├── 10-Baseline-Multicast
    ├── 10-Baseline-Multicast.pcap
    ├── RAE_635828588801847001.html
    ├── RAE_635828588801847001_0000.png
    └── RAE_635828588801847001_0001.png
├── 11-Baseline_Button_Pushes
    ├── 11-Baseline_Button_Pushes.pcap
    ├── 11-Baseline_Button_Pushes_IOBlock.csv
    ├── 11-Baseline_Button_Pushes_IOBlock.htm
    ├── 11-Baseline_Button_Pushes_IOBlock.pcap
    ├── 11-Baseline_Button_Pushes_IOBlock.xlsx
    ├── 11-Baseline_Button_Pushes_IOBlock_files
    │   ├── chart001.htm
    │   ├── filelist.xml
    │   ├── image001.png
    │   ├── sheet001.htm
    │   ├── stylesheet.css
    │   └── tabstrip.htm
    ├── 11-Baseline_Button_Pushes_PLC.csv
    ├── 11-Baseline_Button_Pushes_PLC.htm
    ├── 11-Baseline_Button_Pushes_PLC.pcap
    ├── 11-Baseline_Button_Pushes_PLC.xlsx
    ├── 11-Baseline_Button_Pushes_PLC_files
    │   ├── chart001.htm
    │   ├── filelist.xml
    │   ├── image001.png
    │   ├── sheet001.htm
    │   ├── stylesheet.css
    │   └── tabstrip.htm
    ├── RAE_635828589002063426.html
    ├── RAE_635828589002063426_0000.png
    └── RAE_635828589002063426_0001.png
├── 12-Ettercap_Scan_For_Hosts
    └── 12-Ettercap_Scan_For_Hosts.pcap
├── 13-ARP_Poison_Sniff
    ├── 13-ARP_Poison_Sniff
    │   ├── 13-ARP_Poison_Sniff.pcap
    │   ├── RAE_635828589259782419.html
    │   ├── RAE_635828589259782419_0000.png
    │   ├── RAE_635828589259782419_0001.png
    │   ├── RAE_635828589259782419_0002.png
    │   └── RAE_635828589259782419_0003.png
    ├── 13-ARP_Poison_Sniff_IOBlock
    │   ├── 13-ARP_Poison_Sniff_IOBlock.pcap
    │   ├── RAE_635828611670741837.html
    │   └── RAE_635828611670741837_0000.png
    ├── 13-ARP_Poison_Sniff_MITM_Only
    │   ├── 13-ARP_Poison_Sniff_MITM_Only.pcap
    │   ├── RAE_635828611814172691.html
    │   └── RAE_635828611814172691_0000.png
    ├── 13-ARP_Poison_Sniff_PLC-and-MITM_Combined
    │   ├── 13-ARP_Poison_Sniff_PLC-and-MITM_Combined.pcap
    │   ├── RAE_635828612307666814.html
    │   └── RAE_635828612307666814_0000.png
    ├── 13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst
    │   ├── 13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828612440593042.html
    │   └── RAE_635828612440593042_0000.png
    └── 13-ARP_Poison_Sniff_PLC_Only
    │   ├── 13-ARP_Poison_Sniff_PLC_Only.pcap
    │   ├── RAE_635828612126795729.html
    │   └── RAE_635828612126795729_0000.png
├── 14-ARP_Poison_Sniff_Button_Pushes
    ├── 14-ARP_Poison_Sniff_Button_Pushes
    │   ├── 14-ARP_Poison_Sniff_Button_Pushes.pcap
    │   ├── RAE_635828589846217251.html
    │   ├── RAE_635828589846217251_0000.png
    │   ├── RAE_635828589846217251_0001.png
    │   ├── RAE_635828589846217251_0002.png
    │   └── RAE_635828589846217251_0003.png
    ├── 14-ARP_Poison_Sniff_Button_Pushes_IOBlock
    │   ├── 14-ARP_Poison_Sniff_Button_Pushes_IOBlock.csv
    │   ├── 14-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap
    │   ├── RAE_635828726582252993.html
    │   └── RAE_635828726582252993_0000.png
    ├── 14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst
    │   ├── 14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.csv
    │   ├── 14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828726736575011.html
    │   └── RAE_635828726736575011_0000.png
    └── 14-ARP_Poison_Sniff_Button_Pushes_PLC
    │   ├── 14-ARP_Poison_Sniff_Button_Pushes_PLC.csv
    │   ├── 14-ARP_Poison_Sniff_Button_Pushes_PLC.pcap
    │   ├── RAE_635828732828709357.html
    │   └── RAE_635828732828709357_0000.png
├── 15-ARP_Poison_Sniff_Filter
    ├── 15-ARP_Poison_Sniff_Filter
    │   ├── 15-ARP_Poison_Sniff_Filter.pcap
    │   ├── RAE_635828590136430719.html
    │   ├── RAE_635828590136430719_0000.png
    │   ├── RAE_635828590136430719_0001.png
    │   ├── RAE_635828590136430719_0002.png
    │   └── RAE_635828590136430719_0003.png
    ├── 15-ARP_Poison_Sniff_Filter_IOBlock
    │   ├── 15-ARP_Poison_Sniff_Filter_IOBlock.csv
    │   ├── 15-ARP_Poison_Sniff_Filter_IOBlock.pcap
    │   ├── RAE_635828733104059647.html
    │   └── RAE_635828733104059647_0000.png
    ├── 15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst
    │   ├── 15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.csv
    │   ├── 15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828733333451798.html
    │   └── RAE_635828733333451798_0000.png
    └── 15-ARP_Poison_Sniff_Filter_PLC
    │   ├── 15-ARP_Poison_Sniff_Filter_PLC.csv
    │   ├── 15-ARP_Poison_Sniff_Filter_PLC.pcap
    │   ├── RAE_635828733221543019.html
    │   └── RAE_635828733221543019_0000.png
├── 16-ARP_Poison_Sniff_Filter_Button_Pushes
    ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes
    │   ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes.pcap
    │   ├── RAE_635828590339418386.html
    │   ├── RAE_635828590339418386_0000.png
    │   ├── RAE_635828590339418386_0001.png
    │   ├── RAE_635828590339418386_0002.png
    │   └── RAE_635828590339418386_0003.png
    ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock
    │   ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.csv
    │   ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap
    │   ├── RAE_635828744741836491.html
    │   └── RAE_635828744741836491_0000.png
    ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst
    │   ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.csv
    │   ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828744987675211.html
    │   └── RAE_635828744987675211_0000.png
    └── 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC
    │   ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.csv
    │   ├── 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap
    │   ├── RAE_635828744867983877.html
    │   └── RAE_635828744867983877_0000.png
├── 20-Baseline-Unicast
    ├── 20-Baseline-Unicast.pcap
    ├── RAE_635828590534115055.html
    ├── RAE_635828590534115055_0000.png
    └── RAE_635828590534115055_0001.png
├── 21-Baseline_Button_Pushes
    ├── 21-Baseline_Button_Pushes
    │   ├── 21-Baseline_Button_Pushes.pcap
    │   ├── RAE_635828590757275312.html
    │   ├── RAE_635828590757275312_0000.png
    │   └── RAE_635828590757275312_0001.png
    ├── 21-Baseline_Button_Pushes_IOBlock
    │   ├── 21-Baseline_Button_Pushes_IOBlock.csv
    │   ├── 21-Baseline_Button_Pushes_IOBlock.pcap
    │   ├── RAE_635828745174588343.html
    │   └── RAE_635828745174588343_0000.png
    └── 21-Baseline_Button_Pushes_PLC
    │   ├── 21-Baseline_Button_Pushes_PLC.csv
    │   ├── 21-Baseline_Button_Pushes_PLC.pcap
    │   ├── RAE_635828745280947974.html
    │   └── RAE_635828745280947974_0000.png
├── 22-ARP_Poison_Sniff
    ├── 22-ARP_Poison_Sniff
    │   ├── 22-ARP_Poison_Sniff.pcap
    │   ├── RAE_635828590956904225.html
    │   ├── RAE_635828590956904225_0000.png
    │   ├── RAE_635828590956904225_0001.png
    │   ├── RAE_635828590956904225_0002.png
    │   └── RAE_635828590956904225_0003.png
    ├── 22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst
    │   ├── 22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst.csv
    │   ├── 22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst.pcap
    │   ├── RAE_635828800100309287.html
    │   └── RAE_635828800100309287_0000.png
    ├── 22-ARP_Poison_Sniff_IOBlock
    │   ├── 22-ARP_Poison_Sniff_IOBlock-MITM.pcap
    │   ├── 22-ARP_Poison_Sniff_IOBlock-Only.pcap
    │   ├── 22-ARP_Poison_Sniff_IOBlock.csv
    │   ├── 22-ARP_Poison_Sniff_IOBlock.pcap
    │   ├── RAE_635828745418401323.html
    │   ├── RAE_635828745418401323_0000.png
    │   ├── RAE_635828747861326451.html
    │   ├── RAE_635828747861326451_0000.png
    │   ├── RAE_635828747968239259.html
    │   └── RAE_635828747968239259_0000.png
    ├── 22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst
    │   ├── 22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.csv
    │   ├── 22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828745698780575.html
    │   └── RAE_635828745698780575_0000.png
    └── 22-ARP_Poison_Sniff_PLC
    │   ├── 22-ARP_Poison_Sniff_PLC.csv
    │   ├── 22-ARP_Poison_Sniff_PLC.pcap
    │   ├── RAE_635828745595886780.html
    │   └── RAE_635828745595886780_0000.png
├── 23-ARP_Poison_Sniff_Button_Pushes
    ├── 23-ARP_Poison_Sniff_Button_Pushes
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes.pcap
    │   ├── RAE_635828591329097136.html
    │   ├── RAE_635828591329097136_0000.png
    │   ├── RAE_635828591329097136_0001.png
    │   ├── RAE_635828591329097136_0002.png
    │   └── RAE_635828591329097136_0003.png
    ├── 23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst.csv
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst.pcap
    │   ├── RAE_635828806396471789.html
    │   └── RAE_635828806396471789_0000.png
    ├── 23-ARP_Poison_Sniff_Button_Pushes_IOBlock
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_IOBlock.csv
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap
    │   ├── RAE_635828806238527852.html
    │   └── RAE_635828806238527852_0000.png
    ├── 23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.csv
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828806648704289.html
    │   └── RAE_635828806648704289_0000.png
    └── 23-ARP_Poison_Sniff_Button_Pushes_PLC
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_PLC.csv
    │   ├── 23-ARP_Poison_Sniff_Button_Pushes_PLC.pcap
    │   ├── RAE_635828806528771664.html
    │   └── RAE_635828806528771664_0000.png
├── 24-ARP_Poison_Sniff_Filter
    ├── 24-ARP_Poison_Sniff_Filter
    │   ├── 24-ARP_Poison_Sniff_Filter.pcap
    │   ├── RAE_635828591544987790.html
    │   ├── RAE_635828591544987790_0000.png
    │   ├── RAE_635828591544987790_0001.png
    │   ├── RAE_635828591544987790_0002.png
    │   └── RAE_635828591544987790_0003.png
    ├── 24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst
    │   ├── 24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst.csv
    │   ├── 24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst.pcap
    │   ├── RAE_635828812904067335.html
    │   └── RAE_635828812904067335_0000.png
    ├── 24-ARP_Poison_Sniff_Filter_IOBlock
    │   ├── 24-ARP_Poison_Sniff_Filter_IOBlock.csv
    │   ├── 24-ARP_Poison_Sniff_Filter_IOBlock.pcap
    │   ├── RAE_635828812784268734.html
    │   └── RAE_635828812784268734_0000.png
    ├── 24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst
    │   ├── 24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.csv
    │   ├── 24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828813145181518.html
    │   └── RAE_635828813145181518_0000.png
    └── 24-ARP_Poison_Sniff_Filter_PLC
    │   ├── 24-ARP_Poison_Sniff_Filter_PLC.csv
    │   ├── 24-ARP_Poison_Sniff_Filter_PLC.pcap
    │   ├── RAE_635828813020702103.html
    │   └── RAE_635828813020702103_0000.png
├── 25-ARP_Poison_Sniff_Filter_Button_Pushes
    ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes.pcap
    │   ├── RAE_635828591747542033.html
    │   ├── RAE_635828591747542033_0000.png
    │   ├── RAE_635828591747542033_0001.png
    │   ├── RAE_635828591747542033_0002.png
    │   └── RAE_635828591747542033_0003.png
    ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and-MITM_PLC_Dst
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and.MITM_PLC_Dst.csv
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and.MITM_PLC_Dst.pcap
    │   ├── RAE_635828813425065095.html
    │   └── RAE_635828813425065095_0000.png
    ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.csv
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap
    │   ├── RAE_635828813309478735.html
    │   └── RAE_635828813309478735_0000.png
    ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.csv
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap
    │   ├── RAE_635828813637195643.html
    │   └── RAE_635828813637195643_0000.png
    └── 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.csv
    │   ├── 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap
    │   ├── RAE_635828813534699785.html
    │   └── RAE_635828813534699785_0000.png
├── Mechanics of MITM for ICS.pptx
└── README.md


/10-Baseline-Multicast/10-Baseline-Multicast.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/10-Baseline-Multicast/10-Baseline-Multicast.pcap


--------------------------------------------------------------------------------
/10-Baseline-Multicast/RAE_635828588801847001.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 10-Baseline-Multicast.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.712ms<br />(5.764% of mean)</td><td class="results_value">10.306ms</td><td class="results_value">10.799ms<br />(4.784% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.104<br />(1.009% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">11785</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828588801847001_0000.png" /><h3>
77 | 			File 0 ~ 192.168.210.5->239.192.1.128 ENIP
78 | 		</h3><table cellpadding="5" class="results">
79 | 			<tr>
80 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
81 | 			</tr><tr>
82 | 				<td class="results_description">Jitter</td><td class="results_value">9.519ms<br />(4.81% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.475ms<br />(4.75% of mean)</td>
83 | 			</tr><tr>
84 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.063<br />(0.63% of mean)</td>
85 | 			</tr><tr>
86 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">12146</td>
87 | 			</tr>
88 | 		</table><img src="RAE_635828588801847001_0001.png" /><h2>
89 | 			Process Log
90 | 		</h2><p class="log">
91 | 		</p>
92 | 	</body>
93 | </html>


--------------------------------------------------------------------------------
/10-Baseline-Multicast/RAE_635828588801847001_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/10-Baseline-Multicast/RAE_635828588801847001_0000.png


--------------------------------------------------------------------------------
/10-Baseline-Multicast/RAE_635828588801847001_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/10-Baseline-Multicast/RAE_635828588801847001_0001.png


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes.pcap


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock.pcap


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock.xlsx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock.xlsx


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/chart001.htm:
--------------------------------------------------------------------------------
 1 | <html xmlns:v="urn:schemas-microsoft-com:vml"
 2 | xmlns:o="urn:schemas-microsoft-com:office:office"
 3 | xmlns:x="urn:schemas-microsoft-com:office:excel"
 4 | xmlns="http://www.w3.org/TR/REC-html40">
 5 | 
 6 | <head>
 7 | <meta http-equiv=Content-Type content="text/html; charset=windows-1252">
 8 | <meta name=ProgId content=Excel.Sheet>
 9 | <meta name=Generator content="Microsoft Excel 15">
10 | <link id=Main-File rel=Main-File href="../11-Baseline_Button_Pushes_IOBlock.htm">
11 | <link rel=File-List href=filelist.xml>
12 | <link rel=Edit-Time-Data href=editdata.mso>
13 | <!--[if !mso]>
14 | <style>
15 | v\:* {behavior:url(#default#VML);}
16 | o\:* {behavior:url(#default#VML);}
17 | x\:* {behavior:url(#default#VML);}
18 | .shape {behavior:url(#default#VML);}
19 | </style>
20 | <![endif]-->
21 | <link rel=Stylesheet href=stylesheet.css>
22 | <style>
23 | <!--@page
24 | 	{margin:.75in .7in .75in .7in;
25 | 	mso-header-margin:.3in;
26 | 	mso-footer-margin:.3in;
27 | 	mso-page-orientation:landscape;}
28 | -->
29 | </style>
30 | <![if !supportTabStrip]><script language="JavaScript">
31 | <!--
32 | function fnUpdateTabs()
33 |  {
34 |   if (parent.window.g_iIEVer>=4) {
35 |    if (parent.document.readyState=="complete"
36 |     && parent.frames['frTabs'].document.readyState=="complete")
37 |    parent.fnSetActiveSheet(1);
38 |   else
39 |    window.setTimeout("fnUpdateTabs();",150);
40 |  }
41 | }
42 | 
43 | if (window.name!="frSheet")
44 |  window.location.replace("../11-Baseline_Button_Pushes_IOBlock.htm");
45 | else
46 |  fnUpdateTabs();
47 | //-->
48 | </script>
49 | <![endif]>
50 | </head>
51 | 
52 | <body>
53 | <img src=image001.png alt=Chart1>
54 | </body>
55 | 
56 | </html>
57 | 


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/filelist.xml:
--------------------------------------------------------------------------------
1 | <xml xmlns:o="urn:schemas-microsoft-com:office:office">
2 |  <o:MainFile HRef="../11-Baseline_Button_Pushes_IOBlock.htm"/>
3 |  <o:File HRef="stylesheet.css"/>
4 |  <o:File HRef="tabstrip.htm"/>
5 |  <o:File HRef="sheet001.htm"/>
6 |  <o:File HRef="chart001.htm"/>
7 |  <o:File HRef="image001.png"/>
8 |  <o:File HRef="filelist.xml"/>
9 | </xml>


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/image001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/image001.png


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/sheet001.htm:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/sheet001.htm


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/stylesheet.css:
--------------------------------------------------------------------------------
 1 | tr
 2 | 	{mso-height-source:auto;}
 3 | col
 4 | 	{mso-width-source:auto;}
 5 | br
 6 | 	{mso-data-placement:same-cell;}
 7 | .style0
 8 | 	{mso-number-format:General;
 9 | 	text-align:general;
10 | 	vertical-align:bottom;
11 | 	white-space:nowrap;
12 | 	mso-rotate:0;
13 | 	mso-background-source:auto;
14 | 	mso-pattern:auto;
15 | 	color:black;
16 | 	font-size:11.0pt;
17 | 	font-weight:400;
18 | 	font-style:normal;
19 | 	text-decoration:none;
20 | 	font-family:Calibri, sans-serif;
21 | 	mso-font-charset:0;
22 | 	border:none;
23 | 	mso-protection:locked visible;
24 | 	mso-style-name:Normal;
25 | 	mso-style-id:0;}
26 | td
27 | 	{mso-style-parent:style0;
28 | 	padding:0px;
29 | 	mso-ignore:padding;
30 | 	color:black;
31 | 	font-size:11.0pt;
32 | 	font-weight:400;
33 | 	font-style:normal;
34 | 	text-decoration:none;
35 | 	font-family:Calibri, sans-serif;
36 | 	mso-font-charset:0;
37 | 	mso-number-format:General;
38 | 	text-align:general;
39 | 	vertical-align:bottom;
40 | 	border:none;
41 | 	mso-background-source:auto;
42 | 	mso-pattern:auto;
43 | 	mso-protection:locked visible;
44 | 	white-space:nowrap;
45 | 	mso-rotate:0;}
46 | .xl65
47 | 	{mso-style-parent:style0;
48 | 	mso-number-format:00000000;}
49 | 


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_IOBlock_files/tabstrip.htm:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <meta http-equiv=Content-Type content="text/html; charset=windows-1252">
 4 | <meta name=ProgId content=Excel.Sheet>
 5 | <meta name=Generator content="Microsoft Excel 15">
 6 | <link id=Main-File rel=Main-File href="../11-Baseline_Button_Pushes_IOBlock.htm">
 7 | 
 8 | <script language="JavaScript">
 9 | <!--
10 | if (window.name!="frTabs")
11 |  window.location.replace(document.all.item("Main-File").href);
12 | //-->
13 | </script>
14 | <style>
15 | <!--
16 | A {
17 |     text-decoration:none;
18 |     color:#000000;
19 |     font-size:9pt;
20 | }
21 | -->
22 | </style>
23 | </head>
24 | <body topmargin=0 leftmargin=0 bgcolor="#808080">
25 | <table border=0 cellspacing=1>
26 |  <tr>
27 |  <td bgcolor="#FFFFFF" nowrap><b><small><small>&nbsp;<a href="sheet001.htm" target="frSheet"><font face="Arial" color="#000000">11-Baseline_Button_Pushes_IOBlo</font></a>&nbsp;</small></small></b></td>
28 |  <td bgcolor="#FFFFFF" nowrap><b><small><small>&nbsp;<a href="chart001.htm" target="frSheet"><font face="Arial" color="#000000">Chart1</font></a>&nbsp;</small></small></b></td>
29 | 
30 |  </tr>
31 | </table>
32 | </body>
33 | </html>
34 | 


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC.pcap


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC.xlsx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC.xlsx


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/chart001.htm:
--------------------------------------------------------------------------------
 1 | <html xmlns:v="urn:schemas-microsoft-com:vml"
 2 | xmlns:o="urn:schemas-microsoft-com:office:office"
 3 | xmlns:x="urn:schemas-microsoft-com:office:excel"
 4 | xmlns="http://www.w3.org/TR/REC-html40">
 5 | 
 6 | <head>
 7 | <meta http-equiv=Content-Type content="text/html; charset=windows-1252">
 8 | <meta name=ProgId content=Excel.Sheet>
 9 | <meta name=Generator content="Microsoft Excel 15">
10 | <link id=Main-File rel=Main-File href="../11-Baseline_Button_Pushes_PLC.htm">
11 | <link rel=File-List href=filelist.xml>
12 | <link rel=Edit-Time-Data href=editdata.mso>
13 | <!--[if !mso]>
14 | <style>
15 | v\:* {behavior:url(#default#VML);}
16 | o\:* {behavior:url(#default#VML);}
17 | x\:* {behavior:url(#default#VML);}
18 | .shape {behavior:url(#default#VML);}
19 | </style>
20 | <![endif]-->
21 | <link rel=Stylesheet href=stylesheet.css>
22 | <style>
23 | <!--@page
24 | 	{margin:.75in .7in .75in .7in;
25 | 	mso-header-margin:.3in;
26 | 	mso-footer-margin:.3in;
27 | 	mso-page-orientation:landscape;}
28 | -->
29 | </style>
30 | <![if !supportTabStrip]><script language="JavaScript">
31 | <!--
32 | function fnUpdateTabs()
33 |  {
34 |   if (parent.window.g_iIEVer>=4) {
35 |    if (parent.document.readyState=="complete"
36 |     && parent.frames['frTabs'].document.readyState=="complete")
37 |    parent.fnSetActiveSheet(1);
38 |   else
39 |    window.setTimeout("fnUpdateTabs();",150);
40 |  }
41 | }
42 | 
43 | if (window.name!="frSheet")
44 |  window.location.replace("../11-Baseline_Button_Pushes_PLC.htm");
45 | else
46 |  fnUpdateTabs();
47 | //-->
48 | </script>
49 | <![endif]>
50 | </head>
51 | 
52 | <body>
53 | <img src=image001.png alt=Chart1>
54 | </body>
55 | 
56 | </html>
57 | 


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/filelist.xml:
--------------------------------------------------------------------------------
1 | <xml xmlns:o="urn:schemas-microsoft-com:office:office">
2 |  <o:MainFile HRef="../11-Baseline_Button_Pushes_PLC.htm"/>
3 |  <o:File HRef="stylesheet.css"/>
4 |  <o:File HRef="tabstrip.htm"/>
5 |  <o:File HRef="sheet001.htm"/>
6 |  <o:File HRef="chart001.htm"/>
7 |  <o:File HRef="image001.png"/>
8 |  <o:File HRef="filelist.xml"/>
9 | </xml>


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/image001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/image001.png


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/sheet001.htm:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/sheet001.htm


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/stylesheet.css:
--------------------------------------------------------------------------------
 1 | tr
 2 | 	{mso-height-source:auto;}
 3 | col
 4 | 	{mso-width-source:auto;}
 5 | br
 6 | 	{mso-data-placement:same-cell;}
 7 | .style0
 8 | 	{mso-number-format:General;
 9 | 	text-align:general;
10 | 	vertical-align:bottom;
11 | 	white-space:nowrap;
12 | 	mso-rotate:0;
13 | 	mso-background-source:auto;
14 | 	mso-pattern:auto;
15 | 	color:black;
16 | 	font-size:11.0pt;
17 | 	font-weight:400;
18 | 	font-style:normal;
19 | 	text-decoration:none;
20 | 	font-family:Calibri, sans-serif;
21 | 	mso-font-charset:0;
22 | 	border:none;
23 | 	mso-protection:locked visible;
24 | 	mso-style-name:Normal;
25 | 	mso-style-id:0;}
26 | td
27 | 	{mso-style-parent:style0;
28 | 	padding:0px;
29 | 	mso-ignore:padding;
30 | 	color:black;
31 | 	font-size:11.0pt;
32 | 	font-weight:400;
33 | 	font-style:normal;
34 | 	text-decoration:none;
35 | 	font-family:Calibri, sans-serif;
36 | 	mso-font-charset:0;
37 | 	mso-number-format:General;
38 | 	text-align:general;
39 | 	vertical-align:bottom;
40 | 	border:none;
41 | 	mso-background-source:auto;
42 | 	mso-pattern:auto;
43 | 	mso-protection:locked visible;
44 | 	white-space:nowrap;
45 | 	mso-rotate:0;}
46 | 


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/11-Baseline_Button_Pushes_PLC_files/tabstrip.htm:
--------------------------------------------------------------------------------
 1 | <html>
 2 | <head>
 3 | <meta http-equiv=Content-Type content="text/html; charset=windows-1252">
 4 | <meta name=ProgId content=Excel.Sheet>
 5 | <meta name=Generator content="Microsoft Excel 15">
 6 | <link id=Main-File rel=Main-File href="../11-Baseline_Button_Pushes_PLC.htm">
 7 | 
 8 | <script language="JavaScript">
 9 | <!--
10 | if (window.name!="frTabs")
11 |  window.location.replace(document.all.item("Main-File").href);
12 | //-->
13 | </script>
14 | <style>
15 | <!--
16 | A {
17 |     text-decoration:none;
18 |     color:#000000;
19 |     font-size:9pt;
20 | }
21 | -->
22 | </style>
23 | </head>
24 | <body topmargin=0 leftmargin=0 bgcolor="#808080">
25 | <table border=0 cellspacing=1>
26 |  <tr>
27 |  <td bgcolor="#FFFFFF" nowrap><b><small><small>&nbsp;<a href="sheet001.htm" target="frSheet"><font face="Arial" color="#000000">11-Baseline_Button_Pushes_PLC</font></a>&nbsp;</small></small></b></td>
28 |  <td bgcolor="#FFFFFF" nowrap><b><small><small>&nbsp;<a href="chart001.htm" target="frSheet"><font face="Arial" color="#000000">Chart1</font></a>&nbsp;</small></small></b></td>
29 | 
30 |  </tr>
31 | </table>
32 | </body>
33 | </html>
34 | 


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/RAE_635828589002063426.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 11-Baseline_Button_Pushes.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.739ms<br />(5.492% of mean)</td><td class="results_value">10.305ms</td><td class="results_value">10.81ms<br />(4.901% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.111<br />(1.077% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5126</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828589002063426_0000.png" /><h3>
77 | 			File 0 ~ 192.168.210.5->239.192.1.128 ENIP
78 | 		</h3><table cellpadding="5" class="results">
79 | 			<tr>
80 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
81 | 			</tr><tr>
82 | 				<td class="results_description">Jitter</td><td class="results_value">9.544ms<br />(4.56% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.44ms<br />(4.4% of mean)</td>
83 | 			</tr><tr>
84 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.064<br />(0.64% of mean)</td>
85 | 			</tr><tr>
86 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5280</td>
87 | 			</tr>
88 | 		</table><img src="RAE_635828589002063426_0001.png" /><h2>
89 | 			Process Log
90 | 		</h2><p class="log">
91 | 		</p>
92 | 	</body>
93 | </html>


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/RAE_635828589002063426_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/RAE_635828589002063426_0000.png


--------------------------------------------------------------------------------
/11-Baseline_Button_Pushes/RAE_635828589002063426_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/11-Baseline_Button_Pushes/RAE_635828589002063426_0001.png


--------------------------------------------------------------------------------
/12-Ettercap_Scan_For_Hosts/12-Ettercap_Scan_For_Hosts.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/12-Ettercap_Scan_For_Hosts/12-Ettercap_Scan_For_Hosts.pcap


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff.pcap


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0000.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0001.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0002.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff/RAE_635828589259782419_0003.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_IOBlock/13-ARP_Poison_Sniff_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_IOBlock/13-ARP_Poison_Sniff_IOBlock.pcap


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_IOBlock/RAE_635828611670741837.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 13-ARP_Poison_Sniff_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->239.192.1.128 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.589ms<br />(4.11% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.502ms<br />(5.02% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.075<br />(0.75% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6694</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828611670741837_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_IOBlock/RAE_635828611670741837_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_IOBlock/RAE_635828611670741837_0000.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_MITM_Only/13-ARP_Poison_Sniff_MITM_Only.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_MITM_Only/13-ARP_Poison_Sniff_MITM_Only.pcap


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_MITM_Only/RAE_635828611814172691.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 13-ARP_Poison_Sniff_MITM_Only.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.428ms<br />(95.849% of mean)</td><td class="results_value">10.311ms</td><td class="results_value">28.148ms<br />(172.99% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">2.071<br />(20.085% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">4609</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828611814172691_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_MITM_Only/RAE_635828611814172691_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_MITM_Only/RAE_635828611814172691_0000.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_Combined/13-ARP_Poison_Sniff_PLC-and-MITM_Combined.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_Combined/13-ARP_Poison_Sniff_PLC-and-MITM_Combined.pcap


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_Combined/RAE_635828612307666814.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 13-ARP_Poison_Sniff_PLC-and-MITM_Combined.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.005ms<br />(99.917% of mean)</td><td class="results_value">6.028ms</td><td class="results_value">10.754ms<br />(78.401% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">3.286<br />(54.512% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">11101</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828612307666814_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_Combined/RAE_635828612307666814_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_Combined/RAE_635828612307666814_0000.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/RAE_635828612440593042.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.428ms<br />(95.849% of mean)</td><td class="results_value">10.31ms</td><td class="results_value">28.148ms<br />(173.016% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.747<br />(16.945% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6492</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828612440593042_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/RAE_635828612440593042_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/RAE_635828612440593042_0000.png


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC_Only/13-ARP_Poison_Sniff_PLC_Only.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC_Only/13-ARP_Poison_Sniff_PLC_Only.pcap


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC_Only/RAE_635828612126795729.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 13-ARP_Poison_Sniff_PLC_Only.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.868ms<br />(4.287% of mean)</td><td class="results_value">10.31ms</td><td class="results_value">10.904ms<br />(5.761% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.112<br />(1.086% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6492</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828612126795729_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC_Only/RAE_635828612126795729_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/13-ARP_Poison_Sniff/13-ARP_Poison_Sniff_PLC_Only/RAE_635828612126795729_0000.png


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes.pcap


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0000.png


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0001.png


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0002.png


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes/RAE_635828589846217251_0003.png


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_IOBlock/14-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_IOBlock/14-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_IOBlock/RAE_635828726582252993.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 14-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->239.192.1.128 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.545ms<br />(4.55% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.448ms<br />(4.48% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.081<br />(0.81% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6246</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828726582252993_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_IOBlock/RAE_635828726582252993_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_IOBlock/RAE_635828726582252993_0000.png


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828726736575011.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">4.013ms<br />(61.133% of mean)</td><td class="results_value">10.325ms</td><td class="results_value">16.012ms<br />(55.08% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.7<br />(16.465% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6049</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828726736575011_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828726736575011_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828726736575011_0000.png


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC/14-ARP_Poison_Sniff_Button_Pushes_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC/14-ARP_Poison_Sniff_Button_Pushes_PLC.pcap


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC/RAE_635828732828709357.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 14-ARP_Poison_Sniff_Button_Pushes_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.88ms<br />(4.31% of mean)</td><td class="results_value">10.325ms</td><td class="results_value">10.777ms<br />(4.378% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.114<br />(1.104% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6049</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828732828709357_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC/RAE_635828732828709357_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/14-ARP_Poison_Sniff_Button_Pushes/14-ARP_Poison_Sniff_Button_Pushes_PLC/RAE_635828732828709357_0000.png


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter.pcap


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0000.png


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0001.png


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0002.png


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter/RAE_635828590136430719_0003.png


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_IOBlock/15-ARP_Poison_Sniff_Filter_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_IOBlock/15-ARP_Poison_Sniff_Filter_IOBlock.pcap


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_IOBlock/RAE_635828733104059647.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 15-ARP_Poison_Sniff_Filter_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->239.192.1.128 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.597ms<br />(4.03% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.387ms<br />(3.87% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.08<br />(0.8% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5442</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828733104059647_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_IOBlock/RAE_635828733104059647_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_IOBlock/RAE_635828733104059647_0000.png


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/RAE_635828733333451798.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.01ms<br />(99.903% of mean)</td><td class="results_value">10.333ms</td><td class="results_value">28.07ms<br />(171.654% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.554<br />(15.039% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5266</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828733333451798_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/RAE_635828733333451798_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/RAE_635828733333451798_0000.png


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC/15-ARP_Poison_Sniff_Filter_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC/15-ARP_Poison_Sniff_Filter_PLC.pcap


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC/RAE_635828733221543019.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 15-ARP_Poison_Sniff_Filter_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.898ms<br />(4.21% of mean)</td><td class="results_value">10.333ms</td><td class="results_value">10.834ms<br />(4.849% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.115<br />(1.113% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5266</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828733221543019_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC/RAE_635828733221543019_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/15-ARP_Poison_Sniff_Filter/15-ARP_Poison_Sniff_Filter_PLC/RAE_635828733221543019_0000.png


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes.pcap


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0000.png


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0001.png


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0002.png


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828590339418386_0003.png


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/RAE_635828744741836491.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->239.192.1.128 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.539ms<br />(4.61% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.401ms<br />(4.01% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.059<br />(0.59% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5540</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828744741836491_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/RAE_635828744741836491_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/RAE_635828744741836491_0000.png


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828744987675211.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.011ms<br />(99.894% of mean)</td><td class="results_value">10.34ms</td><td class="results_value">21.504ms<br />(107.969% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.669<br />(16.141% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5358</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828744987675211_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828744987675211_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828744987675211_0000.png


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/RAE_635828744867983877.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.868ms<br />(4.565% of mean)</td><td class="results_value">10.34ms</td><td class="results_value">10.897ms<br />(5.387% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.116<br />(1.122% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5358</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828744867983877_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/RAE_635828744867983877_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/16-ARP_Poison_Sniff_Filter_Button_Pushes/16-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/RAE_635828744867983877_0000.png


--------------------------------------------------------------------------------
/20-Baseline-Unicast/20-Baseline-Unicast.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/20-Baseline-Unicast/20-Baseline-Unicast.pcap


--------------------------------------------------------------------------------
/20-Baseline-Unicast/RAE_635828590534115055.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 20-Baseline-Unicast.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.714ms<br />(6.272% of mean)</td><td class="results_value">10.364ms</td><td class="results_value">10.925ms<br />(5.413% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.137<br />(1.322% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">11767</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828590534115055_0000.png" /><h3>
77 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
78 | 		</h3><table cellpadding="5" class="results">
79 | 			<tr>
80 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
81 | 			</tr><tr>
82 | 				<td class="results_description">Jitter</td><td class="results_value">9.514ms<br />(4.86% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.446ms<br />(4.46% of mean)</td>
83 | 			</tr><tr>
84 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.058<br />(0.58% of mean)</td>
85 | 			</tr><tr>
86 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">12195</td>
87 | 			</tr>
88 | 		</table><img src="RAE_635828590534115055_0001.png" /><h2>
89 | 			Process Log
90 | 		</h2><p class="log">
91 | 		</p>
92 | 	</body>
93 | </html>


--------------------------------------------------------------------------------
/20-Baseline-Unicast/RAE_635828590534115055_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/20-Baseline-Unicast/RAE_635828590534115055_0000.png


--------------------------------------------------------------------------------
/20-Baseline-Unicast/RAE_635828590534115055_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/20-Baseline-Unicast/RAE_635828590534115055_0001.png


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes.pcap


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes/RAE_635828590757275312_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes/RAE_635828590757275312_0000.png


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes/RAE_635828590757275312_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes/RAE_635828590757275312_0001.png


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_IOBlock/21-Baseline_Button_Pushes_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_IOBlock/21-Baseline_Button_Pushes_IOBlock.pcap


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_IOBlock/RAE_635828745174588343.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 21-Baseline_Button_Pushes_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.534ms<br />(4.66% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.372ms<br />(3.72% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.056<br />(0.56% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">3340</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828745174588343_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_IOBlock/RAE_635828745174588343_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_IOBlock/RAE_635828745174588343_0000.png


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_PLC/21-Baseline_Button_Pushes_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_PLC/21-Baseline_Button_Pushes_PLC.pcap


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_PLC/RAE_635828745280947974.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 21-Baseline_Button_Pushes_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">10.006ms<br />(3.408% of mean)</td><td class="results_value">10.359ms</td><td class="results_value">10.916ms<br />(5.377% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.139<br />(1.342% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">3224</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828745280947974_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_PLC/RAE_635828745280947974_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/21-Baseline_Button_Pushes/21-Baseline_Button_Pushes_PLC/RAE_635828745280947974_0000.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff.pcap


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0000.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0001.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0002.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff/RAE_635828590956904225_0003.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst/22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst/22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst.pcap


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst/RAE_635828800100309287.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.013ms<br />(99.87% of mean)</td><td class="results_value">10ms</td><td class="results_value">35.914ms<br />(259.14% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.688<br />(16.88% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">7246</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828800100309287_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst/RAE_635828800100309287_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock-and-MITM_PLC_Dst/RAE_635828800100309287_0000.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/22-ARP_Poison_Sniff_IOBlock-MITM.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/22-ARP_Poison_Sniff_IOBlock-MITM.pcap


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/22-ARP_Poison_Sniff_IOBlock-Only.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/22-ARP_Poison_Sniff_IOBlock-Only.pcap


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/22-ARP_Poison_Sniff_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/22-ARP_Poison_Sniff_IOBlock.pcap


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828745418401323.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 22-ARP_Poison_Sniff_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.013ms<br />(99.782% of mean)</td><td class="results_value">5.977ms</td><td class="results_value">10.386ms<br />(73.766% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">3.01<br />(50.36% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">12121</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828745418401323_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828745418401323_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828745418401323_0000.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828747861326451.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 22-ARP_Poison_Sniff_IOBlock-MITM.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.013ms<br />(99.87% of mean)</td><td class="results_value">10ms</td><td class="results_value">35.914ms<br />(259.14% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">2.055<br />(20.55% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">4875</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828747861326451_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828747861326451_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828747861326451_0000.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828747968239259.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 22-ARP_Poison_Sniff_IOBlock-Only.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.576ms<br />(4.24% of mean)</td><td class="results_value">10ms</td><td class="results_value">10.417ms<br />(4.17% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.076<br />(0.76% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">7246</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828747968239259_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828747968239259_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_IOBlock/RAE_635828747968239259_0000.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/RAE_635828745698780575.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.005ms<br />(99.952% of mean)</td><td class="results_value">10.346ms</td><td class="results_value">41.142ms<br />(297.661% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.689<br />(16.325% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">7003</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828745698780575_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/RAE_635828745698780575_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC-and-MITM_IOBlock_Dst/RAE_635828745698780575_0000.png


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC/22-ARP_Poison_Sniff_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC/22-ARP_Poison_Sniff_PLC.pcap


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC/RAE_635828745595886780.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 22-ARP_Poison_Sniff_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">9.783ms<br />(5.442% of mean)</td><td class="results_value">10.346ms</td><td class="results_value">10.879ms<br />(5.152% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">0.14<br />(1.353% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">7003</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828745595886780_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC/RAE_635828745595886780_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/22-ARP_Poison_Sniff/22-ARP_Poison_Sniff_PLC/RAE_635828745595886780_0000.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes.pcap


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0000.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0001.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0002.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes/RAE_635828591329097136_0003.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst/23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst/23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst.pcap


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst/RAE_635828806396471789.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.008ms<br />(99.92% of mean)</td><td class="results_value">10ms</td><td class="results_value">37.023ms<br />(270.23% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.706<br />(17.06% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6145</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828806396471789_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst/RAE_635828806396471789_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock-and-MITM_PLC_Dst/RAE_635828806396471789_0000.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock/23-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock/23-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock/RAE_635828806238527852.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 23-ARP_Poison_Sniff_Button_Pushes_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.002ms<br />(99.967% of mean)</td><td class="results_value">6.071ms</td><td class="results_value">10.367ms<br />(70.763% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">2.857<br />(47.06% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">10120</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828806238527852_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock/RAE_635828806238527852_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_IOBlock/RAE_635828806238527852_0000.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828806648704289.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.376ms<br />(96.366% of mean)</td><td class="results_value">10.347ms</td><td class="results_value">36.699ms<br />(254.683% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.68<br />(16.237% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5938</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828806648704289_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828806648704289_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828806648704289_0000.png


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC/23-ARP_Poison_Sniff_Button_Pushes_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC/23-ARP_Poison_Sniff_Button_Pushes_PLC.pcap


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC/RAE_635828806528771664.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 23-ARP_Poison_Sniff_Button_Pushes_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.376ms<br />(94.014% of mean)</td><td class="results_value">6.281ms</td><td class="results_value">10.9ms<br />(73.539% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">3.143<br />(50.04% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">9781</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828806528771664_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC/RAE_635828806528771664_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/23-ARP_Poison_Sniff_Button_Pushes/23-ARP_Poison_Sniff_Button_Pushes_PLC/RAE_635828806528771664_0000.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter.pcap


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0000.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0001.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0002.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter/RAE_635828591544987790_0003.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst/24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst/24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst.pcap


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst/RAE_635828812904067335.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.356ms<br />(96.44% of mean)</td><td class="results_value">10ms</td><td class="results_value">39.762ms<br />(297.62% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.554<br />(15.54% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6894</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828812904067335_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst/RAE_635828812904067335_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock-and-MITM_PLC_Dst/RAE_635828812904067335_0000.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock/24-ARP_Poison_Sniff_Filter_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock/24-ARP_Poison_Sniff_Filter_IOBlock.pcap


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock/RAE_635828812784268734.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 24-ARP_Poison_Sniff_Filter_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.356ms<br />(94.367% of mean)</td><td class="results_value">6.32ms</td><td class="results_value">10.4ms<br />(64.557% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">2.91<br />(46.044% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">10907</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828812784268734_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock/RAE_635828812784268734_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_IOBlock/RAE_635828812784268734_0000.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/RAE_635828813145181518.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.356ms<br />(96.553% of mean)</td><td class="results_value">10.327ms</td><td class="results_value">36ms<br />(248.601% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.541<br />(14.922% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6675</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828813145181518_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/RAE_635828813145181518_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC-and-MITM_IOBlock_Dst/RAE_635828813145181518_0000.png


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC/24-ARP_Poison_Sniff_Filter_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC/24-ARP_Poison_Sniff_Filter_PLC.pcap


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC/RAE_635828813020702103.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 24-ARP_Poison_Sniff_Filter_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.356ms<br />(94.547% of mean)</td><td class="results_value">6.528ms</td><td class="results_value">10.909ms<br />(67.111% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">3.248<br />(49.755% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">10558</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828813020702103_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC/RAE_635828813020702103_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/24-ARP_Poison_Sniff_Filter/24-ARP_Poison_Sniff_Filter_PLC/RAE_635828813020702103_0000.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes.pcap


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0000.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0001.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0001.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0002.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0002.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0003.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes/RAE_635828591747542033_0003.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and-MITM_PLC_Dst/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and.MITM_PLC_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and-MITM_PLC_Dst/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and.MITM_PLC_Dst.pcap


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and-MITM_PLC_Dst/RAE_635828813425065095.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and.MITM_PLC_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.007ms<br />(99.93% of mean)</td><td class="results_value">10ms</td><td class="results_value">36.247ms<br />(262.47% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.629<br />(16.29% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">6094</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828813425065095_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and-MITM_PLC_Dst/RAE_635828813425065095_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock-and-MITM_PLC_Dst/RAE_635828813425065095_0000.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/RAE_635828813309478735.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.5->192.168.210.200 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.007ms<br />(99.887% of mean)</td><td class="results_value">6.2ms</td><td class="results_value">10.414ms<br />(67.968% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">3.165<br />(51.048% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">9827</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828813309478735_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/RAE_635828813309478735_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_IOBlock/RAE_635828813309478735_0000.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828813637195643.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.004ms<br />(99.961% of mean)</td><td class="results_value">10.311ms</td><td class="results_value">35.596ms<br />(245.224% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">1.596<br />(15.479% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">5909</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828813637195643_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828813637195643_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC-and-MITM_IOBlock_Dst/RAE_635828813637195643_0000.png


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/RAE_635828813534699785.html:
--------------------------------------------------------------------------------
 1 | <html>
 2 | 	<head>
 3 | 		<title>
 4 | 			RAE Analysis Report
 5 | 		</title><style>
 6 | 			body { font-family:Arial, Helvetica, sans-serif; }
 7 | 			h1 { font-weight:bold;text-transform:uppercase;text-align:center;padding:18px;border:thick solid #FFFF99;background-color:#004000;color:#CCFFFF; }
 8 | 			h2 { font-weight:bold;background-color:#FFFF99; }
 9 | 			h3 { text-decoration:underline; }
10 | 			table.info {  }
11 | 			th.info { background-color:#004000;color:#EEFFEE;padding:2px;width:100px; }
12 | 			td.info_description { background-color:#E0F0E0;padding:1px; }
13 | 			td.info_value { background-color:#E8F8E8;padding:1px; }
14 | 			table.results {  }
15 | 			th.results { background-color:#000040;color:#EEEEFF;padding:2px;width:100px; }
16 | 			td.results_description { background-color:#E8E8F8;padding:1px; }
17 | 			td.results_value { background-color:#EEEEFF;padding:1px;text-align:center; }
18 | 			p.log { font-family:Courier New, monospace; }
19 | 
20 | 		</style>
21 | 	</head><body>
22 | 		<h1>
23 | 			RAE Analysis Test Tool Report
24 | 		</h1><p>This report was automatically generated by the Reporting and Analysis Engine (RAE) Analysis tool.</p><h2>
25 | 			Information and Settings
26 | 		</h2><h3>
27 | 			Personality Module
28 | 		</h3><table cellpadding="5" class="info">
29 | 			<tr>
30 | 				<td class="info_description">Name</td><td class="info_value"></td>
31 | 			</tr><tr>
32 | 				<td class="info_description">Description</td><td class="info_value"></td>
33 | 			</tr><tr>
34 | 				<td class="info_description">Comments</td><td class="info_value"></td>
35 | 			</tr><tr>
36 | 				<td class="info_description">Author</td><td class="info_value"></td>
37 | 			</tr><tr>
38 | 				<td class="info_description">Organization</td><td class="info_value"></td>
39 | 			</tr><tr>
40 | 				<td class="info_description">Email</td><td class="info_value"></td>
41 | 			</tr>
42 | 		</table><h3>
43 | 			Engine Information
44 | 		</h3><table cellpadding="5" class="info">
45 | 			<tr>
46 | 				<th class="info">Description</th><th class="info">Testing Engine</th><th class="info">Analysis Engine</th><th class="info">Reporting Engine</th>
47 | 			</tr><tr>
48 | 				<td class="info_description">Name</td><td class="info_value"></td><td class="info_value">Gaussian Jitter Analysis Engine</td><td class="info_value">Gaussian Jitter Reporting Engine</td>
49 | 			</tr><tr>
50 | 				<td class="info_description">Description</td><td class="info_value"></td><td class="info_value">Analysis engine using the Gaussian jitter analysis methodology</td><td class="info_value">Reporting engine for Gaussian jitter analysis data</td>
51 | 			</tr><tr>
52 | 				<td class="info_description">Comments</td><td class="info_value"></td><td class="info_value"></td><td class="info_value"></td>
53 | 			</tr><tr>
54 | 				<td class="info_description">Author</td><td class="info_value"></td><td class="info_value">Jim Gilsinn</td><td class="info_value">Jim Gilsinn</td>
55 | 			</tr><tr>
56 | 				<td class="info_description">Organization</td><td class="info_value"></td><td class="info_value">NIST/EL</td><td class="info_value">Kenexis</td>
57 | 			</tr><tr>
58 | 				<td class="info_description">Email</td><td class="info_value"></td><td class="info_value">james.gilsinn@nist.gov</td><td class="info_value">jim.gilsinn@kenexis.com</td>
59 | 			</tr>
60 | 		</table><h2>
61 | 			Capture Files
62 | 		</h2><p>File 0 = 25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC.pcap<br /></p><h2>
63 | 			Results
64 | 		</h2><h3>
65 | 			File 0 ~ 192.168.210.200->192.168.210.5 ENIP
66 | 		</h3><table cellpadding="5" class="results">
67 | 			<tr>
68 | 				<th class="results">Statistic</th><th class="results">Minimum</th><th class="results">Value</th><th class="results">Maximum</th>
69 | 			</tr><tr>
70 | 				<td class="results_description">Jitter</td><td class="results_value">0.004ms<br />(99.937% of mean)</td><td class="results_value">6.395ms</td><td class="results_value">10.851ms<br />(69.679% of mean)</td>
71 | 			</tr><tr>
72 | 				<td class="results_description">Standard Deviation</td><td class="results_value" colspan="3">3.16<br />(49.414% of mean)</td>
73 | 			</tr><tr>
74 | 				<td class="results_description">Number of Points</td><td class="results_value" colspan="3">9527</td>
75 | 			</tr>
76 | 		</table><img src="RAE_635828813534699785_0000.png" /><h2>
77 | 			Process Log
78 | 		</h2><p class="log">
79 | 		</p>
80 | 	</body>
81 | </html>


--------------------------------------------------------------------------------
/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/RAE_635828813534699785_0000.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/25-ARP_Poison_Sniff_Filter_Button_Pushes/25-ARP_Poison_Sniff_Filter_Button_Pushes_PLC/RAE_635828813534699785_0000.png


--------------------------------------------------------------------------------
/Mechanics of MITM for ICS.pptx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/kenexis/PortableICS-MITM/a3f8a4266435c1d5bf036fbea0705ad2abafd62a/Mechanics of MITM for ICS.pptx


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # PortableICS-MITM
2 | Set of data collected during a series of man-in-the-middle (MITM) attacks run against the Kenexis Portable Industrial Control System (ICS).
3 | 


--------------------------------------------------------------------------------