zenon/netsec-lab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Answer questions for ex3 part 4

Browse Source
This commit is contained in:
Tobias Eidelpes 2021-05-21 14:47:16 +02:00
parent 2c4f7827b9
commit 8e27942590
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
ex3/README.md
View File

@ -99,3 +99,17 @@ destination IPs. Adding those together gives a percentage higher than 100%.
Thus, the percentage of IPs _not_ belonging to these protocols must be smaller
than 0%. With packets it is not possible that they belong to multiple protocols
at once. Packets can only either be sent over ICMP, TCP or UDP.
## Analyzing Temporal Patterns
>>>
Do signals in [rep-20] show periodicities?
>>>
Yes, especially the number of unique TCP source IPs shows a strong diurnal
pattern. It increases drastically every day from after midnight until the
evening where it sharply drops off until midnight again. There is also a
distinct drop during lunchtime.
The number of TCP packets, on the other hand, does not seem to have any obvious
periodicities.