From 8e27942590df13199fcd925c6079d16374abe2ae Mon Sep 17 00:00:00 2001 From: Tobias Eidelpes Date: Fri, 21 May 2021 14:47:16 +0200 Subject: [PATCH] Answer questions for ex3 part 4 --- ex3/README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/ex3/README.md b/ex3/README.md index a4b248b..14607f7 100644 --- a/ex3/README.md +++ b/ex3/README.md @@ -99,3 +99,17 @@ destination IPs. Adding those together gives a percentage higher than 100%. Thus, the percentage of IPs _not_ belonging to these protocols must be smaller than 0%. With packets it is not possible that they belong to multiple protocols at once. Packets can only either be sent over ICMP, TCP or UDP. + +## Analyzing Temporal Patterns + +>>> +Do signals in [rep-20] show periodicities? +>>> + +Yes, especially the number of unique TCP source IPs shows a strong diurnal +pattern. It increases drastically every day from after midnight until the +evening where it sharply drops off until midnight again. There is also a +distinct drop during lunchtime. + +The number of TCP packets, on the other hand, does not seem to have any obvious +periodicities.