BETH Dataset

timestamp Timestamp	sourceip SourceIP	destinationip DestinationIP	dnsquery DnsQuery	dnsanswer DnsAnswer	dnsanswerttl DnsAnswerTTL	dnsquerynames DnsQueryNames	dnsqueryclass DnsQueryClass	dnsquerytype DnsQueryType	numberofanswers NumberOfAnswers	sensorid SensorId
2021-05-16T17:13:14Z	10.100.1.95	10.100.0.2	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['A']		ip-10-100-1-95
2021-05-16T17:13:14Z	10.100.0.2	10.100.1.95	ssm.us-east-2.amazonaws.com	['52.95.19.240']	['17']	ssm.us-east-2.amazonaws.com	['IN']	['A']	1	ip-10-100-1-95
2021-05-16T17:13:14Z	10.100.1.95	10.100.0.2	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['AAAA']		ip-10-100-1-95
2021-05-16T17:13:14Z	10.100.0.2	10.100.1.95	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['AAAA']		ip-10-100-1-95
2021-05-16T17:13:16Z	10.100.1.186	10.100.0.2	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['A']		ip-10-100-1-186
2021-05-16T17:13:16Z	10.100.0.2	10.100.1.186	ssm.us-east-2.amazonaws.com	['52.95.21.209']	['41']	ssm.us-east-2.amazonaws.com	['IN']	['A']	1	ip-10-100-1-186
2021-05-16T17:13:16Z	10.100.1.186	10.100.0.2	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['AAAA']		ip-10-100-1-186
2021-05-16T17:13:17Z	10.100.0.2	10.100.1.186	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['AAAA']		ip-10-100-1-186
2021-05-16T17:13:17Z	10.100.1.105	10.100.0.2	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['A']		ip-10-100-1-105
2021-05-16T17:13:17Z	10.100.1.105	10.100.0.2	ssm.us-east-2.amazonaws.com	nan	nan	ssm.us-east-2.amazonaws.com	['IN']	['AAAA']		ip-10-100-1-105


CREATE TABLE labelled_2021may_ubuntu_dns (
  "timestamp" VARCHAR,
  "sourceip" VARCHAR,
  "destinationip" VARCHAR,
  "dnsquery" VARCHAR,
  "dnsanswer" VARCHAR,
  "dnsanswerttl" VARCHAR,
  "dnsquerynames" VARCHAR,
  "dnsqueryclass" VARCHAR,
  "dnsquerytype" VARCHAR,
  "numberofanswers" BIGINT,
  "dnsresponsecode" BIGINT,
  "dnsopcode" BIGINT,
  "sensorid" VARCHAR,
  "sus" BIGINT,
  "evil" BIGINT
);