<div dir="ltr"><div>We usually can give people pcaps for stuff they are looking for.  Join this list as it is the best place to ask:</div><div><br></div><a href="https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs">https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs</a><div><br></div><div>Thanks,</div><div><br></div><div>Francis</div><div><br></div><div><br></div><div><br><div><br></div><div><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 20, 2017 at 11:46 AM,  <span dir="ltr"><<a href="mailto:secres@linuxmail.org" target="_blank">secres@linuxmail.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:Verdana;font-size:12.0px"><div>While there are a few places to get pcaps, it can sometimes be hard to find network traffic for the newest malware out there.  For instance, trying to find Petya pcaps when it first hit was difficult.  Everyone seems to be ok with sharing the malware itself but not always the pcaps and not everyone has a lab to run and collect data from those files.  So I've been authorized to share the one's that I've created.  There isn't much there right now but hopefully it will be useful.  I may end up going back and add in a brief description for each pcap but for now it's just the pcaps.</div>

<div> </div>

<div>PCAP Location:</div>

<div><a href="https://github.com/SpiderLabs/IOCs-IDPS" target="_blank">https://github.com/SpiderLabs/<wbr>IOCs-IDPS</a></div>

<div> </div></div></div>
<br>______________________________<wbr>_________________<br>
Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@<wbr>openinfosecfoundation.org</a><br>
Site: <a href="http://suricata-ids.org" rel="noreferrer" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" rel="noreferrer" target="_blank">http://suricata-ids.org/<wbr>support/</a><br>
List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noreferrer" target="_blank">https://lists.<wbr>openinfosecfoundation.org/<wbr>mailman/listinfo/oisf-users</a><br>
<br>
Conference: <a href="https://suricon.net" rel="noreferrer" target="_blank">https://suricon.net</a><br>
Trainings: <a href="https://suricata-ids.org/training/" rel="noreferrer" target="_blank">https://suricata-ids.org/<wbr>training/</a><br></blockquote></div><br></div>