zenon/netsec-lab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Answer questions for ex3 part 4

Browse Source
This commit is contained in:
Tobias Eidelpes 2021-05-21 14:47:16 +02:00
parent 2c4f7827b9
commit 8e27942590
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
ex3/README.md
View File

@ -99,3 +99,17 @@ destination IPs. Adding those together gives a percentage higher than 100%.
Thus, the percentage of IPs _not_ belonging to these protocols must be smaller Thus, the percentage of IPs _not_ belonging to these protocols must be smaller
than 0%. With packets it is not possible that they belong to multiple protocols than 0%. With packets it is not possible that they belong to multiple protocols
at once. Packets can only either be sent over ICMP, TCP or UDP. at once. Packets can only either be sent over ICMP, TCP or UDP.
## Analyzing Temporal Patterns
>>>
Do signals in [rep-20] show periodicities?
>>>
Yes, especially the number of unique TCP source IPs shows a strong diurnal
pattern. It increases drastically every day from after midnight until the
evening where it sharply drops off until midnight again. There is also a
distinct drop during lunchtime.
The number of TCP packets, on the other hand, does not seem to have any obvious
periodicities.