Options are: '1tup' (for srcIP), '2tup' (for -srcIP, dstIP-), '3tup' (for -srcIP, dstIP, Protocol-), '4tup' (for -srcIP, dstIP, srcPort, dstPort-), and '5tup' (for -srcIP, dstIP, Protocol, srcPort, dstPort-)

key: stands for the flowkey to inject the channel.

You can find a list of implemented techniques with descriptions in the ccgen/docs/techniques.md file.

technique: the technique to use to create the covert channel.

It must be a text file with a sequence of '0s' and '1s'.

message_file: the file with the message to covertly send.

The features (or columns) of the configuration are: This configuration file has a CSV-table format with a header in which each row stands for a covert channel configuration. You can find a default example named config.wrp in this folder. The CCgen wrapper is called with a wrapper configuration file. Create a configuration file for the CCgen-wrapper

#CCGEN ONLINE DOWNLOAD#

Download go-flows from: and make sure that the folder is named.

The CCgen wrapper requires installing go-flows within the folder. To run the wrapper follow the steps below: 1.

Extracting the covert channels to evaluate the previous injection.

Searching for matching flows and creating corresponding ccGen configuration files.

The main purpose of the CCgen-wrapper is to allow the automatic injection of multiple covert channels in the same pcap. Read the README.md file within the folder for comprehensive information, also the documentation in the folder.

contains and saves relevant files related to the wrapper.

includes tools for transforming data and generating flow extraction configuration files.

#CCGEN ONLINE HOW TO#

contains several files on how to configure an infrastructure to run CCgen in the online modus.

contains hello_bin.txt, which is the binary codification of hello.txt.

contains hello.txt, an example of a short text file to be injected in covert channels.

#CCGEN ONLINE ARCHIVE#

This pcap is a portion of the captures provided by the MAWI Working Group Traffic Archive in contains a small test.pcap traffic capture to test the tool and run simple examples.Related tools for transforming text and binary data as well as for extracting flows with different flow-keys with go-flows.The wrapper automatically searches for matching flows in a given pcap and generates suitable configuration files for injecting multiples covert channels with CCgen. The CCgen tool for generating, injecting and extracting covert channels in network traffic.Generate, inject and extract covert channels in network traffic

Ccgen online