add botnet, sniffer and ssh_interactive