Init
This commit is contained in:
133
CODE_OF_CONDUCT.md
Normal file
133
CODE_OF_CONDUCT.md
Normal file
@@ -0,0 +1,133 @@
|
|||||||
|
|
||||||
|
# Contributor Covenant Code of Conduct
|
||||||
|
|
||||||
|
## Our Pledge
|
||||||
|
|
||||||
|
We as members, contributors, and leaders pledge to make participation in our
|
||||||
|
community a harassment-free experience for everyone, regardless of age, body
|
||||||
|
size, visible or invisible disability, ethnicity, sex characteristics, gender
|
||||||
|
identity and expression, level of experience, education, socio-economic status,
|
||||||
|
nationality, personal appearance, race, caste, color, religion, or sexual
|
||||||
|
identity and orientation.
|
||||||
|
|
||||||
|
We pledge to act and interact in ways that contribute to an open, welcoming,
|
||||||
|
diverse, inclusive, and healthy community.
|
||||||
|
|
||||||
|
## Our Standards
|
||||||
|
|
||||||
|
Examples of behavior that contributes to a positive environment for our
|
||||||
|
community include:
|
||||||
|
|
||||||
|
* Demonstrating empathy and kindness toward other people
|
||||||
|
* Being respectful of differing opinions, viewpoints, and experiences
|
||||||
|
* Giving and gracefully accepting constructive feedback
|
||||||
|
* Accepting responsibility and apologizing to those affected by our mistakes,
|
||||||
|
and learning from the experience
|
||||||
|
* Focusing on what is best not just for us as individuals, but for the overall
|
||||||
|
community
|
||||||
|
|
||||||
|
Examples of unacceptable behavior include:
|
||||||
|
|
||||||
|
* The use of sexualized language or imagery, and sexual attention or advances of
|
||||||
|
any kind
|
||||||
|
* Trolling, insulting or derogatory comments, and personal or political attacks
|
||||||
|
* Public or private harassment
|
||||||
|
* Publishing others' private information, such as a physical or email address,
|
||||||
|
without their explicit permission
|
||||||
|
* Other conduct which could reasonably be considered inappropriate in a
|
||||||
|
professional setting
|
||||||
|
|
||||||
|
## Enforcement Responsibilities
|
||||||
|
|
||||||
|
Community leaders are responsible for clarifying and enforcing our standards of
|
||||||
|
acceptable behavior and will take appropriate and fair corrective action in
|
||||||
|
response to any behavior that they deem inappropriate, threatening, offensive,
|
||||||
|
or harmful.
|
||||||
|
|
||||||
|
Community leaders have the right and responsibility to remove, edit, or reject
|
||||||
|
comments, commits, code, wiki edits, issues, and other contributions that are
|
||||||
|
not aligned to this Code of Conduct, and will communicate reasons for moderation
|
||||||
|
decisions when appropriate.
|
||||||
|
|
||||||
|
## Scope
|
||||||
|
|
||||||
|
This Code of Conduct applies within all community spaces, and also applies when
|
||||||
|
an individual is officially representing the community in public spaces.
|
||||||
|
Examples of representing our community include using an official e-mail address,
|
||||||
|
posting via an official social media account, or acting as an appointed
|
||||||
|
representative at an online or offline event.
|
||||||
|
|
||||||
|
## Enforcement
|
||||||
|
|
||||||
|
Instances of abusive, harassing, or otherwise unacceptable behavior may be
|
||||||
|
reported to the community leaders responsible for enforcement at
|
||||||
|
**community *at* deepfence *dot* io**.
|
||||||
|
All complaints will be reviewed and investigated promptly and fairly.
|
||||||
|
|
||||||
|
All community leaders are obligated to respect the privacy and security of the
|
||||||
|
reporter of any incident.
|
||||||
|
|
||||||
|
## Enforcement Guidelines
|
||||||
|
|
||||||
|
Community leaders will follow these Community Impact Guidelines in determining
|
||||||
|
the consequences for any action they deem in violation of this Code of Conduct:
|
||||||
|
|
||||||
|
### 1. Correction
|
||||||
|
|
||||||
|
**Community Impact**: Use of inappropriate language or other behavior deemed
|
||||||
|
unprofessional or unwelcome in the community.
|
||||||
|
|
||||||
|
**Consequence**: A private, written warning from community leaders, providing
|
||||||
|
clarity around the nature of the violation and an explanation of why the
|
||||||
|
behavior was inappropriate. A public apology may be requested.
|
||||||
|
|
||||||
|
### 2. Warning
|
||||||
|
|
||||||
|
**Community Impact**: A violation through a single incident or series of
|
||||||
|
actions.
|
||||||
|
|
||||||
|
**Consequence**: A warning with consequences for continued behavior. No
|
||||||
|
interaction with the people involved, including unsolicited interaction with
|
||||||
|
those enforcing the Code of Conduct, for a specified period of time. This
|
||||||
|
includes avoiding interactions in community spaces as well as external channels
|
||||||
|
like social media. Violating these terms may lead to a temporary or permanent
|
||||||
|
ban.
|
||||||
|
|
||||||
|
### 3. Temporary Ban
|
||||||
|
|
||||||
|
**Community Impact**: A serious violation of community standards, including
|
||||||
|
sustained inappropriate behavior.
|
||||||
|
|
||||||
|
**Consequence**: A temporary ban from any sort of interaction or public
|
||||||
|
communication with the community for a specified period of time. No public or
|
||||||
|
private interaction with the people involved, including unsolicited interaction
|
||||||
|
with those enforcing the Code of Conduct, is allowed during this period.
|
||||||
|
Violating these terms may lead to a permanent ban.
|
||||||
|
|
||||||
|
### 4. Permanent Ban
|
||||||
|
|
||||||
|
**Community Impact**: Demonstrating a pattern of violation of community
|
||||||
|
standards, including sustained inappropriate behavior, harassment of an
|
||||||
|
individual, or aggression toward or disparagement of classes of individuals.
|
||||||
|
|
||||||
|
**Consequence**: A permanent ban from any sort of public interaction within the
|
||||||
|
community.
|
||||||
|
|
||||||
|
## Attribution
|
||||||
|
|
||||||
|
This Code of Conduct is adapted from the [Contributor Covenant][homepage],
|
||||||
|
version 2.1, available at
|
||||||
|
[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
|
||||||
|
|
||||||
|
Community Impact Guidelines were inspired by
|
||||||
|
[Mozilla's code of conduct enforcement ladder][Mozilla CoC].
|
||||||
|
|
||||||
|
For answers to common questions about this code of conduct, see the FAQ at
|
||||||
|
[https://www.contributor-covenant.org/faq][FAQ]. Translations are available at
|
||||||
|
[https://www.contributor-covenant.org/translations][translations].
|
||||||
|
|
||||||
|
[homepage]: https://www.contributor-covenant.org
|
||||||
|
[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
|
||||||
|
[Mozilla CoC]: https://github.com/mozilla/diversity
|
||||||
|
[FAQ]: https://www.contributor-covenant.org/faq
|
||||||
|
[translations]: https://www.contributor-covenant.org/translations
|
62
README.md
Normal file
62
README.md
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
[](https://docs.deepfence.io/flowmeter)
|
||||||
|
[](https://github.com/deepfence/FlowMeter/blob/main/LICENSE)
|
||||||
|
[](https://github.com/deepfence/FlowMeter/stargazers)
|
||||||
|
[](https://github.com/deepfence/FlowMeter/issues)
|
||||||
|
[](https://join.slack.com/t/deepfence-community/shared_invite/zt-podmzle9-5X~qYx8wMaLt9bGWwkSdgQ)
|
||||||
|
|
||||||
|
# FlowMeter
|
||||||
|
FlowMeter is an experimental utility built for analysing and classifing packets by looking at packet headers.
|
||||||
|
|
||||||
|
## Primary design goals:
|
||||||
|
|
||||||
|
FlowMeter aims to:
|
||||||
|
|
||||||
|
- **Classify packets and flows as benign or malicious with high true positives (TP) and low false positives (FP)**.
|
||||||
|
- **Use the labeled data to reduce amount of traffic requiring deeper analysis**.
|
||||||
|
|
||||||
|
Additionally, Deepfence FlowMeter also categorizes packets into flows and shows a rich ensemble of flow data and statistics.
|
||||||
|
|
||||||
|
| <img width="1559" alt="Flowmeter-flows" src="https://user-images.githubusercontent.com/26308648/165219276-e9c9a99a-1bc1-40c9-bfaa-779b6380ae67.png"> |
|
||||||
|
|:--:|
|
||||||
|
| *FlowMeter takes packets and returns file with statistics of flows.* |
|
||||||
|
|
||||||
|
| <img width="1559" alt="Flowmeter-flowsClassification" src="https://user-images.githubusercontent.com/26308648/165219569-42a84939-8c28-4b70-b864-f4980c3ee27d.png">
|
||||||
|
|:--:|
|
||||||
|
| *Flowmeter takes packets and returns file with statistics of flows and classifies packets as benign or malicious.* |
|
||||||
|
|
||||||
|
## When to use FLowMeter
|
||||||
|
|
||||||
|
Use FlowMeter if you wish to build and operate machine-learning models on network packet data.
|
||||||
|
|
||||||
|
## Quick Start
|
||||||
|
|
||||||
|
For full instructions, refer to the [FlowMeter Documentation](https://docs.deepfence.io/flowmeter).
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
## Who uses FlowMeter?
|
||||||
|
|
||||||
|
* We use FlowMeter internally to quickly analyse and label packets. It forms one part of a project to build a fast pre-filter for packets before we conduct deeper layer-7 analysis in [Deepfence ThreatMapper](https://deepfence.io/threatmapper/).
|
||||||
|
|
||||||
|
## Get in touch
|
||||||
|
|
||||||
|
Thank you for using FlowMeter.
|
||||||
|
|
||||||
|
* [<img src="https://img.shields.io/badge/documentation-read-green">](https://docs.deepfence.io/flowmeter) Start with the documentation
|
||||||
|
* [<img src="https://img.shields.io/badge/slack-@deepfence-blue.svg?logo=slack">](https://join.slack.com/t/deepfence-community/shared_invite/zt-podmzle9-5X~qYx8wMaLt9bGWwkSdgQ) Got a question, need some help? Find the Deepfence team on Slack
|
||||||
|
* [](https://github.com/deepfence/FlowMeter/issues) Got a feature request or found a bug? Raise an issue
|
||||||
|
* [productsecurity *at* deepfence *dot* io](SECURITY.md): Found a security issue? Share it in confidence
|
||||||
|
* Find out more at [deepfence.io](https://deepfence.io/)
|
||||||
|
|
||||||
|
## Security and Support
|
||||||
|
|
||||||
|
For any security-related issues in the FlowMeter project, contact [productsecurity *at* deepfence *dot* io](SECURITY.md).
|
||||||
|
|
||||||
|
Please file GitHub issues as needed, and join the Deepfence Community [Slack channel](https://join.slack.com/t/deepfence-community/shared_invite/zt-podmzle9-5X~qYx8wMaLt9bGWwkSdgQ).
|
||||||
|
|
||||||
|
## License
|
||||||
|
|
||||||
|
The Deepfence FlowMeter project (this repository) is offered under the [Apache2 license](https://www.apache.org/licenses/LICENSE-2.0).
|
||||||
|
|
||||||
|
[Contributions](CONTRIBUTING.md) to Deepfence FlowMeter project are similarly accepted under the Apache2 license, as per [GitHub's inbound=outbound policy](https://docs.github.com/en/github/site-policy/github-terms-of-service#6-contributions-under-repository-license).
|
||||||
|
|
2709
assets/Deepfence_ML_flowmeter.ipynb
Normal file
2709
assets/Deepfence_ML_flowmeter.ipynb
Normal file
File diff suppressed because one or more lines are too long
280
assets/Deepfence_ML_flowmeter.py
Normal file
280
assets/Deepfence_ML_flowmeter.py
Normal file
@@ -0,0 +1,280 @@
|
|||||||
|
# Import libraries
|
||||||
|
from __future__ import division
|
||||||
|
|
||||||
|
import pandas as pd
|
||||||
|
import matplotlib.pyplot as plt # plotting
|
||||||
|
import numpy as np # linear algebra
|
||||||
|
import math
|
||||||
|
|
||||||
|
from sklearn.linear_model import LogisticRegression
|
||||||
|
from sklearn.svm import SVC
|
||||||
|
|
||||||
|
from sklearn.pipeline import make_pipeline
|
||||||
|
|
||||||
|
from sklearn.preprocessing import StandardScaler, MinMaxScaler
|
||||||
|
|
||||||
|
from sklearn.model_selection import (
|
||||||
|
train_test_split,
|
||||||
|
GridSearchCV,
|
||||||
|
cross_val_score,
|
||||||
|
RepeatedStratifiedKFold,
|
||||||
|
StratifiedKFold,
|
||||||
|
)
|
||||||
|
|
||||||
|
from sklearn.metrics import (
|
||||||
|
accuracy_score,
|
||||||
|
confusion_matrix,
|
||||||
|
roc_curve,
|
||||||
|
roc_auc_score,
|
||||||
|
auc,
|
||||||
|
precision_score,
|
||||||
|
recall_score,
|
||||||
|
precision_recall_curve,
|
||||||
|
f1_score,
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
from collections import Counter
|
||||||
|
from sklearn.datasets import make_classification
|
||||||
|
import copy
|
||||||
|
import warnings
|
||||||
|
|
||||||
|
|
||||||
|
# # Data
|
||||||
|
|
||||||
|
# ### File path
|
||||||
|
folder = "../pkg/flowOutput/"
|
||||||
|
fname_benign = "benign_2017-05-02_kali-normal22_flow_stats.csv"
|
||||||
|
fname_malicious = "webgoat_flow_stats.csv"
|
||||||
|
|
||||||
|
# ### Malicious: Webgoat
|
||||||
|
# Malicious flows
|
||||||
|
pd_malicious = pd.read_csv(folder + fname_malicious)
|
||||||
|
pd_malicious.drop(pd_malicious.tail(1).index, inplace=True)
|
||||||
|
pd_malicious["Type"] = "Malicious"
|
||||||
|
|
||||||
|
|
||||||
|
# ### Benign
|
||||||
|
# Benign flows
|
||||||
|
pd_benign = pd.read_csv(folder + fname_benign)
|
||||||
|
# pd_benign.drop(pd_webgoat.tail(1).index, inplace=True)
|
||||||
|
pd_benign["Type"] = "Benign"
|
||||||
|
|
||||||
|
print(pd_benign.shape)
|
||||||
|
|
||||||
|
|
||||||
|
# ### Combined dataframe - Benign + malicious
|
||||||
|
## Combine malicous and benign dataframes.
|
||||||
|
pd_comb = pd.concat([pd_malicious, pd_benign])
|
||||||
|
|
||||||
|
## Random shuffle of rows
|
||||||
|
pd_comb = pd_comb.sample(frac=1)
|
||||||
|
|
||||||
|
pd_comb.shape
|
||||||
|
|
||||||
|
# ### Added throughput columns.
|
||||||
|
## Add throughput columns.
|
||||||
|
colsPerTime = [
|
||||||
|
"flowLength",
|
||||||
|
"fwdFlowLength",
|
||||||
|
"bwdFlowLength",
|
||||||
|
"packetSizeTotal",
|
||||||
|
"fwdPacketSizeTotal",
|
||||||
|
"bwdPacketSizeTotal",
|
||||||
|
]
|
||||||
|
|
||||||
|
for feature in colsPerTime:
|
||||||
|
pd_comb[feature + "PerTime"] = pd_comb[feature] / pd_comb["flowDuration"]
|
||||||
|
print(feature + "PerTime")
|
||||||
|
|
||||||
|
# ## Features
|
||||||
|
# Feature columns.
|
||||||
|
feature_cols = [
|
||||||
|
"flowDuration",
|
||||||
|
"flowLength",
|
||||||
|
"fwdFlowLength",
|
||||||
|
"bwdFlowLength",
|
||||||
|
"packetSizeTotal",
|
||||||
|
"packetSizeMean",
|
||||||
|
"packetSizeStd",
|
||||||
|
"packetSizeMin",
|
||||||
|
"packetSizeMax",
|
||||||
|
"fwdPacketSizeTotal",
|
||||||
|
"bwdPacketSizeTotal",
|
||||||
|
"fwdPacketSizeMean",
|
||||||
|
"bwdPacketSizeMean",
|
||||||
|
"fwdPacketSizeStd",
|
||||||
|
"bwdPacketSizeStd",
|
||||||
|
"fwdPacketSizeMin",
|
||||||
|
"bwdPacketSizeMin",
|
||||||
|
"fwdPacketSizeMax",
|
||||||
|
"bwdPacketSizeMax",
|
||||||
|
"IATMean",
|
||||||
|
"IATStd",
|
||||||
|
"IATMin",
|
||||||
|
"IATMax",
|
||||||
|
"fwdIATTotal",
|
||||||
|
"bwdIATTotal",
|
||||||
|
"fwdIATMean",
|
||||||
|
"bwdIATMean",
|
||||||
|
"fwdIATStd",
|
||||||
|
"bwdIATStd",
|
||||||
|
"fwdIATMin",
|
||||||
|
"bwdIATMin",
|
||||||
|
"fwdIATMax",
|
||||||
|
"bwdIATMax",
|
||||||
|
"flowLengthPerTime",
|
||||||
|
"fwdFlowLengthPerTime",
|
||||||
|
"bwdFlowLengthPerTime",
|
||||||
|
"packetSizeTotalPerTime",
|
||||||
|
"fwdPacketSizeTotalPerTime",
|
||||||
|
"bwdPacketSizeTotalPerTime",
|
||||||
|
"Type",
|
||||||
|
]
|
||||||
|
|
||||||
|
|
||||||
|
# ### Dataframe with chosen features
|
||||||
|
## Select feature columns in datasets.
|
||||||
|
pd_comb_features = pd_comb[feature_cols]
|
||||||
|
|
||||||
|
|
||||||
|
# # Machine learning - feature importance
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# ## Clean dataset
|
||||||
|
# Remove spurious entries from dataset.
|
||||||
|
def clean_dataset(df):
|
||||||
|
df.dropna(inplace=True)
|
||||||
|
|
||||||
|
df_X = df.iloc[:,:-1]
|
||||||
|
df_Y = df.iloc[:,-1]
|
||||||
|
|
||||||
|
|
||||||
|
indices_to_keep = ~df_X.isin([np.nan, np.inf, -np.inf]).any(axis=1)
|
||||||
|
df_X_cleaned = df_X[indices_to_keep].astype(np.float64)
|
||||||
|
df_Y_cleaned = df_Y[indices_to_keep].values
|
||||||
|
|
||||||
|
return df_X_cleaned, df_Y_cleaned
|
||||||
|
|
||||||
|
# ### Get feature and class arrays (X and y.)
|
||||||
|
# Get feature and class arrays (X and y.)
|
||||||
|
pd_comb_features_cp = pd_comb_features.copy(deep=True)
|
||||||
|
|
||||||
|
X, y = clean_dataset(pd_comb_features_cp)
|
||||||
|
|
||||||
|
|
||||||
|
# ## Train test split
|
||||||
|
X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=0.3, random_state=0)
|
||||||
|
|
||||||
|
|
||||||
|
# ## Scale data
|
||||||
|
scaler = StandardScaler() # MinMaxScaler
|
||||||
|
X_train_scale = scaler.fit_transform(X_train)
|
||||||
|
X_test_scale = scaler.transform(X_test)
|
||||||
|
|
||||||
|
|
||||||
|
# ## Weighted Logistic Regression
|
||||||
|
|
||||||
|
|
||||||
|
# ### Hyperparameter grid search.
|
||||||
|
# Class weights.
|
||||||
|
w = [
|
||||||
|
{0: 0.10, 1: 99.90},
|
||||||
|
{0: 0.25, 1: 99.75},
|
||||||
|
{0: 0.50, 1: 99.50},
|
||||||
|
{0: 0.75, 1: 99.25},
|
||||||
|
{0: 1.00, 1: 99.00},
|
||||||
|
{
|
||||||
|
0: 100 * np.sum(y == "Malicious") / (np.sum(y == "Benign") + np.sum(y == "Malicious")),
|
||||||
|
1: 100 * np.sum(y == "Benign") / (np.sum(y == "Benign") + np.sum(y == "Malicious")),
|
||||||
|
},
|
||||||
|
]
|
||||||
|
|
||||||
|
# Inverse of regularization strength.
|
||||||
|
crange = np.arange(0.1, 1.0, 0.2)
|
||||||
|
|
||||||
|
|
||||||
|
# Hyperparameter grid.
|
||||||
|
hyperparam_grid = {
|
||||||
|
"class_weight": w,
|
||||||
|
"penalty": ["l1", "l2"],
|
||||||
|
"C": crange,
|
||||||
|
"fit_intercept": [True, False],
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# ### Prepare samples.
|
||||||
|
# String to int for classes
|
||||||
|
y_train2 = np.copy(y_train)
|
||||||
|
y_train2[np.where(y_train == "Benign")[0]] = 0
|
||||||
|
y_train2[np.where(y_train == "Malicious")[0]] = 1
|
||||||
|
|
||||||
|
|
||||||
|
# ### Model fitting.
|
||||||
|
# logistic model classifier.
|
||||||
|
lg = LogisticRegression(random_state=13)
|
||||||
|
|
||||||
|
# define evaluation procedure
|
||||||
|
grid = GridSearchCV(lg, hyperparam_grid, scoring="roc_auc", cv=10, n_jobs=-1, refit=True)
|
||||||
|
grid.fit(X_train_scale, y_train2.astype("int32"))
|
||||||
|
|
||||||
|
print(f"Best score: {grid.best_score_} with param: {grid.best_params_}")
|
||||||
|
|
||||||
|
|
||||||
|
# ### Test perfomance.
|
||||||
|
y_pred_wt = grid.predict(X_test_scale)
|
||||||
|
|
||||||
|
y_test2 = np.copy(y_test)
|
||||||
|
y_test2[np.where(y_test == "Benign")[0]] = 0
|
||||||
|
y_test2[np.where(y_test == "Malicious")[0]] = 1
|
||||||
|
|
||||||
|
|
||||||
|
# performance
|
||||||
|
conf_mat = confusion_matrix(y_test2.astype("int32"), y_pred_wt)
|
||||||
|
|
||||||
|
print(f"Accuracy Score: {accuracy_score(y_test2.astype('int32'),y_pred_wt)}")
|
||||||
|
print(f"Confusion Matrix: \n{confusion_matrix(y_test2.astype('int32'), y_pred_wt)}")
|
||||||
|
print(f"Area Under Curve: {roc_auc_score(y_test2.astype('int32'), y_pred_wt)}")
|
||||||
|
print(
|
||||||
|
f"Recall score (Pct of true malicious detected): {100*recall_score(y_test2.astype('int32'), y_pred_wt)}"
|
||||||
|
)
|
||||||
|
print(f"Data reduction: { np.round( 100.0 * conf_mat.T[1].sum() / conf_mat.sum() , 2 )} percent")
|
||||||
|
|
||||||
|
print(
|
||||||
|
f"Pct malicious in data sent to console: { np.round( 100.0 * conf_mat.T[1][1] / conf_mat.T[1].sum() , 2 )} percent"
|
||||||
|
)
|
||||||
|
|
||||||
|
print("F1 score: ", f1_score(y_test2.astype("int32"), y_pred_wt, average="weighted"))
|
||||||
|
|
||||||
|
|
||||||
|
# ### Best fit parameters.
|
||||||
|
# define model
|
||||||
|
best_fit_model = LogisticRegression(
|
||||||
|
class_weight=grid.best_params_["class_weight"],
|
||||||
|
penalty=grid.best_params_["penalty"],
|
||||||
|
C=grid.best_params_["C"],
|
||||||
|
fit_intercept=grid.best_params_["fit_intercept"],
|
||||||
|
random_state=13,
|
||||||
|
max_iter=5,
|
||||||
|
)
|
||||||
|
|
||||||
|
# fit it
|
||||||
|
best_fit_model.fit(X_train_scale, y_train2.astype("int32"))
|
||||||
|
|
||||||
|
|
||||||
|
# ### Save parameters.
|
||||||
|
np.savetxt("../pkg/ml/parameters/mean.txt", scaler.mean_, delimiter=",")
|
||||||
|
np.savetxt("../pkg/ml/parameters/std.txt", scaler.scale_, delimiter=",")
|
||||||
|
np.savetxt("../pkg/ml/parameters/weights.txt", best_fit_model.coef_[0], delimiter=",")
|
||||||
|
np.savetxt("../pkg/ml/parameters/intercept.txt", best_fit_model.intercept_, delimiter=",")
|
||||||
|
|
||||||
|
|
||||||
|
# ### Feature importance scores
|
||||||
|
important_features = pd_comb_features_cp.iloc[:, :-1].columns.values[
|
||||||
|
np.argsort(-1 * np.abs(best_fit_model.coef_[0]))
|
||||||
|
]
|
||||||
|
|
||||||
|
|
||||||
|
print(important_features)
|
||||||
|
|
10
go.mod
Normal file
10
go.mod
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
module github.com/deepfence/FlowMeter
|
||||||
|
|
||||||
|
go 1.18
|
||||||
|
|
||||||
|
require (
|
||||||
|
github.com/google/gopacket v1.1.19
|
||||||
|
github.com/sirupsen/logrus v1.8.1
|
||||||
|
)
|
||||||
|
|
||||||
|
require golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 // indirect
|
25
go.sum
Normal file
25
go.sum
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
|
||||||
|
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
|
||||||
|
github.com/google/gopacket v1.1.19 h1:ves8RnFZPGiFnTS0uPQStjwru6uO6h+nlr9j6fL7kF8=
|
||||||
|
github.com/google/gopacket v1.1.19/go.mod h1:iJ8V8n6KS+z2U1A8pUwu8bW5SyEMkXJB8Yo/Vo+TKTo=
|
||||||
|
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
|
||||||
|
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
|
||||||
|
github.com/sirupsen/logrus v1.8.1 h1:dJKuHgqk1NNQlqoA6BTlM1Wf9DOH3NBjQyu0h9+AZZE=
|
||||||
|
github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
|
||||||
|
github.com/stretchr/testify v1.2.2 h1:bSDNvY7ZPG5RlJ8otE/7V6gMiyenm9RtJ7IUVIAoJ1w=
|
||||||
|
github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
|
||||||
|
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
|
||||||
|
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
|
||||||
|
golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
|
||||||
|
golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
|
||||||
|
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
|
||||||
|
golang.org/x/net v0.0.0-20190620200207-3b0461eec859 h1:R/3boaszxrf1GEUWTVDzSKVwLmSJpwZ1yqXm8j0v2QI=
|
||||||
|
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
||||||
|
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
|
||||||
|
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
|
||||||
|
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||||
|
golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 h1:YyJpGZS1sBuBCzLAR1VEpK193GlqGZbnPFnPV/5Rsb4=
|
||||||
|
golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
|
||||||
|
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
|
||||||
|
golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
|
||||||
|
golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
122
pkg/common/common.go
Normal file
122
pkg/common/common.go
Normal file
@@ -0,0 +1,122 @@
|
|||||||
|
package common
|
||||||
|
|
||||||
|
import (
|
||||||
|
"math"
|
||||||
|
"time"
|
||||||
|
)
|
||||||
|
|
||||||
|
// Min or max (time.Duration datatype.)
|
||||||
|
func MinMaxTimeDuration(array []time.Duration) (time.Duration, time.Duration) {
|
||||||
|
if len(array) == 0 {
|
||||||
|
return 0 * time.Microsecond, 0 * time.Microsecond
|
||||||
|
} else {
|
||||||
|
var max time.Duration = array[0]
|
||||||
|
var min time.Duration = array[0]
|
||||||
|
|
||||||
|
for j := 1; j < len(array); j++ {
|
||||||
|
value := array[j]
|
||||||
|
if max < value {
|
||||||
|
max = value
|
||||||
|
}
|
||||||
|
if min > value {
|
||||||
|
min = value
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return min, max
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Sum (time.Duration datatype.)
|
||||||
|
func SumTimeDuration(array []time.Duration) time.Duration {
|
||||||
|
var result time.Duration = 0 * time.Microsecond
|
||||||
|
for _, v := range array {
|
||||||
|
result += v
|
||||||
|
}
|
||||||
|
|
||||||
|
return result
|
||||||
|
}
|
||||||
|
|
||||||
|
// Mean (time.Duration datatype.)
|
||||||
|
func MeanTimeDuration(array []time.Duration) time.Duration {
|
||||||
|
sumArr := float64(SumTimeDuration(array)/time.Microsecond) / float64(len(array))
|
||||||
|
|
||||||
|
return time.Duration(sumArr) * time.Microsecond
|
||||||
|
}
|
||||||
|
|
||||||
|
// stdDev (time.Duration datatype.)
|
||||||
|
func StdDevTimeDuration(array []time.Duration) time.Duration {
|
||||||
|
|
||||||
|
square := float64(0)
|
||||||
|
|
||||||
|
for j := 1; j < len(array); j++ {
|
||||||
|
square += float64((array[j]-MeanTimeDuration(array))/time.Microsecond) * float64((array[j]-MeanTimeDuration(array))/time.Microsecond)
|
||||||
|
}
|
||||||
|
|
||||||
|
return time.Duration(math.Sqrt(square/float64(len(array)))) * time.Microsecond
|
||||||
|
}
|
||||||
|
|
||||||
|
// Min or max function (int datatype.)
|
||||||
|
func MinMax(array []int) (int, int) {
|
||||||
|
if len(array) == 0 {
|
||||||
|
return 0, 0
|
||||||
|
} else {
|
||||||
|
var max int = array[0]
|
||||||
|
var min int = array[0]
|
||||||
|
for _, value := range array {
|
||||||
|
if max < value {
|
||||||
|
max = value
|
||||||
|
}
|
||||||
|
if min > value {
|
||||||
|
min = value
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return min, max
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Sum (int datatype.)
|
||||||
|
func Sum(array []int) int {
|
||||||
|
var result int = 0
|
||||||
|
for _, v := range array {
|
||||||
|
result += v
|
||||||
|
}
|
||||||
|
|
||||||
|
return result
|
||||||
|
}
|
||||||
|
|
||||||
|
// Mean (float64 datatype.)
|
||||||
|
func Mean(array []int) float64 {
|
||||||
|
if len(array) == 0 {
|
||||||
|
return 0.0
|
||||||
|
} else {
|
||||||
|
sumArr := float64(Sum(array)) / float64(len(array))
|
||||||
|
|
||||||
|
return float64(sumArr)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// stdDev (float64 datatype.)
|
||||||
|
func StdDev(array []int) float64 {
|
||||||
|
if len(array) == 0 {
|
||||||
|
return 0.0
|
||||||
|
} else {
|
||||||
|
square := float64(0)
|
||||||
|
|
||||||
|
for _, v := range array {
|
||||||
|
square += (float64(v) - Mean(array)) * (float64(v) - Mean(array))
|
||||||
|
}
|
||||||
|
|
||||||
|
return math.Sqrt(square / float64(len(array)))
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Takes a slice and looks for an element in it. If found it will
|
||||||
|
// return it's key, otherwise it will return -1 and a bool of false.
|
||||||
|
func IfPresentInSlice(slice []int, val int) (int, bool) {
|
||||||
|
for i, item := range slice {
|
||||||
|
if item == val {
|
||||||
|
return i, true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return -1, false
|
||||||
|
}
|
106
pkg/common/flowFields.go
Normal file
106
pkg/common/flowFields.go
Normal file
@@ -0,0 +1,106 @@
|
|||||||
|
package common
|
||||||
|
|
||||||
|
import (
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/constants"
|
||||||
|
)
|
||||||
|
|
||||||
|
type FlowFeatures struct {
|
||||||
|
SrcIP interface{}
|
||||||
|
DstIP interface{}
|
||||||
|
Protocol interface{}
|
||||||
|
SrcPort interface{}
|
||||||
|
DstPort interface{}
|
||||||
|
FlowDuration float64
|
||||||
|
FlowLength float64
|
||||||
|
FwdFlowLength float64
|
||||||
|
BwdFlowLength float64
|
||||||
|
PacketSizeTotal float64
|
||||||
|
PacketSizeMean float64
|
||||||
|
PacketSizeStd float64
|
||||||
|
PacketSizeMin float64
|
||||||
|
PacketSizeMax float64
|
||||||
|
FwdPacketSizeTotal float64
|
||||||
|
BwdPacketSizeTotal float64
|
||||||
|
FwdPacketSizeMean float64
|
||||||
|
BwdPacketSizeMean float64
|
||||||
|
FwdPacketSizeStd float64
|
||||||
|
BwdPacketSizeStd float64
|
||||||
|
FwdPacketSizeMin float64
|
||||||
|
BwdPacketSizeMin float64
|
||||||
|
FwdPacketSizeMax float64
|
||||||
|
BwdPacketSizeMax float64
|
||||||
|
IATMean float64
|
||||||
|
IATStd float64
|
||||||
|
IATMin float64
|
||||||
|
IATMax float64
|
||||||
|
FwdIATTotal float64
|
||||||
|
BwdIATTotal float64
|
||||||
|
FwdIATMean float64
|
||||||
|
BwdIATMean float64
|
||||||
|
FwdIATStd float64
|
||||||
|
BwdIATStd float64
|
||||||
|
FwdIATMin float64
|
||||||
|
BwdIATMin float64
|
||||||
|
FwdIATMax float64
|
||||||
|
BwdIATMax float64
|
||||||
|
FlowLengthPerTime float64
|
||||||
|
FwdFlowLengthPerTime float64
|
||||||
|
BwdFlowLengthPerTime float64
|
||||||
|
PacketSizeTotalPerTime float64
|
||||||
|
FwdPacketSizeTotalPerTime float64
|
||||||
|
BwdPacketSizeTotalPerTime float64
|
||||||
|
}
|
||||||
|
|
||||||
|
// Create feature struct with appropriate datatypes for features.
|
||||||
|
func FlowData(values []interface{}) FlowFeatures {
|
||||||
|
flow := FlowFeatures{
|
||||||
|
SrcIP: values[constants.MapKeys["srcIP"]],
|
||||||
|
DstIP: values[constants.MapKeys["dstIP"]],
|
||||||
|
Protocol: values[constants.MapKeys["protocol"]],
|
||||||
|
SrcPort: values[constants.MapKeys["srcPort"]],
|
||||||
|
DstPort: values[constants.MapKeys["dstPort"]],
|
||||||
|
FlowDuration: float64(values[constants.MapKeys["flowDuration"]].(time.Duration) / time.Nanosecond),
|
||||||
|
FlowLength: float64(values[constants.MapKeys["flowLength"]].(int)),
|
||||||
|
FwdFlowLength: float64(values[constants.MapKeys["fwdFlowLength"]].(int)),
|
||||||
|
BwdFlowLength: float64(values[constants.MapKeys["bwdFlowLength"]].(int)),
|
||||||
|
PacketSizeTotal: float64(values[constants.MapKeys["packetSizeTotal"]].(int)),
|
||||||
|
PacketSizeMean: values[constants.MapKeys["packetSizeMean"]].(float64),
|
||||||
|
PacketSizeStd: values[constants.MapKeys["packetSizeStd"]].(float64),
|
||||||
|
PacketSizeMin: float64(values[constants.MapKeys["packetSizeMin"]].(int)),
|
||||||
|
PacketSizeMax: float64(values[constants.MapKeys["packetSizeMax"]].(int)),
|
||||||
|
FwdPacketSizeTotal: float64(values[constants.MapKeys["fwdPacketSizeTotal"]].(int)),
|
||||||
|
BwdPacketSizeTotal: float64(values[constants.MapKeys["bwdPacketSizeTotal"]].(int)),
|
||||||
|
FwdPacketSizeMean: values[constants.MapKeys["fwdPacketSizeMean"]].(float64),
|
||||||
|
BwdPacketSizeMean: values[constants.MapKeys["bwdPacketSizeMean"]].(float64),
|
||||||
|
FwdPacketSizeStd: values[constants.MapKeys["fwdPacketSizeStd"]].(float64),
|
||||||
|
BwdPacketSizeStd: values[constants.MapKeys["bwdPacketSizeStd"]].(float64),
|
||||||
|
FwdPacketSizeMin: float64(values[constants.MapKeys["fwdPacketSizeMin"]].(int)),
|
||||||
|
BwdPacketSizeMin: float64(values[constants.MapKeys["bwdPacketSizeMin"]].(int)),
|
||||||
|
FwdPacketSizeMax: float64(values[constants.MapKeys["fwdPacketSizeMax"]].(int)),
|
||||||
|
BwdPacketSizeMax: float64(values[constants.MapKeys["bwdPacketSizeMax"]].(int)),
|
||||||
|
IATMean: float64(values[constants.MapKeys["IATMean"]].(time.Duration) / time.Nanosecond),
|
||||||
|
IATStd: float64(values[constants.MapKeys["IATStd"]].(time.Duration) / time.Nanosecond),
|
||||||
|
IATMin: float64(values[constants.MapKeys["IATMin"]].(time.Duration) / time.Nanosecond),
|
||||||
|
IATMax: float64(values[constants.MapKeys["IATMax"]].(time.Duration) / time.Nanosecond),
|
||||||
|
FwdIATTotal: float64(values[constants.MapKeys["fwdIATTotal"]].(time.Duration) / time.Nanosecond),
|
||||||
|
BwdIATTotal: float64(values[constants.MapKeys["bwdIATTotal"]].(time.Duration) / time.Nanosecond),
|
||||||
|
FwdIATMean: float64(values[constants.MapKeys["fwdIATMean"]].(time.Duration) / time.Nanosecond),
|
||||||
|
BwdIATMean: float64(values[constants.MapKeys["bwdIATMean"]].(time.Duration) / time.Nanosecond),
|
||||||
|
FwdIATStd: float64(values[constants.MapKeys["fwdIATStd"]].(time.Duration) / time.Nanosecond),
|
||||||
|
BwdIATStd: float64(values[constants.MapKeys["bwdIATStd"]].(time.Duration) / time.Nanosecond),
|
||||||
|
FwdIATMin: float64(values[constants.MapKeys["fwdIATMin"]].(time.Duration) / time.Nanosecond),
|
||||||
|
BwdIATMin: float64(values[constants.MapKeys["bwdIATMin"]].(time.Duration) / time.Nanosecond),
|
||||||
|
FwdIATMax: float64(values[constants.MapKeys["fwdIATMax"]].(time.Duration) / time.Nanosecond),
|
||||||
|
BwdIATMax: float64(values[constants.MapKeys["bwdIATMax"]].(time.Duration) / time.Nanosecond),
|
||||||
|
FlowLengthPerTime: float64(values[constants.MapKeys["flowLength"]].(int)) / float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Nanosecond),
|
||||||
|
FwdFlowLengthPerTime: float64(values[constants.MapKeys["fwdFlowLength"]].(int)) / float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Nanosecond),
|
||||||
|
BwdFlowLengthPerTime: float64(values[constants.MapKeys["bwdFlowLength"]].(int)) / float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Nanosecond),
|
||||||
|
PacketSizeTotalPerTime: float64(values[constants.MapKeys["packetSizeTotal"]].(int)) / float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Nanosecond),
|
||||||
|
FwdPacketSizeTotalPerTime: float64(values[constants.MapKeys["fwdPacketSizeTotal"]].(int)) / float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Nanosecond),
|
||||||
|
BwdPacketSizeTotalPerTime: float64(values[constants.MapKeys["bwdPacketSizeTotal"]].(int)) / float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Nanosecond),
|
||||||
|
}
|
||||||
|
|
||||||
|
return flow
|
||||||
|
}
|
38
pkg/constants/constants.go
Normal file
38
pkg/constants/constants.go
Normal file
@@ -0,0 +1,38 @@
|
|||||||
|
package constants
|
||||||
|
|
||||||
|
import (
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/google/gopacket/pcap"
|
||||||
|
)
|
||||||
|
|
||||||
|
const (
|
||||||
|
Device string = "wlp3s0"
|
||||||
|
SnapshotLen int32 = 1024
|
||||||
|
Promiscuous bool = false
|
||||||
|
Timeout time.Duration = 30 * time.Second
|
||||||
|
MinPacketsPerFlow int = 15
|
||||||
|
MaxPacketsPerFlow int = 82
|
||||||
|
MinTimeDuration time.Duration = 0 * time.Millisecond
|
||||||
|
PacketFileType string = ".pcap"
|
||||||
|
WeightsFile string = "ml/parameters/weights.txt"
|
||||||
|
InterceptFile string = "ml/parameters/intercept.txt"
|
||||||
|
MeansFile string = "ml/parameters/mean.txt"
|
||||||
|
StdFile string = "ml/parameters/std.txt"
|
||||||
|
Verbose bool = false
|
||||||
|
IfFlowStatsVerbose bool = true
|
||||||
|
PacketFolder string = "packets"
|
||||||
|
FlowOutputFolder string = "flowOutput"
|
||||||
|
)
|
||||||
|
|
||||||
|
var (
|
||||||
|
Handle *pcap.Handle
|
||||||
|
|
||||||
|
Err error
|
||||||
|
|
||||||
|
SaveIntervals = []int{100000, 500000, 1000000, 1500000, 2500000, 3000000, 4000000, 5000000}
|
||||||
|
|
||||||
|
MapKeys = map[string]int{"srcIP": 0, "dstIP": 1, "protocol": 2, "srcPort": 3, "dstPort": 4, "flowDuration": 5, "flowLength": 6, "fwdFlowLength": 7, "bwdFlowLength": 8, "packetSizeTotal": 9, "packetSizeMean": 10, "packetSizeStd": 11, "packetSizeMin": 12, "packetSizeMax": 13, "fwdPacketSizeTotal": 14, "bwdPacketSizeTotal": 15, "fwdPacketSizeMean": 17, "bwdPacketSizeMean": 17, "fwdPacketSizeStd": 18, "bwdPacketSizeStd": 19, "fwdPacketSizeMin": 20, "bwdPacketSizeMin": 21, "fwdPacketSizeMax": 22, "bwdPacketSizeMax": 23, "IATTotal": 24, "IATMean": 25, "IATStd": 26, "IATMin": 27, "IATMax": 28, "fwdIATTotal": 29, "bwdIATTotal": 30, "fwdIATMean": 31, "bwdIATMean": 32, "fwdIATStd": 33, "bwdIATStd": 34, "fwdIATMin": 35, "bwdIATMin": 36, "fwdIATMax": 37, "bwdIATMax": 38, "flowStartTime": 39, "flowPrevTime": 40, "fwdFlowPrevTime": 41, "bwdFlowPrevTime": 42, "minPacketsBool": 43, "fwdPacketSizeArr": 44, "bwdPacketSizeArr": 45, "fwdIATArr": 46, "bwdIATArr": 47, "IATArr": 48, "packetSizeArr": 49}
|
||||||
|
|
||||||
|
MapLabels = map[int]string{0: "Source IP", 1: "Dest IP", 2: "Protocol", 3: "Source Port", 4: "Dest Port", 5: "Flow Duration", 6: "Flow Length", 7: "Forward Flow Length", 8: "Backward Flow Length", 9: "Packet Size Total", 10: "Packet Size Mean", 11: "Packet Size Std", 12: "Packet Size Min", 13: "Packet Size Max", 14: "Forward Packet Size Total", 15: "Backward Packet Size Total", 16: "Forward Packet Size Mean", 17: "Backward Packet Size Mean", 18: "Forward Packet Size Std", 19: "Backward Packet Size Std", 20: "Forward Packet Size Min", 21: "Backward Packet Size Min", 22: "Forward Packet Size Max", 23: "Backward Packet Size Max", 24: "IAT Total", 25: "IAT Mean", 26: "IAT Std", 27: "IAT Min", 28: "IAT Max", 29: "Forward IAT Total", 30: "Backward IAT Total", 31: "Forward IAT Mean", 32: "Backward IAT Mean", 33: "Forward IAT Std", 34: "Backward IAT Std", 35: "Forward IAT Min", 36: "Backward IAT Min", 37: "Forward IAT Max", 38: "Backward IAT Max", 39: "Flow Start Time", 40: "Flow Latest Time"}
|
||||||
|
)
|
74
pkg/fileProcess/fileProcess.go
Normal file
74
pkg/fileProcess/fileProcess.go
Normal file
@@ -0,0 +1,74 @@
|
|||||||
|
package fileProcess
|
||||||
|
|
||||||
|
import (
|
||||||
|
"encoding/csv"
|
||||||
|
"fmt"
|
||||||
|
"log"
|
||||||
|
"os"
|
||||||
|
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/common"
|
||||||
|
)
|
||||||
|
|
||||||
|
// Save file.
|
||||||
|
func FileSave(flowSave map[string][]interface{}, mapKeys map[string]int, fname string) {
|
||||||
|
// logrus.Info(flowSave)
|
||||||
|
|
||||||
|
file, err := os.Create(fname + ".csv")
|
||||||
|
|
||||||
|
CheckErrorFileSave("Cannot create file", err)
|
||||||
|
|
||||||
|
defer file.Close()
|
||||||
|
|
||||||
|
writer := csv.NewWriter(file)
|
||||||
|
|
||||||
|
defer writer.Flush()
|
||||||
|
|
||||||
|
writer.Write([]string{"fiveTuple", "srcIP", "dstIP", "protocol", "srcPort", "dstPort", "flowDuration", "flowLength", "fwdFlowLength", "bwdFlowLength", "packetSizeTotal", "packetSizeMean", "packetSizeStd", "packetSizeMin", "packetSizeMax", "fwdPacketSizeTotal", "bwdPacketSizeTotal", "fwdPacketSizeMean", "bwdPacketSizeMean", "fwdPacketSizeStd", "bwdPacketSizeStd", "fwdPacketSizeMin", "bwdPacketSizeMin", "fwdPacketSizeMax", "bwdPacketSizeMax", "IATMean", "IATStd", "IATMin", "IATMax", "fwdIATTotal", "bwdIATTotal", "fwdIATMean", "bwdIATMean", "fwdIATStd", "bwdIATStd", "fwdIATMin", "bwdIATMin", "fwdIATMax", "bwdIATMax"})
|
||||||
|
|
||||||
|
data := []interface{}{}
|
||||||
|
|
||||||
|
for flow5Tuple, values := range flowSave {
|
||||||
|
flow := common.FlowData(values)
|
||||||
|
|
||||||
|
flowArr := []interface{}{flow5Tuple, flow.SrcIP, flow.DstIP, flow.Protocol, flow.SrcPort, flow.DstPort, flow.FlowDuration, flow.FlowLength, flow.FwdFlowLength, flow.BwdFlowLength, flow.PacketSizeTotal, flow.PacketSizeMean, flow.PacketSizeStd, flow.PacketSizeMin, flow.PacketSizeMax, flow.FwdPacketSizeTotal, flow.BwdPacketSizeTotal, flow.FwdPacketSizeMean, flow.BwdPacketSizeMean, flow.FwdPacketSizeStd, flow.BwdPacketSizeStd, flow.FwdPacketSizeMin, flow.BwdPacketSizeMin, flow.FwdPacketSizeMax, flow.BwdPacketSizeMax, flow.IATMean, flow.IATStd, flow.IATMin, flow.IATMax, flow.FwdIATTotal, flow.BwdIATTotal, flow.FwdIATMean, flow.BwdIATMean, flow.FwdIATStd, flow.BwdIATStd, flow.FwdIATMin, flow.BwdIATMin, flow.FwdIATMax, flow.BwdIATMax}
|
||||||
|
|
||||||
|
data = append(data, flowArr)
|
||||||
|
}
|
||||||
|
|
||||||
|
for _, value := range data {
|
||||||
|
modValue := ModifyArrTypeFileSave(value.([]interface{}))
|
||||||
|
|
||||||
|
err := writer.Write(modValue)
|
||||||
|
|
||||||
|
CheckErrorFileSave("Cannot write to file", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
// Type cast arrays for saving of file.
|
||||||
|
func ModifyArrTypeFileSave(array []interface{}) []string {
|
||||||
|
modArray := []string{}
|
||||||
|
|
||||||
|
value := ""
|
||||||
|
|
||||||
|
for i := 0; i < len(array); i++ {
|
||||||
|
_, ok := array[i].(string)
|
||||||
|
|
||||||
|
if ok {
|
||||||
|
value = array[i].(string)
|
||||||
|
} else {
|
||||||
|
value = fmt.Sprintf("%f", array[i])
|
||||||
|
}
|
||||||
|
|
||||||
|
modArray = append(modArray, value)
|
||||||
|
}
|
||||||
|
|
||||||
|
return modArray
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check errors during saving of file.
|
||||||
|
func CheckErrorFileSave(message string, err error) {
|
||||||
|
if err != nil {
|
||||||
|
log.Fatal(message, err)
|
||||||
|
}
|
||||||
|
}
|
28715
pkg/flowOutput/benign_2017-05-02_kali-normal22_flow_stats.csv
Normal file
28715
pkg/flowOutput/benign_2017-05-02_kali-normal22_flow_stats.csv
Normal file
File diff suppressed because it is too large
Load Diff
250
pkg/flowOutput/webgoat_flow_stats.csv
Normal file
250
pkg/flowOutput/webgoat_flow_stats.csv
Normal file
@@ -0,0 +1,250 @@
|
|||||||
|
fiveTuple,srcIP,dstIP,protocol,srcPort,dstPort,flowDuration,flowLength,fwdFlowLength,bwdFlowLength,packetSizeTotal,packetSizeMean,packetSizeStd,packetSizeMin,packetSizeMax,fwdPacketSizeTotal,bwdPacketSizeTotal,fwdPacketSizeMean,bwdPacketSizeMean,fwdPacketSizeStd,bwdPacketSizeStd,fwdPacketSizeMin,bwdPacketSizeMin,fwdPacketSizeMax,bwdPacketSizeMax,IATMean,IATStd,IATMin,IATMax,fwdIATTotal,bwdIATTotal,fwdIATMean,bwdIATMean,fwdIATStd,bwdIATStd,fwdIATMin,bwdIATMin,fwdIATMax,bwdIATMax
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40182--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40182,539931000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6584000.000000,29018000.000000,1000.000000,137141000.000000,0.000000,539931000.000000,0.000000,6584000.000000,0.000000,29018000.000000,0.000000,1000.000000,0.000000,137141000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55620--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55620,802042000.000000,83.000000,0.000000,83.000000,203374.000000,2450.289157,1019.450319,66.000000,2962.000000,0.000000,203374.000000,2450.289157,2450.289157,0.000000,1019.450319,0.000000,66.000000,0.000000,2962.000000,9781000.000000,32060000.000000,2000.000000,139476000.000000,0.000000,802042000.000000,0.000000,9781000.000000,0.000000,32060000.000000,0.000000,2000.000000,0.000000,139476000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38792,198.199.96.210,138.68.177.159,TCP,38792,8080(http-alt),6439338000.000000,50.000000,0.000000,50.000000,17743.000000,354.860000,5.929621,346.000000,371.000000,0.000000,17743.000000,354.860000,354.860000,0.000000,5.929621,0.000000,346.000000,0.000000,371.000000,131415000.000000,2491000.000000,129560000.000000,143452000.000000,0.000000,6439338000.000000,0.000000,131415000.000000,0.000000,2491000.000000,0.000000,129560000.000000,0.000000,143452000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58936--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58936,924086000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11269000.000000,34283000.000000,2000.000000,133763000.000000,0.000000,924086000.000000,0.000000,11269000.000000,0.000000,34283000.000000,0.000000,2000.000000,0.000000,133763000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--5286--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),5286,537894000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6559000.000000,28910000.000000,2000.000000,135700000.000000,0.000000,537894000.000000,0.000000,6559000.000000,0.000000,28910000.000000,0.000000,2000.000000,0.000000,135700000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38086--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38086,533005000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6500000.000000,28640000.000000,3000.000000,133779000.000000,0.000000,533005000.000000,0.000000,6500000.000000,0.000000,28640000.000000,0.000000,3000.000000,0.000000,133779000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--36856,198.199.96.210,138.68.177.159,TCP,36856,8080(http-alt),3885508000.000000,79.000000,0.000000,79.000000,14705.000000,186.139241,157.758326,66.000000,401.000000,0.000000,14705.000000,186.139241,186.139241,0.000000,157.758326,0.000000,66.000000,0.000000,401.000000,49814000.000000,62437000.000000,4000.000000,134528000.000000,0.000000,3885508000.000000,0.000000,49814000.000000,0.000000,62437000.000000,0.000000,4000.000000,0.000000,134528000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55620,198.199.96.210,138.68.177.159,TCP,55620,8080(http-alt),2946326000.000000,83.000000,0.000000,83.000000,11387.000000,137.192771,135.060759,66.000000,399.000000,0.000000,11387.000000,137.192771,137.192771,0.000000,135.060759,0.000000,66.000000,0.000000,399.000000,35930000.000000,56565000.000000,2000.000000,133469000.000000,0.000000,2946326000.000000,0.000000,35930000.000000,0.000000,56565000.000000,0.000000,2000.000000,0.000000,133469000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38060--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38060,530733000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6472000.000000,28531000.000000,2000.000000,135248000.000000,0.000000,530733000.000000,0.000000,6472000.000000,0.000000,28531000.000000,0.000000,2000.000000,0.000000,135248000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58648,198.199.96.210,138.68.177.159,TCP,58648,8080(http-alt),3106530000.000000,70.000000,0.000000,70.000000,12141.000000,173.442857,153.597864,66.000000,400.000000,0.000000,12141.000000,173.442857,173.442857,0.000000,153.597864,0.000000,66.000000,0.000000,400.000000,45022000.000000,61151000.000000,4000.000000,141824000.000000,0.000000,3106530000.000000,0.000000,45022000.000000,0.000000,61151000.000000,0.000000,4000.000000,0.000000,141824000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43126,198.199.96.210,138.68.177.159,TCP,43126,8080(http-alt),3587947000.000000,83.000000,0.000000,83.000000,14676.000000,176.819277,155.322839,66.000000,400.000000,0.000000,14676.000000,176.819277,176.819277,0.000000,155.322839,0.000000,66.000000,0.000000,400.000000,43755000.000000,60655000.000000,7000.000000,133351000.000000,0.000000,3587947000.000000,0.000000,43755000.000000,0.000000,60655000.000000,0.000000,7000.000000,0.000000,133351000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58650--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58650,548230000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6685000.000000,29489000.000000,2000.000000,147083000.000000,0.000000,548230000.000000,0.000000,6685000.000000,0.000000,29489000.000000,0.000000,2000.000000,0.000000,147083000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55086,198.199.96.210,138.68.177.159,TCP,55086,8080(http-alt),3210215000.000000,83.000000,0.000000,83.000000,13650.000000,164.457831,149.980023,66.000000,408.000000,0.000000,13650.000000,164.457831,164.457831,0.000000,149.980023,0.000000,66.000000,0.000000,408.000000,39148000.000000,58988000.000000,5000.000000,140146000.000000,0.000000,3210215000.000000,0.000000,39148000.000000,0.000000,58988000.000000,0.000000,5000.000000,0.000000,140146000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50062,198.199.96.210,138.68.177.159,TCP,50062,8080(http-alt),4015137000.000000,83.000000,0.000000,83.000000,15263.000000,183.891566,156.704927,66.000000,398.000000,0.000000,15263.000000,183.891566,183.891566,0.000000,156.704927,0.000000,66.000000,0.000000,398.000000,48965000.000000,62241000.000000,3000.000000,137081000.000000,0.000000,4015137000.000000,0.000000,48965000.000000,0.000000,62241000.000000,0.000000,3000.000000,0.000000,137081000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55622--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55622,658349000.000000,83.000000,0.000000,83.000000,203062.000000,2446.530120,1026.690136,66.000000,2962.000000,0.000000,203062.000000,2446.530120,2446.530120,0.000000,1026.690136,0.000000,66.000000,0.000000,2962.000000,8028000.000000,28409000.000000,2000.000000,136138000.000000,0.000000,658349000.000000,0.000000,8028000.000000,0.000000,28409000.000000,0.000000,2000.000000,0.000000,136138000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--36850--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),36850,537430000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6554000.000000,28882000.000000,2000.000000,135442000.000000,0.000000,537430000.000000,0.000000,6554000.000000,0.000000,28882000.000000,0.000000,2000.000000,0.000000,135442000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43104--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43104,530017000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6463000.000000,28481000.000000,4000.000000,132885000.000000,0.000000,530017000.000000,0.000000,6463000.000000,0.000000,28481000.000000,0.000000,4000.000000,0.000000,132885000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--5288--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),5288,926532000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11299000.000000,34553000.000000,1000.000000,139535000.000000,0.000000,926532000.000000,0.000000,11299000.000000,0.000000,34553000.000000,0.000000,1000.000000,0.000000,139535000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55606,198.199.96.210,138.68.177.159,TCP,55606,8080(http-alt),2864134000.000000,83.000000,0.000000,83.000000,10725.000000,129.216867,129.128501,66.000000,398.000000,0.000000,10725.000000,129.216867,129.216867,0.000000,129.128501,0.000000,66.000000,0.000000,398.000000,34928000.000000,55433000.000000,3000.000000,138746000.000000,0.000000,2864134000.000000,0.000000,34928000.000000,0.000000,55433000.000000,0.000000,3000.000000,0.000000,138746000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43092,198.199.96.210,138.68.177.159,TCP,43092,8080(http-alt),3726962000.000000,83.000000,0.000000,83.000000,14969.000000,180.349398,156.045517,66.000000,398.000000,0.000000,14969.000000,180.349398,180.349398,0.000000,156.045517,0.000000,66.000000,0.000000,398.000000,45450000.000000,61234000.000000,3000.000000,134390000.000000,0.000000,3726962000.000000,0.000000,45450000.000000,0.000000,61234000.000000,0.000000,3000.000000,0.000000,134390000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40384,198.199.96.210,138.68.177.159,TCP,40384,8080(http-alt),3847681000.000000,83.000000,0.000000,83.000000,14984.000000,180.530120,156.314815,66.000000,412.000000,0.000000,14984.000000,180.530120,180.530120,0.000000,156.314815,0.000000,66.000000,0.000000,412.000000,46922000.000000,61894000.000000,3000.000000,133617000.000000,0.000000,3847681000.000000,0.000000,46922000.000000,0.000000,61894000.000000,0.000000,3000.000000,0.000000,133617000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55612,198.199.96.210,138.68.177.159,TCP,55612,8080(http-alt),2572443000.000000,83.000000,0.000000,83.000000,10411.000000,125.433735,126.304394,66.000000,399.000000,0.000000,10411.000000,125.433735,125.433735,0.000000,126.304394,0.000000,66.000000,0.000000,399.000000,31371000.000000,52726000.000000,5000.000000,135707000.000000,0.000000,2572443000.000000,0.000000,31371000.000000,0.000000,52726000.000000,0.000000,5000.000000,0.000000,135707000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37034--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37034,655220000.000000,83.000000,0.000000,83.000000,195494.000000,2355.349398,1068.303513,66.000000,2962.000000,0.000000,195494.000000,2355.349398,2355.349398,0.000000,1068.303513,0.000000,66.000000,0.000000,2962.000000,7990000.000000,31288000.000000,4000.000000,131319000.000000,0.000000,655220000.000000,0.000000,7990000.000000,0.000000,31288000.000000,0.000000,4000.000000,0.000000,131319000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38076--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38076,535647000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6532000.000000,28782000.000000,1000.000000,135049000.000000,0.000000,535647000.000000,0.000000,6532000.000000,0.000000,28782000.000000,0.000000,1000.000000,0.000000,135049000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55358,198.199.96.210,138.68.177.159,TCP,55358,8080(http-alt),681309000.000000,16.000000,0.000000,16.000000,2680.000000,167.500000,150.554807,66.000000,393.000000,0.000000,2680.000000,167.500000,167.500000,0.000000,150.554807,0.000000,66.000000,0.000000,393.000000,45420000.000000,59494000.000000,77000.000000,131724000.000000,0.000000,681309000.000000,0.000000,45420000.000000,0.000000,59494000.000000,0.000000,77000.000000,0.000000,131724000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55058--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55058,537703000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6557000.000000,28915000.000000,1000.000000,136088000.000000,0.000000,537703000.000000,0.000000,6557000.000000,0.000000,28915000.000000,0.000000,1000.000000,0.000000,136088000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38770--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38770,6439208000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131412000.000000,2432000.000000,129606000.000000,143552000.000000,0.000000,6439208000.000000,0.000000,131412000.000000,0.000000,2432000.000000,0.000000,129606000.000000,0.000000,143552000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55104,198.199.96.210,138.68.177.159,TCP,55104,8080(http-alt),3347251000.000000,83.000000,0.000000,83.000000,13983.000000,168.469880,151.732988,66.000000,408.000000,0.000000,13983.000000,168.469880,168.469880,0.000000,151.732988,0.000000,66.000000,0.000000,408.000000,40820000.000000,60032000.000000,5000.000000,143742000.000000,0.000000,3347251000.000000,0.000000,40820000.000000,0.000000,60032000.000000,0.000000,5000.000000,0.000000,143742000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40440--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40440,924731000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11277000.000000,34465000.000000,1000.000000,136802000.000000,0.000000,924731000.000000,0.000000,11277000.000000,0.000000,34465000.000000,0.000000,1000.000000,0.000000,136802000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43296--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43296,265212000.000000,19.000000,0.000000,19.000000,43566.000000,2292.947368,1155.830504,66.000000,2962.000000,0.000000,43566.000000,2292.947368,2292.947368,0.000000,1155.830504,0.000000,66.000000,0.000000,2962.000000,14734000.000000,30604000.000000,4000.000000,133897000.000000,0.000000,265212000.000000,0.000000,14734000.000000,0.000000,30604000.000000,0.000000,4000.000000,0.000000,133897000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58644--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58644,546107000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6659000.000000,29339000.000000,1000.000000,138414000.000000,0.000000,546107000.000000,0.000000,6659000.000000,0.000000,29339000.000000,0.000000,1000.000000,0.000000,138414000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--36850,198.199.96.210,138.68.177.159,TCP,36850,8080(http-alt),3628611000.000000,66.000000,0.000000,66.000000,13197.000000,199.954545,161.002205,66.000000,399.000000,0.000000,13197.000000,199.954545,199.954545,0.000000,161.002205,0.000000,66.000000,0.000000,399.000000,55824000.000000,63986000.000000,4000.000000,137406000.000000,0.000000,3628611000.000000,0.000000,55824000.000000,0.000000,63986000.000000,0.000000,4000.000000,0.000000,137406000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38774--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38774,6440646000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131441000.000000,3012000.000000,129650000.000000,145220000.000000,0.000000,6440646000.000000,0.000000,131441000.000000,0.000000,3012000.000000,0.000000,129650000.000000,0.000000,145220000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55376--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55376,287538000.000000,83.000000,0.000000,83.000000,194054.000000,2338.000000,1107.520839,322.000000,2962.000000,0.000000,194054.000000,2338.000000,2338.000000,0.000000,1107.520839,0.000000,322.000000,0.000000,2962.000000,3506000.000000,22038000.000000,1000.000000,143508000.000000,0.000000,287538000.000000,0.000000,3506000.000000,0.000000,22038000.000000,0.000000,1000.000000,0.000000,143508000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58692--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58692,537774000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6558000.000000,28905000.000000,4000.000000,137034000.000000,0.000000,537774000.000000,0.000000,6558000.000000,0.000000,28905000.000000,0.000000,4000.000000,0.000000,137034000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58904,198.199.96.210,138.68.177.159,TCP,58904,8080(http-alt),3261077000.000000,83.000000,0.000000,83.000000,12333.000000,148.590361,141.695247,66.000000,398.000000,0.000000,12333.000000,148.590361,148.590361,0.000000,141.695247,0.000000,66.000000,0.000000,398.000000,39769000.000000,59263000.000000,3000.000000,155199000.000000,0.000000,3261077000.000000,0.000000,39769000.000000,0.000000,59263000.000000,0.000000,3000.000000,0.000000,155199000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38778,198.199.96.210,138.68.177.159,TCP,38778,8080(http-alt),6440780000.000000,50.000000,0.000000,50.000000,17745.000000,354.900000,5.862593,348.000000,374.000000,0.000000,17745.000000,354.900000,354.900000,0.000000,5.862593,0.000000,348.000000,0.000000,374.000000,131444000.000000,3193000.000000,129651000.000000,145190000.000000,0.000000,6440780000.000000,0.000000,131444000.000000,0.000000,3193000.000000,0.000000,129651000.000000,0.000000,145190000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50064--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50064,546086000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6659000.000000,29364000.000000,1000.000000,144612000.000000,0.000000,546086000.000000,0.000000,6659000.000000,0.000000,29364000.000000,0.000000,1000.000000,0.000000,144612000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58658--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58658,544939000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6645000.000000,29332000.000000,2000.000000,147693000.000000,0.000000,544939000.000000,0.000000,6645000.000000,0.000000,29332000.000000,0.000000,2000.000000,0.000000,147693000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40508--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40508,398712000.000000,33.000000,0.000000,33.000000,87626.000000,2655.333333,825.540582,66.000000,2962.000000,0.000000,87626.000000,2655.333333,2655.333333,0.000000,825.540582,0.000000,66.000000,0.000000,2962.000000,12459000.000000,32225000.000000,4000.000000,134227000.000000,0.000000,398712000.000000,0.000000,12459000.000000,0.000000,32225000.000000,0.000000,4000.000000,0.000000,134227000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50290,198.199.96.210,138.68.177.159,TCP,50290,8080(http-alt),528135000.000000,15.000000,0.000000,15.000000,1647.000000,109.800000,110.118845,66.000000,392.000000,0.000000,1647.000000,109.800000,109.800000,0.000000,110.118845,0.000000,66.000000,0.000000,392.000000,37723000.000000,54184000.000000,3000.000000,133354000.000000,0.000000,528135000.000000,0.000000,37723000.000000,0.000000,54184000.000000,0.000000,3000.000000,0.000000,133354000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40254,198.199.96.210,138.68.177.159,TCP,40254,8080(http-alt),3328970000.000000,83.000000,0.000000,83.000000,13970.000000,168.313253,151.513881,66.000000,409.000000,0.000000,13970.000000,168.313253,168.313253,0.000000,151.513881,0.000000,66.000000,0.000000,409.000000,40597000.000000,59945000.000000,5000.000000,138519000.000000,0.000000,3328970000.000000,0.000000,40597000.000000,0.000000,59945000.000000,0.000000,5000.000000,0.000000,138519000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55042,198.199.96.210,138.68.177.159,TCP,55042,8080(http-alt),4304675000.000000,83.000000,0.000000,83.000000,15949.000000,192.156627,159.278757,66.000000,409.000000,0.000000,15949.000000,192.156627,192.156627,0.000000,159.278757,0.000000,66.000000,0.000000,409.000000,52496000.000000,63020000.000000,34000.000000,142299000.000000,0.000000,4304675000.000000,0.000000,52496000.000000,0.000000,63020000.000000,0.000000,34000.000000,0.000000,142299000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40430--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40430,921552000.000000,83.000000,0.000000,83.000000,193074.000000,2326.192771,1125.857408,66.000000,2962.000000,0.000000,193074.000000,2326.192771,2326.192771,0.000000,1125.857408,0.000000,66.000000,0.000000,2962.000000,11238000.000000,34104000.000000,5000.000000,133552000.000000,0.000000,921552000.000000,0.000000,11238000.000000,0.000000,34104000.000000,0.000000,5000.000000,0.000000,133552000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55622,198.199.96.210,138.68.177.159,TCP,55622,8080(http-alt),2455097000.000000,83.000000,0.000000,83.000000,10724.000000,129.204819,129.103280,66.000000,398.000000,0.000000,10724.000000,129.204819,129.204819,0.000000,129.103280,0.000000,66.000000,0.000000,398.000000,29940000.000000,52284000.000000,3000.000000,134402000.000000,0.000000,2455097000.000000,0.000000,29940000.000000,0.000000,52284000.000000,0.000000,3000.000000,0.000000,134402000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55098--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55098,530592000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6470000.000000,28514000.000000,4000.000000,133599000.000000,0.000000,530592000.000000,0.000000,6470000.000000,0.000000,28514000.000000,0.000000,4000.000000,0.000000,133599000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58918,198.199.96.210,138.68.177.159,TCP,58918,8080(http-alt),2489615000.000000,63.000000,0.000000,63.000000,9387.000000,149.000000,141.970487,66.000000,398.000000,0.000000,9387.000000,149.000000,149.000000,0.000000,141.970487,0.000000,66.000000,0.000000,398.000000,40155000.000000,58430000.000000,3000.000000,151142000.000000,0.000000,2489615000.000000,0.000000,40155000.000000,0.000000,58430000.000000,0.000000,3000.000000,0.000000,151142000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55602,198.199.96.210,138.68.177.159,TCP,55602,8080(http-alt),2878167000.000000,83.000000,0.000000,83.000000,11366.000000,136.939759,134.814138,66.000000,398.000000,0.000000,11366.000000,136.939759,136.939759,0.000000,134.814138,0.000000,66.000000,0.000000,398.000000,35099000.000000,56313000.000000,4000.000000,136221000.000000,0.000000,2878167000.000000,0.000000,35099000.000000,0.000000,56313000.000000,0.000000,4000.000000,0.000000,136221000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55064--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55064,531108000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6476000.000000,28547000.000000,4000.000000,134437000.000000,0.000000,531108000.000000,0.000000,6476000.000000,0.000000,28547000.000000,0.000000,4000.000000,0.000000,134437000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38724--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38724,6448086000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131593000.000000,3341000.000000,129759000.000000,148591000.000000,0.000000,6448086000.000000,0.000000,131593000.000000,0.000000,3341000.000000,0.000000,129759000.000000,0.000000,148591000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38774,198.199.96.210,138.68.177.159,TCP,38774,8080(http-alt),6440649000.000000,50.000000,0.000000,50.000000,17769.000000,355.380000,5.106427,348.000000,369.000000,0.000000,17769.000000,355.380000,355.380000,0.000000,5.106427,0.000000,348.000000,0.000000,369.000000,131441000.000000,3013000.000000,129620000.000000,145262000.000000,0.000000,6440649000.000000,0.000000,131441000.000000,0.000000,3013000.000000,0.000000,129620000.000000,0.000000,145262000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55100,198.199.96.210,138.68.177.159,TCP,55100,8080(http-alt),3338397000.000000,83.000000,0.000000,83.000000,13965.000000,168.253012,151.405690,66.000000,397.000000,0.000000,13965.000000,168.253012,168.253012,0.000000,151.405690,0.000000,66.000000,0.000000,397.000000,40712000.000000,59692000.000000,3000.000000,139471000.000000,0.000000,3338397000.000000,0.000000,40712000.000000,0.000000,59692000.000000,0.000000,3000.000000,0.000000,139471000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50048--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50048,537046000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6549000.000000,28872000.000000,2000.000000,135606000.000000,0.000000,537046000.000000,0.000000,6549000.000000,0.000000,28872000.000000,0.000000,2000.000000,0.000000,135606000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43038,198.199.96.210,138.68.177.159,TCP,43038,8080(http-alt),4009904000.000000,83.000000,0.000000,83.000000,15304.000000,184.385542,157.364731,66.000000,400.000000,0.000000,15304.000000,184.385542,184.385542,0.000000,157.364731,0.000000,66.000000,0.000000,400.000000,48901000.000000,62485000.000000,4000.000000,137209000.000000,0.000000,4009904000.000000,0.000000,48901000.000000,0.000000,62485000.000000,0.000000,4000.000000,0.000000,137209000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37114,198.199.96.210,138.68.177.159,TCP,37114,8080(http-alt),1919600000.000000,54.000000,0.000000,54.000000,7846.000000,145.296296,140.491944,66.000000,403.000000,0.000000,7846.000000,145.296296,145.296296,0.000000,140.491944,0.000000,66.000000,0.000000,403.000000,36218000.000000,55571000.000000,3000.000000,139004000.000000,0.000000,1919600000.000000,0.000000,36218000.000000,0.000000,55571000.000000,0.000000,3000.000000,0.000000,139004000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58648--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58648,545243000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6649000.000000,29286000.000000,1000.000000,138353000.000000,0.000000,545243000.000000,0.000000,6649000.000000,0.000000,29286000.000000,0.000000,1000.000000,0.000000,138353000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40238--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40238,539149000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6574000.000000,28937000.000000,1000.000000,135852000.000000,0.000000,539149000.000000,0.000000,6574000.000000,0.000000,28937000.000000,0.000000,1000.000000,0.000000,135852000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58944--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58944,391527000.000000,19.000000,0.000000,19.000000,45987.000000,2420.368421,1029.890501,66.000000,2962.000000,0.000000,45987.000000,2420.368421,2420.368421,0.000000,1029.890501,0.000000,66.000000,0.000000,2962.000000,21751000.000000,41029000.000000,1000.000000,132102000.000000,0.000000,391527000.000000,0.000000,21751000.000000,0.000000,41029000.000000,0.000000,1000.000000,0.000000,132102000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43038--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43038,537973000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6560000.000000,28903000.000000,1000.000000,135943000.000000,0.000000,537973000.000000,0.000000,6560000.000000,0.000000,28903000.000000,0.000000,1000.000000,0.000000,135943000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37100--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37100,793154000.000000,83.000000,0.000000,83.000000,195190.000000,2351.686747,1075.572920,66.000000,2962.000000,0.000000,195190.000000,2351.686747,2351.686747,0.000000,1075.572920,0.000000,66.000000,0.000000,2962.000000,9672000.000000,31708000.000000,3000.000000,134870000.000000,0.000000,793154000.000000,0.000000,9672000.000000,0.000000,31708000.000000,0.000000,3000.000000,0.000000,134870000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37038,198.199.96.210,138.68.177.159,TCP,37038,8080(http-alt),3314954000.000000,83.000000,0.000000,83.000000,12998.000000,156.602410,146.129167,66.000000,398.000000,0.000000,12998.000000,156.602410,156.602410,0.000000,146.129167,0.000000,66.000000,0.000000,398.000000,40426000.000000,58896000.000000,10000.000000,132983000.000000,0.000000,3314954000.000000,0.000000,40426000.000000,0.000000,58896000.000000,0.000000,10000.000000,0.000000,132983000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--36874,198.199.96.210,138.68.177.159,TCP,36874,8080(http-alt),4544448000.000000,83.000000,0.000000,83.000000,16610.000000,200.120482,161.025883,66.000000,402.000000,0.000000,16610.000000,200.120482,200.120482,0.000000,161.025883,0.000000,66.000000,0.000000,402.000000,55420000.000000,63950000.000000,96000.000000,139431000.000000,0.000000,4544448000.000000,0.000000,55420000.000000,0.000000,63950000.000000,0.000000,96000.000000,0.000000,139431000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40386--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40386,530732000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6472000.000000,28518000.000000,1000.000000,133774000.000000,0.000000,530732000.000000,0.000000,6472000.000000,0.000000,28518000.000000,0.000000,1000.000000,0.000000,133774000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55610--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55610,661077000.000000,83.000000,0.000000,83.000000,203062.000000,2446.530120,1026.690136,66.000000,2962.000000,0.000000,203062.000000,2446.530120,2446.530120,0.000000,1026.690136,0.000000,66.000000,0.000000,2962.000000,8061000.000000,28358000.000000,3000.000000,134268000.000000,0.000000,661077000.000000,0.000000,8061000.000000,0.000000,28358000.000000,0.000000,3000.000000,0.000000,134268000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43052--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43052,535361000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6528000.000000,28759000.000000,1000.000000,135252000.000000,0.000000,535361000.000000,0.000000,6528000.000000,0.000000,28759000.000000,0.000000,1000.000000,0.000000,135252000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43284,198.199.96.210,138.68.177.159,TCP,43284,8080(http-alt),654964000.000000,20.000000,0.000000,20.000000,2308.000000,115.400000,116.490085,66.000000,395.000000,0.000000,2308.000000,115.400000,115.400000,0.000000,116.490085,0.000000,66.000000,0.000000,395.000000,34471000.000000,52938000.000000,3000.000000,131673000.000000,0.000000,654964000.000000,0.000000,34471000.000000,0.000000,52938000.000000,0.000000,3000.000000,0.000000,131673000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58870,198.199.96.210,138.68.177.159,TCP,58870,8080(http-alt),3523417000.000000,83.000000,0.000000,83.000000,13332.000000,160.626506,148.160342,66.000000,400.000000,0.000000,13332.000000,160.626506,160.626506,0.000000,148.160342,0.000000,66.000000,0.000000,400.000000,42968000.000000,60061000.000000,3000.000000,136214000.000000,0.000000,3523417000.000000,0.000000,42968000.000000,0.000000,60061000.000000,0.000000,3000.000000,0.000000,136214000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38072--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38072,543628000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6629000.000000,29218000.000000,1000.000000,136307000.000000,0.000000,543628000.000000,0.000000,6629000.000000,0.000000,29218000.000000,0.000000,1000.000000,0.000000,136307000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43088,198.199.96.210,138.68.177.159,TCP,43088,8080(http-alt),3468207000.000000,83.000000,0.000000,83.000000,14023.000000,168.951807,152.441725,66.000000,400.000000,0.000000,14023.000000,168.951807,168.951807,0.000000,152.441725,0.000000,66.000000,0.000000,400.000000,42295000.000000,60348000.000000,5000.000000,134855000.000000,0.000000,3468207000.000000,0.000000,42295000.000000,0.000000,60348000.000000,0.000000,5000.000000,0.000000,134855000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--36866--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),36866,541786000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6607000.000000,29119000.000000,1000.000000,137827000.000000,0.000000,541786000.000000,0.000000,6607000.000000,0.000000,29119000.000000,0.000000,1000.000000,0.000000,137827000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55344--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55344,141732000.000000,38.000000,0.000000,38.000000,83471.000000,2196.605263,1200.857315,66.000000,2962.000000,0.000000,83471.000000,2196.605263,2196.605263,0.000000,1200.857315,0.000000,66.000000,0.000000,2962.000000,3830000.000000,22923000.000000,1000.000000,141421000.000000,0.000000,141732000.000000,0.000000,3830000.000000,0.000000,22923000.000000,0.000000,1000.000000,0.000000,141421000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40440,198.199.96.210,138.68.177.159,TCP,40440,8080(http-alt),2862325000.000000,83.000000,0.000000,83.000000,10705.000000,128.975904,128.632846,66.000000,396.000000,0.000000,10705.000000,128.975904,128.975904,0.000000,128.632846,0.000000,66.000000,0.000000,396.000000,34906000.000000,56080000.000000,3000.000000,152582000.000000,0.000000,2862325000.000000,0.000000,34906000.000000,0.000000,56080000.000000,0.000000,3000.000000,0.000000,152582000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55634,198.199.96.210,138.68.177.159,TCP,55634,8080(http-alt),2413782000.000000,83.000000,0.000000,83.000000,10375.000000,125.000000,125.377502,66.000000,397.000000,0.000000,10375.000000,125.000000,125.000000,0.000000,125.377502,0.000000,66.000000,0.000000,397.000000,29436000.000000,52877000.000000,3000.000000,140246000.000000,0.000000,2413782000.000000,0.000000,29436000.000000,0.000000,52877000.000000,0.000000,3000.000000,0.000000,140246000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58664,198.199.96.210,138.68.177.159,TCP,58664,8080(http-alt),3999439000.000000,79.000000,0.000000,79.000000,15004.000000,189.924051,158.384708,66.000000,400.000000,0.000000,15004.000000,189.924051,189.924051,0.000000,158.384708,0.000000,66.000000,0.000000,400.000000,51274000.000000,62849000.000000,12000.000000,133803000.000000,0.000000,3999439000.000000,0.000000,51274000.000000,0.000000,62849000.000000,0.000000,12000.000000,0.000000,133803000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--5286,198.199.96.210,138.68.177.159,TCP,5286,8080(http-alt),3880450000.000000,83.000000,0.000000,83.000000,15313.000000,184.493976,157.503978,66.000000,398.000000,0.000000,15313.000000,184.493976,184.493976,0.000000,157.503978,0.000000,66.000000,0.000000,398.000000,47322000.000000,62293000.000000,4000.000000,148979000.000000,0.000000,3880450000.000000,0.000000,47322000.000000,0.000000,62293000.000000,0.000000,4000.000000,0.000000,148979000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55088--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55088,537500000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6554000.000000,28876000.000000,1000.000000,135857000.000000,0.000000,537500000.000000,0.000000,6554000.000000,0.000000,28876000.000000,0.000000,1000.000000,0.000000,135857000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55606--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55606,915612000.000000,83.000000,0.000000,83.000000,203374.000000,2450.289157,1019.450319,66.000000,2962.000000,0.000000,203374.000000,2450.289157,2450.289157,0.000000,1019.450319,0.000000,66.000000,0.000000,2962.000000,11166000.000000,33912000.000000,1000.000000,132401000.000000,0.000000,915612000.000000,0.000000,11166000.000000,0.000000,33912000.000000,0.000000,1000.000000,0.000000,132401000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55100--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55100,528053000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6439000.000000,28365000.000000,1000.000000,133609000.000000,0.000000,528053000.000000,0.000000,6439000.000000,0.000000,28365000.000000,0.000000,1000.000000,0.000000,133609000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38072,198.199.96.210,138.68.177.159,TCP,38072,8080(http-alt),2677108000.000000,59.000000,0.000000,59.000000,10441.000000,176.966102,154.965930,66.000000,402.000000,0.000000,10441.000000,176.966102,176.966102,0.000000,154.965930,0.000000,66.000000,0.000000,402.000000,46157000.000000,61604000.000000,6000.000000,135113000.000000,0.000000,2677108000.000000,0.000000,46157000.000000,0.000000,61604000.000000,0.000000,6000.000000,0.000000,135113000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43110--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43110,534420000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6517000.000000,28724000.000000,2000.000000,134421000.000000,0.000000,534420000.000000,0.000000,6517000.000000,0.000000,28724000.000000,0.000000,2000.000000,0.000000,134421000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55612--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55612,796002000.000000,83.000000,0.000000,83.000000,203374.000000,2450.289157,1019.450319,66.000000,2962.000000,0.000000,203374.000000,2450.289157,2450.289157,0.000000,1019.450319,0.000000,66.000000,0.000000,2962.000000,9707000.000000,31565000.000000,6000.000000,135017000.000000,0.000000,796002000.000000,0.000000,9707000.000000,0.000000,31565000.000000,0.000000,6000.000000,0.000000,135017000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38188--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38188,535461000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6530000.000000,28785000.000000,1000.000000,136499000.000000,0.000000,535461000.000000,0.000000,6530000.000000,0.000000,28785000.000000,0.000000,1000.000000,0.000000,136499000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58892--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58892,935512000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11408000.000000,34952000.000000,2000.000000,140769000.000000,0.000000,935512000.000000,0.000000,11408000.000000,0.000000,34952000.000000,0.000000,2000.000000,0.000000,140769000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37122,198.199.96.210,138.68.177.159,TCP,37122,8080(http-alt),1472852000.000000,50.000000,0.000000,50.000000,6584.000000,131.680000,130.976248,66.000000,400.000000,0.000000,6584.000000,131.680000,131.680000,0.000000,130.976248,0.000000,66.000000,0.000000,400.000000,30058000.000000,52757000.000000,3000.000000,144106000.000000,0.000000,1472852000.000000,0.000000,30058000.000000,0.000000,52757000.000000,0.000000,3000.000000,0.000000,144106000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40432,198.199.96.210,138.68.177.159,TCP,40432,8080(http-alt),3469043000.000000,83.000000,0.000000,83.000000,12376.000000,149.108434,142.596069,66.000000,408.000000,0.000000,12376.000000,149.108434,149.108434,0.000000,142.596069,0.000000,66.000000,0.000000,408.000000,42305000.000000,58875000.000000,4000.000000,133652000.000000,0.000000,3469043000.000000,0.000000,42305000.000000,0.000000,58875000.000000,0.000000,4000.000000,0.000000,133652000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37038--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37038,785117000.000000,83.000000,0.000000,83.000000,195190.000000,2351.686747,1075.572920,66.000000,2962.000000,0.000000,195190.000000,2351.686747,2351.686747,0.000000,1075.572920,0.000000,66.000000,0.000000,2962.000000,9574000.000000,31300000.000000,4000.000000,131262000.000000,0.000000,785117000.000000,0.000000,9574000.000000,0.000000,31300000.000000,0.000000,4000.000000,0.000000,131262000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58692,198.199.96.210,138.68.177.159,TCP,58692,8080(http-alt),4559699000.000000,83.000000,0.000000,83.000000,16580.000000,199.759036,160.584819,66.000000,400.000000,0.000000,16580.000000,199.759036,199.759036,0.000000,160.584819,0.000000,66.000000,0.000000,400.000000,55606000.000000,63717000.000000,3000.000000,135912000.000000,0.000000,4559699000.000000,0.000000,55606000.000000,0.000000,63717000.000000,0.000000,3000.000000,0.000000,135912000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55066,198.199.96.210,138.68.177.159,TCP,55066,8080(http-alt),3899099000.000000,83.000000,0.000000,83.000000,15260.000000,183.855422,156.664336,66.000000,408.000000,0.000000,15260.000000,183.855422,183.855422,0.000000,156.664336,0.000000,66.000000,0.000000,408.000000,47549000.000000,62141000.000000,4000.000000,143756000.000000,0.000000,3899099000.000000,0.000000,47549000.000000,0.000000,62141000.000000,0.000000,4000.000000,0.000000,143756000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50020--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50020,535884000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6535000.000000,28796000.000000,1000.000000,135641000.000000,0.000000,535884000.000000,0.000000,6535000.000000,0.000000,28796000.000000,0.000000,1000.000000,0.000000,135641000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55098,198.199.96.210,138.68.177.159,TCP,55098,8080(http-alt),4141869000.000000,83.000000,0.000000,83.000000,15564.000000,187.518072,157.393939,66.000000,396.000000,0.000000,15564.000000,187.518072,187.518072,0.000000,157.393939,0.000000,66.000000,0.000000,396.000000,50510000.000000,62476000.000000,4000.000000,136331000.000000,0.000000,4141869000.000000,0.000000,50510000.000000,0.000000,62476000.000000,0.000000,4000.000000,0.000000,136331000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37034,198.199.96.210,138.68.177.159,TCP,37034,8080(http-alt),3449494000.000000,83.000000,0.000000,83.000000,13977.000000,168.397590,151.626041,66.000000,398.000000,0.000000,13977.000000,168.397590,168.397590,0.000000,151.626041,0.000000,66.000000,0.000000,398.000000,42067000.000000,60185000.000000,3000.000000,136131000.000000,0.000000,3449494000.000000,0.000000,42067000.000000,0.000000,60185000.000000,0.000000,3000.000000,0.000000,136131000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50064,198.199.96.210,138.68.177.159,TCP,50064,8080(http-alt),3750366000.000000,83.000000,0.000000,83.000000,14951.000000,180.132530,155.749085,66.000000,398.000000,0.000000,14951.000000,180.132530,180.132530,0.000000,155.749085,0.000000,66.000000,0.000000,398.000000,45736000.000000,61384000.000000,5000.000000,137208000.000000,0.000000,3750366000.000000,0.000000,45736000.000000,0.000000,61384000.000000,0.000000,5000.000000,0.000000,137208000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50052,198.199.96.210,138.68.177.159,TCP,50052,8080(http-alt),4020666000.000000,83.000000,0.000000,83.000000,15590.000000,187.831325,157.796637,66.000000,397.000000,0.000000,15590.000000,187.831325,187.831325,0.000000,157.796637,0.000000,66.000000,0.000000,397.000000,49032000.000000,62301000.000000,8000.000000,135599000.000000,0.000000,4020666000.000000,0.000000,49032000.000000,0.000000,62301000.000000,0.000000,8000.000000,0.000000,135599000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38028--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38028,398395000.000000,62.000000,0.000000,62.000000,138286.000000,2230.419355,1192.237197,66.000000,2962.000000,0.000000,138286.000000,2230.419355,2230.419355,0.000000,1192.237197,0.000000,66.000000,0.000000,2962.000000,6531000.000000,28641000.000000,6000.000000,133387000.000000,0.000000,398395000.000000,0.000000,6531000.000000,0.000000,28641000.000000,0.000000,6000.000000,0.000000,133387000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58618--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58618,538266000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6564000.000000,28943000.000000,1000.000000,136800000.000000,0.000000,538266000.000000,0.000000,6564000.000000,0.000000,28943000.000000,0.000000,1000.000000,0.000000,136800000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50058--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50058,543354000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6626000.000000,29185000.000000,1000.000000,136796000.000000,0.000000,543354000.000000,0.000000,6626000.000000,0.000000,29185000.000000,0.000000,1000.000000,0.000000,136796000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--36876,198.199.96.210,138.68.177.159,TCP,36876,8080(http-alt),4595557000.000000,83.000000,0.000000,83.000000,16595.000000,199.939759,160.811747,66.000000,402.000000,0.000000,16595.000000,199.939759,199.939759,0.000000,160.811747,0.000000,66.000000,0.000000,402.000000,56043000.000000,64285000.000000,6000.000000,148761000.000000,0.000000,4595557000.000000,0.000000,56043000.000000,0.000000,64285000.000000,0.000000,6000.000000,0.000000,148761000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37100,198.199.96.210,138.68.177.159,TCP,37100,8080(http-alt),2877096000.000000,66.000000,0.000000,66.000000,10940.000000,165.757576,151.042043,66.000000,402.000000,0.000000,10940.000000,165.757576,165.757576,0.000000,151.042043,0.000000,66.000000,0.000000,402.000000,44263000.000000,61222000.000000,2000.000000,150987000.000000,0.000000,2877096000.000000,0.000000,44263000.000000,0.000000,61222000.000000,0.000000,2000.000000,0.000000,150987000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37104--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37104,803075000.000000,83.000000,0.000000,83.000000,195190.000000,2351.686747,1075.572920,66.000000,2962.000000,0.000000,195190.000000,2351.686747,2351.686747,0.000000,1075.572920,0.000000,66.000000,0.000000,2962.000000,9793000.000000,31998000.000000,1000.000000,139603000.000000,0.000000,803075000.000000,0.000000,9793000.000000,0.000000,31998000.000000,0.000000,1000.000000,0.000000,139603000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55376,198.199.96.210,138.68.177.159,TCP,55376,8080(http-alt),1545790000.000000,27.000000,0.000000,27.000000,5377.000000,199.148148,160.598350,66.000000,399.000000,0.000000,5377.000000,199.148148,199.148148,0.000000,160.598350,0.000000,66.000000,0.000000,399.000000,59453000.000000,61349000.000000,880000.000000,135112000.000000,0.000000,1545790000.000000,0.000000,59453000.000000,0.000000,61349000.000000,0.000000,880000.000000,0.000000,135112000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50068,198.199.96.210,138.68.177.159,TCP,50068,8080(http-alt),3853725000.000000,83.000000,0.000000,83.000000,14929.000000,179.867470,155.387954,66.000000,398.000000,0.000000,14929.000000,179.867470,179.867470,0.000000,155.387954,0.000000,66.000000,0.000000,398.000000,46996000.000000,61669000.000000,10000.000000,133368000.000000,0.000000,3853725000.000000,0.000000,46996000.000000,0.000000,61669000.000000,0.000000,10000.000000,0.000000,133368000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38340,198.199.96.210,138.68.177.159,TCP,38340,8080(http-alt),3118567000.000000,78.000000,0.000000,78.000000,12008.000000,153.948718,144.672920,66.000000,397.000000,0.000000,12008.000000,153.948718,153.948718,0.000000,144.672920,0.000000,66.000000,0.000000,397.000000,40500000.000000,59432000.000000,3000.000000,153420000.000000,0.000000,3118567000.000000,0.000000,40500000.000000,0.000000,59432000.000000,0.000000,3000.000000,0.000000,153420000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38184--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38184,533607000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6507000.000000,28675000.000000,2000.000000,134285000.000000,0.000000,533607000.000000,0.000000,6507000.000000,0.000000,28675000.000000,0.000000,2000.000000,0.000000,134285000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50294--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50294,402024000.000000,20.000000,0.000000,20.000000,46053.000000,2302.650000,1127.357808,66.000000,2962.000000,0.000000,46053.000000,2302.650000,2302.650000,0.000000,1127.357808,0.000000,66.000000,0.000000,2962.000000,21159000.000000,40302000.000000,3000.000000,140499000.000000,0.000000,402024000.000000,0.000000,21159000.000000,0.000000,40302000.000000,0.000000,3000.000000,0.000000,140499000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55562,198.199.96.210,138.68.177.159,TCP,55562,8080(http-alt),4057925000.000000,83.000000,0.000000,83.000000,15268.000000,183.951807,156.787855,66.000000,399.000000,0.000000,15268.000000,183.951807,183.951807,0.000000,156.787855,0.000000,66.000000,0.000000,399.000000,49486000.000000,61945000.000000,6000.000000,135289000.000000,0.000000,4057925000.000000,0.000000,49486000.000000,0.000000,61945000.000000,0.000000,6000.000000,0.000000,135289000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38222--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38222,537561000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6555000.000000,28832000.000000,2000.000000,137392000.000000,0.000000,537561000.000000,0.000000,6555000.000000,0.000000,28832000.000000,0.000000,2000.000000,0.000000,137392000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55106--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55106,541984000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6609000.000000,29114000.000000,1000.000000,135839000.000000,0.000000,541984000.000000,0.000000,6609000.000000,0.000000,29114000.000000,0.000000,1000.000000,0.000000,135839000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38328--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38328,924400000.000000,83.000000,0.000000,83.000000,193074.000000,2326.192771,1125.857408,66.000000,2962.000000,0.000000,193074.000000,2326.192771,2326.192771,0.000000,1125.857408,0.000000,66.000000,0.000000,2962.000000,11273000.000000,34175000.000000,1000.000000,136064000.000000,0.000000,924400000.000000,0.000000,11273000.000000,0.000000,34175000.000000,0.000000,1000.000000,0.000000,136064000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55548,198.199.96.210,138.68.177.159,TCP,55548,8080(http-alt),4397224000.000000,83.000000,0.000000,83.000000,15933.000000,191.963855,159.031136,66.000000,399.000000,0.000000,15933.000000,191.963855,191.963855,0.000000,159.031136,0.000000,66.000000,0.000000,399.000000,53624000.000000,62652000.000000,3000.000000,145670000.000000,0.000000,4397224000.000000,0.000000,53624000.000000,0.000000,62652000.000000,0.000000,3000.000000,0.000000,145670000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50072,198.199.96.210,138.68.177.159,TCP,50072,8080(http-alt),4029340000.000000,83.000000,0.000000,83.000000,15267.000000,183.939759,156.765987,66.000000,398.000000,0.000000,15267.000000,183.939759,183.939759,0.000000,156.765987,0.000000,66.000000,0.000000,398.000000,49138000.000000,62766000.000000,4000.000000,136447000.000000,0.000000,4029340000.000000,0.000000,49138000.000000,0.000000,62766000.000000,0.000000,4000.000000,0.000000,136447000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--5287,198.199.96.210,138.68.177.159,TCP,5287,8080(http-alt),3738114000.000000,83.000000,0.000000,83.000000,14624.000000,176.192771,154.446892,66.000000,402.000000,0.000000,14624.000000,176.192771,176.192771,0.000000,154.446892,0.000000,66.000000,0.000000,402.000000,45586000.000000,61697000.000000,6000.000000,135797000.000000,0.000000,3738114000.000000,0.000000,45586000.000000,0.000000,61697000.000000,0.000000,6000.000000,0.000000,135797000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50290--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50290,528551000.000000,39.000000,0.000000,39.000000,92032.000000,2359.794872,1091.522817,66.000000,2962.000000,0.000000,92032.000000,2359.794872,2359.794872,0.000000,1091.522817,0.000000,66.000000,0.000000,2962.000000,13909000.000000,35836000.000000,3000.000000,133362000.000000,0.000000,528551000.000000,0.000000,13909000.000000,0.000000,35836000.000000,0.000000,3000.000000,0.000000,133362000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58900--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58900,919033000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11207000.000000,34227000.000000,1000.000000,134333000.000000,0.000000,919033000.000000,0.000000,11207000.000000,0.000000,34227000.000000,0.000000,1000.000000,0.000000,134333000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38324,198.199.96.210,138.68.177.159,TCP,38324,8080(http-alt),3648930000.000000,83.000000,0.000000,83.000000,13649.000000,164.445783,149.751944,66.000000,403.000000,0.000000,13649.000000,164.445783,164.445783,0.000000,149.751944,0.000000,66.000000,0.000000,403.000000,44499000.000000,61327000.000000,3000.000000,155331000.000000,0.000000,3648930000.000000,0.000000,44499000.000000,0.000000,61327000.000000,0.000000,3000.000000,0.000000,155331000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58618,198.199.96.210,138.68.177.159,TCP,58618,8080(http-alt),1078433000.000000,19.000000,0.000000,19.000000,3857.000000,203.000000,160.652616,66.000000,394.000000,0.000000,3857.000000,203.000000,203.000000,0.000000,160.652616,0.000000,66.000000,0.000000,394.000000,59912000.000000,63486000.000000,141000.000000,136924000.000000,0.000000,1078433000.000000,0.000000,59912000.000000,0.000000,63486000.000000,0.000000,141000.000000,0.000000,136924000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50302--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50302,263901000.000000,19.000000,0.000000,19.000000,43566.000000,2292.947368,1155.830504,66.000000,2962.000000,0.000000,43566.000000,2292.947368,2292.947368,0.000000,1155.830504,0.000000,66.000000,0.000000,2962.000000,14661000.000000,30579000.000000,9000.000000,132524000.000000,0.000000,263901000.000000,0.000000,14661000.000000,0.000000,30579000.000000,0.000000,9000.000000,0.000000,132524000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40264,198.199.96.210,138.68.177.159,TCP,40264,8080(http-alt),4262974000.000000,83.000000,0.000000,83.000000,15959.000000,192.277108,159.449906,66.000000,412.000000,0.000000,15959.000000,192.277108,192.277108,0.000000,159.449906,0.000000,66.000000,0.000000,412.000000,51987000.000000,63331000.000000,4000.000000,140604000.000000,0.000000,4262974000.000000,0.000000,51987000.000000,0.000000,63331000.000000,0.000000,4000.000000,0.000000,140604000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55088,198.199.96.210,138.68.177.159,TCP,55088,8080(http-alt),3752998000.000000,83.000000,0.000000,83.000000,14653.000000,176.542169,154.940198,66.000000,408.000000,0.000000,14653.000000,176.542169,176.542169,0.000000,154.940198,0.000000,66.000000,0.000000,408.000000,45768000.000000,61721000.000000,4000.000000,143103000.000000,0.000000,3752998000.000000,0.000000,45768000.000000,0.000000,61721000.000000,0.000000,4000.000000,0.000000,143103000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55618--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55618,804084000.000000,83.000000,0.000000,83.000000,203374.000000,2450.289157,1019.450319,66.000000,2962.000000,0.000000,203374.000000,2450.289157,2450.289157,0.000000,1019.450319,0.000000,66.000000,0.000000,2962.000000,9805000.000000,32067000.000000,3000.000000,139472000.000000,0.000000,804084000.000000,0.000000,9805000.000000,0.000000,32067000.000000,0.000000,3000.000000,0.000000,139472000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55042--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55042,537481000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6554000.000000,28890000.000000,4000.000000,136060000.000000,0.000000,537481000.000000,0.000000,6554000.000000,0.000000,28890000.000000,0.000000,4000.000000,0.000000,136060000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50048,198.199.96.210,138.68.177.159,TCP,50048,8080(http-alt),4022205000.000000,83.000000,0.000000,83.000000,15279.000000,184.084337,156.956690,66.000000,396.000000,0.000000,15279.000000,184.084337,184.084337,0.000000,156.956690,0.000000,66.000000,0.000000,396.000000,49051000.000000,62237000.000000,4000.000000,135683000.000000,0.000000,4022205000.000000,0.000000,49051000.000000,0.000000,62237000.000000,0.000000,4000.000000,0.000000,135683000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58644,198.199.96.210,138.68.177.159,TCP,58644,8080(http-alt),2972651000.000000,56.000000,0.000000,56.000000,10881.000000,194.303571,159.512306,66.000000,399.000000,0.000000,10881.000000,194.303571,194.303571,0.000000,159.512306,0.000000,66.000000,0.000000,399.000000,54048000.000000,63273000.000000,21000.000000,140551000.000000,0.000000,2972651000.000000,0.000000,54048000.000000,0.000000,63273000.000000,0.000000,21000.000000,0.000000,140551000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43138,198.199.96.210,138.68.177.159,TCP,43138,8080(http-alt),4302005000.000000,83.000000,0.000000,83.000000,15997.000000,192.734940,160.001889,66.000000,401.000000,0.000000,15997.000000,192.734940,192.734940,0.000000,160.001889,0.000000,66.000000,0.000000,401.000000,52463000.000000,63605000.000000,6000.000000,146644000.000000,0.000000,4302005000.000000,0.000000,52463000.000000,0.000000,63605000.000000,0.000000,6000.000000,0.000000,146644000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37120,198.199.96.210,138.68.177.159,TCP,37120,8080(http-alt),1608796000.000000,48.000000,0.000000,48.000000,6785.000000,141.354167,137.817435,66.000000,399.000000,0.000000,6785.000000,141.354167,141.354167,0.000000,137.817435,0.000000,66.000000,0.000000,399.000000,34229000.000000,55244000.000000,4000.000000,135327000.000000,0.000000,1608796000.000000,0.000000,34229000.000000,0.000000,55244000.000000,0.000000,4000.000000,0.000000,135327000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--36876--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),36876,531092000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6476000.000000,28530000.000000,3000.000000,135183000.000000,0.000000,531092000.000000,0.000000,6476000.000000,0.000000,28530000.000000,0.000000,3000.000000,0.000000,135183000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38292,198.199.96.210,138.68.177.159,TCP,38292,8080(http-alt),3040352000.000000,83.000000,0.000000,83.000000,12336.000000,148.626506,141.763481,66.000000,403.000000,0.000000,12336.000000,148.626506,148.626506,0.000000,141.763481,0.000000,66.000000,0.000000,403.000000,37077000.000000,57453000.000000,3000.000000,136062000.000000,0.000000,3040352000.000000,0.000000,37077000.000000,0.000000,57453000.000000,0.000000,3000.000000,0.000000,136062000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38328,198.199.96.210,138.68.177.159,TCP,38328,8080(http-alt),3008922000.000000,83.000000,0.000000,83.000000,11698.000000,140.939759,137.318322,66.000000,402.000000,0.000000,11698.000000,140.939759,140.939759,0.000000,137.318322,0.000000,66.000000,0.000000,402.000000,36694000.000000,57843000.000000,2000.000000,159343000.000000,0.000000,3008922000.000000,0.000000,36694000.000000,0.000000,57843000.000000,0.000000,2000.000000,0.000000,159343000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50068--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50068,546929000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6669000.000000,29416000.000000,1000.000000,144726000.000000,0.000000,546929000.000000,0.000000,6669000.000000,0.000000,29416000.000000,0.000000,1000.000000,0.000000,144726000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37120--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37120,807226000.000000,83.000000,0.000000,83.000000,195190.000000,2351.686747,1075.572920,66.000000,2962.000000,0.000000,195190.000000,2351.686747,2351.686747,0.000000,1075.572920,0.000000,66.000000,0.000000,2962.000000,9844000.000000,32261000.000000,2000.000000,136713000.000000,0.000000,807226000.000000,0.000000,9844000.000000,0.000000,32261000.000000,0.000000,2000.000000,0.000000,136713000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--5287--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),5287,543559000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6628000.000000,29223000.000000,1000.000000,136043000.000000,0.000000,543559000.000000,0.000000,6628000.000000,0.000000,29223000.000000,0.000000,1000.000000,0.000000,136043000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38776--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38776,6445450000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131539000.000000,3267000.000000,129741000.000000,148622000.000000,0.000000,6445450000.000000,0.000000,131539000.000000,0.000000,3267000.000000,0.000000,129741000.000000,0.000000,148622000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50020,198.199.96.210,138.68.177.159,TCP,50020,8080(http-alt),4288024000.000000,81.000000,0.000000,81.000000,15816.000000,195.259259,159.954838,66.000000,398.000000,0.000000,15816.000000,195.259259,195.259259,0.000000,159.954838,0.000000,66.000000,0.000000,398.000000,53600000.000000,63137000.000000,8000.000000,134416000.000000,0.000000,4288024000.000000,0.000000,53600000.000000,0.000000,63137000.000000,0.000000,8000.000000,0.000000,134416000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55602--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55602,656270000.000000,83.000000,0.000000,83.000000,206262.000000,2485.084337,986.503882,66.000000,2962.000000,0.000000,206262.000000,2485.084337,2485.084337,0.000000,986.503882,0.000000,66.000000,0.000000,2962.000000,8003000.000000,31349000.000000,4000.000000,134206000.000000,0.000000,656270000.000000,0.000000,8003000.000000,0.000000,31349000.000000,0.000000,4000.000000,0.000000,134206000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--36856--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),36856,528296000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6442000.000000,28385000.000000,4000.000000,132705000.000000,0.000000,528296000.000000,0.000000,6442000.000000,0.000000,28385000.000000,0.000000,4000.000000,0.000000,132705000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38728,198.199.96.210,138.68.177.159,TCP,38728,8080(http-alt),6439307000.000000,50.000000,0.000000,50.000000,17731.000000,354.620000,5.443859,346.000000,374.000000,0.000000,17731.000000,354.620000,354.620000,0.000000,5.443859,0.000000,346.000000,0.000000,374.000000,131414000.000000,2444000.000000,129566000.000000,143720000.000000,0.000000,6439307000.000000,0.000000,131414000.000000,0.000000,2444000.000000,0.000000,129566000.000000,0.000000,143720000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37114--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37114,839055000.000000,83.000000,0.000000,83.000000,195190.000000,2351.686747,1075.572920,66.000000,2962.000000,0.000000,195190.000000,2351.686747,2351.686747,0.000000,1075.572920,0.000000,66.000000,0.000000,2962.000000,10232000.000000,33034000.000000,1000.000000,142799000.000000,0.000000,839055000.000000,0.000000,10232000.000000,0.000000,33034000.000000,0.000000,1000.000000,0.000000,142799000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38776,198.199.96.210,138.68.177.159,TCP,38776,8080(http-alt),6445381000.000000,50.000000,0.000000,50.000000,17715.000000,354.300000,5.158488,347.000000,374.000000,0.000000,17715.000000,354.300000,354.300000,0.000000,5.158488,0.000000,347.000000,0.000000,374.000000,131538000.000000,3253000.000000,129743000.000000,148548000.000000,0.000000,6445381000.000000,0.000000,131538000.000000,0.000000,3253000.000000,0.000000,129743000.000000,0.000000,148548000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55058,198.199.96.210,138.68.177.159,TCP,55058,8080(http-alt),4025922000.000000,83.000000,0.000000,83.000000,15615.000000,188.132530,158.194845,66.000000,408.000000,0.000000,15615.000000,188.132530,188.132530,0.000000,158.194845,0.000000,66.000000,0.000000,408.000000,49096000.000000,62355000.000000,3000.000000,138078000.000000,0.000000,4025922000.000000,0.000000,49096000.000000,0.000000,62355000.000000,0.000000,3000.000000,0.000000,138078000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58892,198.199.96.210,138.68.177.159,TCP,58892,8080(http-alt),2680742000.000000,83.000000,0.000000,83.000000,11028.000000,132.867470,131.520008,66.000000,395.000000,0.000000,11028.000000,132.867470,132.867470,0.000000,131.520008,0.000000,66.000000,0.000000,395.000000,32691000.000000,54701000.000000,3000.000000,136641000.000000,0.000000,2680742000.000000,0.000000,32691000.000000,0.000000,54701000.000000,0.000000,3000.000000,0.000000,136641000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43096--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43096,527101000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6428000.000000,28338000.000000,4000.000000,132354000.000000,0.000000,527101000.000000,0.000000,6428000.000000,0.000000,28338000.000000,0.000000,4000.000000,0.000000,132354000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55358--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55358,269545000.000000,83.000000,0.000000,83.000000,194054.000000,2338.000000,1107.520839,322.000000,2962.000000,0.000000,194054.000000,2338.000000,2338.000000,0.000000,1107.520839,0.000000,322.000000,0.000000,2962.000000,3287000.000000,20695000.000000,2000.000000,134564000.000000,0.000000,269545000.000000,0.000000,3287000.000000,0.000000,20695000.000000,0.000000,2000.000000,0.000000,134564000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38324--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38324,930064000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11342000.000000,34704000.000000,0.000000,141096000.000000,0.000000,930064000.000000,0.000000,11342000.000000,0.000000,34704000.000000,0.000000,0.000000,0.000000,141096000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37022--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37022,525248000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6405000.000000,28232000.000000,4000.000000,131292000.000000,0.000000,525248000.000000,0.000000,6405000.000000,0.000000,28232000.000000,0.000000,4000.000000,0.000000,131292000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58904--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58904,919783000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11216000.000000,34090000.000000,2000.000000,133943000.000000,0.000000,919783000.000000,0.000000,11216000.000000,0.000000,34090000.000000,0.000000,2000.000000,0.000000,133943000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40212--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40212,537718000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6557000.000000,28854000.000000,2000.000000,134257000.000000,0.000000,537718000.000000,0.000000,6557000.000000,0.000000,28854000.000000,0.000000,2000.000000,0.000000,134257000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38794--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38794,6436421000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131355000.000000,2618000.000000,129558000.000000,145108000.000000,0.000000,6436421000.000000,0.000000,131355000.000000,0.000000,2618000.000000,0.000000,129558000.000000,0.000000,145108000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--36860--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),36860,530858000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6473000.000000,28544000.000000,1000.000000,133138000.000000,0.000000,530858000.000000,0.000000,6473000.000000,0.000000,28544000.000000,0.000000,1000.000000,0.000000,133138000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50270,198.199.96.210,138.68.177.159,TCP,50270,8080(http-alt),2143438000.000000,55.000000,0.000000,55.000000,8191.000000,148.927273,141.590299,66.000000,396.000000,0.000000,8191.000000,148.927273,148.927273,0.000000,141.590299,0.000000,66.000000,0.000000,396.000000,39693000.000000,58964000.000000,6000.000000,142127000.000000,0.000000,2143438000.000000,0.000000,39693000.000000,0.000000,58964000.000000,0.000000,6000.000000,0.000000,142127000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50270--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50270,938264000.000000,83.000000,0.000000,83.000000,193074.000000,2326.192771,1125.857408,66.000000,2962.000000,0.000000,193074.000000,2326.192771,2326.192771,0.000000,1125.857408,0.000000,66.000000,0.000000,2962.000000,11442000.000000,34995000.000000,2000.000000,141639000.000000,0.000000,938264000.000000,0.000000,11442000.000000,0.000000,34995000.000000,0.000000,2000.000000,0.000000,141639000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38778--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38778,6440845000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131445000.000000,3196000.000000,129664000.000000,145187000.000000,0.000000,6440845000.000000,0.000000,131445000.000000,0.000000,3196000.000000,0.000000,129664000.000000,0.000000,145187000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40264--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40264,528467000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6444000.000000,28404000.000000,4000.000000,132761000.000000,0.000000,528467000.000000,0.000000,6444000.000000,0.000000,28404000.000000,0.000000,4000.000000,0.000000,132761000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58918--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58918,938974000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11450000.000000,34975000.000000,1000.000000,150932000.000000,0.000000,938974000.000000,0.000000,11450000.000000,0.000000,34975000.000000,0.000000,1000.000000,0.000000,150932000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43110,198.199.96.210,138.68.177.159,TCP,43110,8080(http-alt),4274460000.000000,83.000000,0.000000,83.000000,15964.000000,192.337349,159.502032,66.000000,400.000000,0.000000,15964.000000,192.337349,192.337349,0.000000,159.502032,0.000000,66.000000,0.000000,400.000000,52127000.000000,63013000.000000,10000.000000,138013000.000000,0.000000,4274460000.000000,0.000000,52127000.000000,0.000000,63013000.000000,0.000000,10000.000000,0.000000,138013000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50052--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50052,538046000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6561000.000000,28898000.000000,3000.000000,135709000.000000,0.000000,538046000.000000,0.000000,6561000.000000,0.000000,28898000.000000,0.000000,3000.000000,0.000000,135709000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55346--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55346,286296000.000000,74.000000,0.000000,74.000000,166791.000000,2253.932432,1164.480818,66.000000,2962.000000,0.000000,166791.000000,2253.932432,2253.932432,0.000000,1164.480818,0.000000,66.000000,0.000000,2962.000000,3921000.000000,23275000.000000,1000.000000,142843000.000000,0.000000,286296000.000000,0.000000,3921000.000000,0.000000,23275000.000000,0.000000,1000.000000,0.000000,142843000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58640,198.199.96.210,138.68.177.159,TCP,58640,8080(http-alt),2705656000.000000,62.000000,0.000000,62.000000,10634.000000,171.516129,152.915509,66.000000,399.000000,0.000000,10634.000000,171.516129,171.516129,0.000000,152.915509,0.000000,66.000000,0.000000,399.000000,44355000.000000,60792000.000000,45000.000000,137529000.000000,0.000000,2705656000.000000,0.000000,44355000.000000,0.000000,60792000.000000,0.000000,45000.000000,0.000000,137529000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40188--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40188,536287000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6540000.000000,28829000.000000,1000.000000,135873000.000000,0.000000,536287000.000000,0.000000,6540000.000000,0.000000,28829000.000000,0.000000,1000.000000,0.000000,135873000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55618,198.199.96.210,138.68.177.159,TCP,55618,8080(http-alt),2975598000.000000,83.000000,0.000000,83.000000,11369.000000,136.975904,134.649923,66.000000,400.000000,0.000000,11369.000000,136.975904,136.975904,0.000000,134.649923,0.000000,66.000000,0.000000,400.000000,36287000.000000,56424000.000000,3000.000000,133518000.000000,0.000000,2975598000.000000,0.000000,36287000.000000,0.000000,56424000.000000,0.000000,3000.000000,0.000000,133518000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58936,198.199.96.210,138.68.177.159,TCP,58936,8080(http-alt),923966000.000000,29.000000,0.000000,29.000000,3555.000000,122.586207,123.261292,66.000000,398.000000,0.000000,3555.000000,122.586207,122.586207,0.000000,123.261292,0.000000,66.000000,0.000000,398.000000,32998000.000000,53028000.000000,2000.000000,133357000.000000,0.000000,923966000.000000,0.000000,32998000.000000,0.000000,53028000.000000,0.000000,2000.000000,0.000000,133357000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--36866,198.199.96.210,138.68.177.159,TCP,36866,8080(http-alt),4017939000.000000,83.000000,0.000000,83.000000,15600.000000,187.951807,157.958123,66.000000,401.000000,0.000000,15600.000000,187.951807,187.951807,0.000000,157.958123,0.000000,66.000000,0.000000,401.000000,48999000.000000,62322000.000000,6000.000000,135566000.000000,0.000000,4017939000.000000,0.000000,48999000.000000,0.000000,62322000.000000,0.000000,6000.000000,0.000000,135566000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40240,198.199.96.210,138.68.177.159,TCP,40240,8080(http-alt),3474441000.000000,83.000000,0.000000,83.000000,14348.000000,172.867470,153.933155,66.000000,412.000000,0.000000,14348.000000,172.867470,172.867470,0.000000,153.933155,0.000000,66.000000,0.000000,412.000000,42371000.000000,60389000.000000,6000.000000,137360000.000000,0.000000,3474441000.000000,0.000000,42371000.000000,0.000000,60389000.000000,0.000000,6000.000000,0.000000,137360000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37118--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37118,808870000.000000,83.000000,0.000000,83.000000,195190.000000,2351.686747,1075.572920,66.000000,2962.000000,0.000000,195190.000000,2351.686747,2351.686747,0.000000,1075.572920,0.000000,66.000000,0.000000,2962.000000,9864000.000000,32283000.000000,1000.000000,137875000.000000,0.000000,808870000.000000,0.000000,9864000.000000,0.000000,32283000.000000,0.000000,1000.000000,0.000000,137875000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43076--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43076,529032000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6451000.000000,28414000.000000,5000.000000,132625000.000000,0.000000,529032000.000000,0.000000,6451000.000000,0.000000,28414000.000000,0.000000,5000.000000,0.000000,132625000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38794,198.199.96.210,138.68.177.159,TCP,38794,8080(http-alt),6436448000.000000,50.000000,0.000000,50.000000,17691.000000,353.820000,3.247707,348.000000,367.000000,0.000000,17691.000000,353.820000,353.820000,0.000000,3.247707,0.000000,348.000000,0.000000,367.000000,131356000.000000,2618000.000000,129546000.000000,145113000.000000,0.000000,6436448000.000000,0.000000,131356000.000000,0.000000,2618000.000000,0.000000,129546000.000000,0.000000,145113000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58896--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58896,926789000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11302000.000000,34573000.000000,1000.000000,136364000.000000,0.000000,926789000.000000,0.000000,11302000.000000,0.000000,34573000.000000,0.000000,1000.000000,0.000000,136364000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43126--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43126,536903000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6547000.000000,28840000.000000,4000.000000,134846000.000000,0.000000,536903000.000000,0.000000,6547000.000000,0.000000,28840000.000000,0.000000,4000.000000,0.000000,134846000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43076,198.199.96.210,138.68.177.159,TCP,43076,8080(http-alt),4416027000.000000,83.000000,0.000000,83.000000,16297.000000,196.349398,160.458637,66.000000,399.000000,0.000000,16297.000000,196.349398,196.349398,0.000000,160.458637,0.000000,66.000000,0.000000,399.000000,53853000.000000,63447000.000000,5000.000000,141052000.000000,0.000000,4416027000.000000,0.000000,53853000.000000,0.000000,63447000.000000,0.000000,5000.000000,0.000000,141052000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43138--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43138,526045000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6415000.000000,28278000.000000,4000.000000,131539000.000000,0.000000,526045000.000000,0.000000,6415000.000000,0.000000,28278000.000000,0.000000,4000.000000,0.000000,131539000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37104,198.199.96.210,138.68.177.159,TCP,37104,8080(http-alt),2622058000.000000,59.000000,0.000000,59.000000,9830.000000,166.610169,151.564946,66.000000,402.000000,0.000000,9830.000000,166.610169,166.610169,0.000000,151.564946,0.000000,66.000000,0.000000,402.000000,45207000.000000,61053000.000000,3000.000000,142473000.000000,0.000000,2622058000.000000,0.000000,45207000.000000,0.000000,61053000.000000,0.000000,3000.000000,0.000000,142473000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58870--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58870,933733000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11386000.000000,34648000.000000,1000.000000,140414000.000000,0.000000,933733000.000000,0.000000,11386000.000000,0.000000,34648000.000000,0.000000,1000.000000,0.000000,140414000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55352--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55352,264862000.000000,83.000000,0.000000,83.000000,194054.000000,2338.000000,1107.520839,322.000000,2962.000000,0.000000,194054.000000,2338.000000,2338.000000,0.000000,1107.520839,0.000000,322.000000,0.000000,2962.000000,3230000.000000,20368000.000000,5000.000000,132078000.000000,0.000000,264862000.000000,0.000000,3230000.000000,0.000000,20368000.000000,0.000000,5000.000000,0.000000,132078000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58632--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58632,543801000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6631000.000000,29224000.000000,1000.000000,137565000.000000,0.000000,543801000.000000,0.000000,6631000.000000,0.000000,29224000.000000,0.000000,1000.000000,0.000000,137565000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43092--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43092,531789000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6485000.000000,28586000.000000,3000.000000,133551000.000000,0.000000,531789000.000000,0.000000,6485000.000000,0.000000,28586000.000000,0.000000,3000.000000,0.000000,133551000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40180--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40180,538615000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6568000.000000,28933000.000000,1000.000000,134912000.000000,0.000000,538615000.000000,0.000000,6568000.000000,0.000000,28933000.000000,0.000000,1000.000000,0.000000,134912000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37118,198.199.96.210,138.68.177.159,TCP,37118,8080(http-alt),1611439000.000000,48.000000,0.000000,48.000000,6773.000000,141.104167,137.361937,66.000000,399.000000,0.000000,6773.000000,141.104167,141.104167,0.000000,137.361937,0.000000,66.000000,0.000000,399.000000,34285000.000000,55246000.000000,2000.000000,135242000.000000,0.000000,1611439000.000000,0.000000,34285000.000000,0.000000,55246000.000000,0.000000,2000.000000,0.000000,135242000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38076,198.199.96.210,138.68.177.159,TCP,38076,8080(http-alt),2811729000.000000,57.000000,0.000000,57.000000,10613.000000,186.192982,157.380134,66.000000,402.000000,0.000000,10613.000000,186.192982,186.192982,0.000000,157.380134,0.000000,66.000000,0.000000,402.000000,50209000.000000,62369000.000000,7000.000000,134058000.000000,0.000000,2811729000.000000,0.000000,50209000.000000,0.000000,62369000.000000,0.000000,7000.000000,0.000000,134058000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38724,198.199.96.210,138.68.177.159,TCP,38724,8080(http-alt),6448028000.000000,50.000000,0.000000,50.000000,17792.000000,355.840000,5.930801,349.000000,373.000000,0.000000,17792.000000,355.840000,355.840000,0.000000,5.930801,0.000000,349.000000,0.000000,373.000000,131592000.000000,3339000.000000,129722000.000000,148580000.000000,0.000000,6448028000.000000,0.000000,131592000.000000,0.000000,3339000.000000,0.000000,129722000.000000,0.000000,148580000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38796,198.199.96.210,138.68.177.159,TCP,38796,8080(http-alt),6437885000.000000,51.000000,0.000000,51.000000,17873.000000,350.450980,40.760089,66.000000,373.000000,0.000000,17873.000000,350.450980,350.450980,0.000000,40.760089,0.000000,66.000000,0.000000,373.000000,128757000.000000,3684000.000000,50000.000000,144971000.000000,0.000000,6437885000.000000,0.000000,128757000.000000,0.000000,3684000.000000,0.000000,50000.000000,0.000000,144971000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50058,198.199.96.210,138.68.177.159,TCP,50058,8080(http-alt),4027945000.000000,83.000000,0.000000,83.000000,15594.000000,187.879518,157.858362,66.000000,396.000000,0.000000,15594.000000,187.879518,187.879518,0.000000,157.858362,0.000000,66.000000,0.000000,396.000000,49121000.000000,62598000.000000,3000.000000,138003000.000000,0.000000,4027945000.000000,0.000000,49121000.000000,0.000000,62598000.000000,0.000000,3000.000000,0.000000,138003000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43052,198.199.96.210,138.68.177.159,TCP,43052,8080(http-alt),4000049000.000000,83.000000,0.000000,83.000000,15308.000000,184.433735,157.426456,66.000000,400.000000,0.000000,15308.000000,184.433735,184.433735,0.000000,157.426456,0.000000,66.000000,0.000000,400.000000,48781000.000000,62447000.000000,3000.000000,136347000.000000,0.000000,4000049000.000000,0.000000,48781000.000000,0.000000,62447000.000000,0.000000,3000.000000,0.000000,136347000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40212,198.199.96.210,138.68.177.159,TCP,40212,8080(http-alt),3250147000.000000,63.000000,0.000000,63.000000,12015.000000,190.714286,159.009177,66.000000,413.000000,0.000000,12015.000000,190.714286,190.714286,0.000000,159.009177,0.000000,66.000000,0.000000,413.000000,52421000.000000,63146000.000000,12000.000000,137885000.000000,0.000000,3250147000.000000,0.000000,52421000.000000,0.000000,63146000.000000,0.000000,12000.000000,0.000000,137885000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55106,198.199.96.210,138.68.177.159,TCP,55106,8080(http-alt),4012025000.000000,83.000000,0.000000,83.000000,15267.000000,183.939759,156.776977,66.000000,408.000000,0.000000,15267.000000,183.939759,183.939759,0.000000,156.776977,0.000000,66.000000,0.000000,408.000000,48927000.000000,62236000.000000,9000.000000,134134000.000000,0.000000,4012025000.000000,0.000000,48927000.000000,0.000000,62236000.000000,0.000000,9000.000000,0.000000,134134000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58640--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58640,544501000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6640000.000000,29267000.000000,1000.000000,137712000.000000,0.000000,544501000.000000,0.000000,6640000.000000,0.000000,29267000.000000,0.000000,1000.000000,0.000000,137712000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37106,198.199.96.210,138.68.177.159,TCP,37106,8080(http-alt),2487013000.000000,56.000000,0.000000,56.000000,9294.000000,165.964286,151.115845,66.000000,402.000000,0.000000,9294.000000,165.964286,165.964286,0.000000,151.115845,0.000000,66.000000,0.000000,402.000000,45218000.000000,60991000.000000,15000.000000,142542000.000000,0.000000,2487013000.000000,0.000000,45218000.000000,0.000000,60991000.000000,0.000000,15000.000000,0.000000,142542000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38770,198.199.96.210,138.68.177.159,TCP,38770,8080(http-alt),6439259000.000000,50.000000,0.000000,50.000000,17794.000000,355.880000,6.417601,347.000000,373.000000,0.000000,17794.000000,355.880000,355.880000,0.000000,6.417601,0.000000,347.000000,0.000000,373.000000,131413000.000000,2439000.000000,129605000.000000,143576000.000000,0.000000,6439259000.000000,0.000000,131413000.000000,0.000000,2439000.000000,0.000000,129605000.000000,0.000000,143576000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38212--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38212,535150000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6526000.000000,28756000.000000,2000.000000,135005000.000000,0.000000,535150000.000000,0.000000,6526000.000000,0.000000,28756000.000000,0.000000,2000.000000,0.000000,135005000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43096,198.199.96.210,138.68.177.159,TCP,43096,8080(http-alt),4260231000.000000,83.000000,0.000000,83.000000,15961.000000,192.301205,159.456814,66.000000,398.000000,0.000000,15961.000000,192.301205,192.301205,0.000000,159.456814,0.000000,66.000000,0.000000,398.000000,51954000.000000,63383000.000000,6000.000000,140440000.000000,0.000000,4260231000.000000,0.000000,51954000.000000,0.000000,63383000.000000,0.000000,6000.000000,0.000000,140440000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55548--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55548,269744000.000000,83.000000,0.000000,83.000000,194054.000000,2338.000000,1107.520839,322.000000,2962.000000,0.000000,194054.000000,2338.000000,2338.000000,0.000000,1107.520839,0.000000,322.000000,0.000000,2962.000000,3289000.000000,20739000.000000,1000.000000,135206000.000000,0.000000,269744000.000000,0.000000,3289000.000000,0.000000,20739000.000000,0.000000,1000.000000,0.000000,135206000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38798--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38798,6425654000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131135000.000000,2095000.000000,129629000.000000,140920000.000000,0.000000,6425654000.000000,0.000000,131135000.000000,0.000000,2095000.000000,0.000000,129629000.000000,0.000000,140920000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40430,198.199.96.210,138.68.177.159,TCP,40430,8080(http-alt),3364002000.000000,83.000000,0.000000,83.000000,12365.000000,148.975904,142.373171,66.000000,408.000000,0.000000,12365.000000,148.975904,148.975904,0.000000,142.373171,0.000000,66.000000,0.000000,408.000000,41024000.000000,58939000.000000,4000.000000,136551000.000000,0.000000,3364002000.000000,0.000000,41024000.000000,0.000000,58939000.000000,0.000000,4000.000000,0.000000,136551000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58884--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58884,919715000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11216000.000000,34093000.000000,3000.000000,133572000.000000,0.000000,919715000.000000,0.000000,11216000.000000,0.000000,34093000.000000,0.000000,3000.000000,0.000000,133572000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40460,198.199.96.210,138.68.177.159,TCP,40460,8080(http-alt),1788346000.000000,83.000000,0.000000,83.000000,7751.000000,93.385542,89.895901,66.000000,392.000000,0.000000,7751.000000,93.385542,93.385542,0.000000,89.895901,0.000000,66.000000,0.000000,392.000000,21809000.000000,43976000.000000,3000.000000,135574000.000000,0.000000,1788346000.000000,0.000000,21809000.000000,0.000000,43976000.000000,0.000000,3000.000000,0.000000,135574000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40254--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40254,533170000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6502000.000000,28635000.000000,5000.000000,135690000.000000,0.000000,533170000.000000,0.000000,6502000.000000,0.000000,28635000.000000,0.000000,5000.000000,0.000000,135690000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55366,198.199.96.210,138.68.177.159,TCP,55366,8080(http-alt),688781000.000000,15.000000,0.000000,15.000000,2623.000000,174.866667,153.961842,66.000000,394.000000,0.000000,2623.000000,174.866667,174.866667,0.000000,153.961842,0.000000,66.000000,0.000000,394.000000,49198000.000000,60816000.000000,214000.000000,135214000.000000,0.000000,688781000.000000,0.000000,49198000.000000,0.000000,60816000.000000,0.000000,214000.000000,0.000000,135214000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--5288,198.199.96.210,138.68.177.159,TCP,5288,8080(http-alt),3229286000.000000,83.000000,0.000000,83.000000,12329.000000,148.542169,141.616596,66.000000,396.000000,0.000000,12329.000000,148.542169,148.542169,0.000000,141.616596,0.000000,66.000000,0.000000,396.000000,39381000.000000,58501000.000000,3000.000000,141614000.000000,0.000000,3229286000.000000,0.000000,39381000.000000,0.000000,58501000.000000,0.000000,3000.000000,0.000000,141614000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50078,198.199.96.210,138.68.177.159,TCP,50078,8080(http-alt),3760443000.000000,83.000000,0.000000,83.000000,14636.000000,176.337349,154.645828,66.000000,398.000000,0.000000,14636.000000,176.337349,176.337349,0.000000,154.645828,0.000000,66.000000,0.000000,398.000000,45859000.000000,61746000.000000,4000.000000,139448000.000000,0.000000,3760443000.000000,0.000000,45859000.000000,0.000000,61746000.000000,0.000000,4000.000000,0.000000,139448000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37106--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37106,818652000.000000,83.000000,0.000000,83.000000,195190.000000,2351.686747,1075.572920,66.000000,2962.000000,0.000000,195190.000000,2351.686747,2351.686747,0.000000,1075.572920,0.000000,66.000000,0.000000,2962.000000,9983000.000000,32891000.000000,2000.000000,150251000.000000,0.000000,818652000.000000,0.000000,9983000.000000,0.000000,32891000.000000,0.000000,2000.000000,0.000000,150251000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58658,198.199.96.210,138.68.177.159,TCP,58658,8080(http-alt),3742305000.000000,68.000000,0.000000,68.000000,13645.000000,200.661765,160.961688,66.000000,400.000000,0.000000,13645.000000,200.661765,200.661765,0.000000,160.961688,0.000000,66.000000,0.000000,400.000000,55855000.000000,63861000.000000,3000.000000,142695000.000000,0.000000,3742305000.000000,0.000000,55855000.000000,0.000000,63861000.000000,0.000000,3000.000000,0.000000,142695000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40386,198.199.96.210,138.68.177.159,TCP,40386,8080(http-alt),3711707000.000000,83.000000,0.000000,83.000000,14648.000000,176.481928,154.860323,66.000000,408.000000,0.000000,14648.000000,176.481928,176.481928,0.000000,154.860323,0.000000,66.000000,0.000000,408.000000,45264000.000000,61409000.000000,3000.000000,133561000.000000,0.000000,3711707000.000000,0.000000,45264000.000000,0.000000,61409000.000000,0.000000,3000.000000,0.000000,133561000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40384--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40384,531002000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6475000.000000,28533000.000000,1000.000000,133605000.000000,0.000000,531002000.000000,0.000000,6475000.000000,0.000000,28533000.000000,0.000000,1000.000000,0.000000,133605000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55366--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55366,270819000.000000,83.000000,0.000000,83.000000,194054.000000,2338.000000,1107.520839,322.000000,2962.000000,0.000000,194054.000000,2338.000000,2338.000000,0.000000,1107.520839,0.000000,322.000000,0.000000,2962.000000,3302000.000000,20826000.000000,4000.000000,137603000.000000,0.000000,270819000.000000,0.000000,3302000.000000,0.000000,20826000.000000,0.000000,4000.000000,0.000000,137603000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40460--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40460,792851000.000000,83.000000,0.000000,83.000000,193661.000000,2333.265060,1112.593617,66.000000,2962.000000,0.000000,193661.000000,2333.265060,2333.265060,0.000000,1112.593617,0.000000,66.000000,0.000000,2962.000000,9668000.000000,31694000.000000,1000.000000,138981000.000000,0.000000,792851000.000000,0.000000,9668000.000000,0.000000,31694000.000000,0.000000,1000.000000,0.000000,138981000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50062--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50062,546257000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6661000.000000,29384000.000000,1000.000000,144600000.000000,0.000000,546257000.000000,0.000000,6661000.000000,0.000000,29384000.000000,0.000000,1000.000000,0.000000,144600000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55634--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55634,796608000.000000,83.000000,0.000000,83.000000,203062.000000,2446.530120,1026.690136,66.000000,2962.000000,0.000000,203062.000000,2446.530120,2446.530120,0.000000,1026.690136,0.000000,66.000000,0.000000,2962.000000,9714000.000000,31900000.000000,1000.000000,139857000.000000,0.000000,796608000.000000,0.000000,9714000.000000,0.000000,31900000.000000,0.000000,1000.000000,0.000000,139857000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50078--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50078,542580000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6616000.000000,29170000.000000,1000.000000,137729000.000000,0.000000,542580000.000000,0.000000,6616000.000000,0.000000,29170000.000000,0.000000,1000.000000,0.000000,137729000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58912--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58912,966805000.000000,83.000000,0.000000,83.000000,193074.000000,2326.192771,1125.857408,66.000000,2962.000000,0.000000,193074.000000,2326.192771,2326.192771,0.000000,1125.857408,0.000000,66.000000,0.000000,2962.000000,11790000.000000,36345000.000000,1000.000000,155463000.000000,0.000000,966805000.000000,0.000000,11790000.000000,0.000000,36345000.000000,0.000000,1000.000000,0.000000,155463000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55562--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55562,269613000.000000,83.000000,0.000000,83.000000,194054.000000,2338.000000,1107.520839,322.000000,2962.000000,0.000000,194054.000000,2338.000000,2338.000000,0.000000,1107.520839,0.000000,322.000000,0.000000,2962.000000,3287000.000000,20691000.000000,1000.000000,134653000.000000,0.000000,269613000.000000,0.000000,3287000.000000,0.000000,20691000.000000,0.000000,1000.000000,0.000000,134653000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--37022,198.199.96.210,138.68.177.159,TCP,37022,8080(http-alt),3599021000.000000,83.000000,0.000000,83.000000,14302.000000,172.313253,153.118344,66.000000,398.000000,0.000000,14302.000000,172.313253,172.313253,0.000000,153.118344,0.000000,66.000000,0.000000,398.000000,43890000.000000,61114000.000000,4000.000000,143803000.000000,0.000000,3599021000.000000,0.000000,43890000.000000,0.000000,61114000.000000,0.000000,4000.000000,0.000000,143803000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--37122--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),37122,807523000.000000,83.000000,0.000000,83.000000,192294.000000,2316.795181,1101.860286,66.000000,2962.000000,0.000000,192294.000000,2316.795181,2316.795181,0.000000,1101.860286,0.000000,66.000000,0.000000,2962.000000,9847000.000000,31838000.000000,5000.000000,143915000.000000,0.000000,807523000.000000,0.000000,9847000.000000,0.000000,31838000.000000,0.000000,5000.000000,0.000000,143915000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58702,198.199.96.210,138.68.177.159,TCP,58702,8080(http-alt),4475936000.000000,83.000000,0.000000,83.000000,16593.000000,199.915663,160.771948,66.000000,401.000000,0.000000,16593.000000,199.915663,199.915663,0.000000,160.771948,0.000000,66.000000,0.000000,401.000000,54584000.000000,63607000.000000,3000.000000,136819000.000000,0.000000,4475936000.000000,0.000000,54584000.000000,0.000000,63607000.000000,0.000000,3000.000000,0.000000,136819000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38796--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38796,6437923000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131386000.000000,2630000.000000,129617000.000000,145008000.000000,0.000000,6437923000.000000,0.000000,131386000.000000,0.000000,2630000.000000,0.000000,129617000.000000,0.000000,145008000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55064,198.199.96.210,138.68.177.159,TCP,55064,8080(http-alt),4164449000.000000,83.000000,0.000000,83.000000,15590.000000,187.831325,157.801295,66.000000,404.000000,0.000000,15590.000000,187.831325,187.831325,0.000000,157.801295,0.000000,66.000000,0.000000,404.000000,50785000.000000,62576000.000000,6000.000000,145912000.000000,0.000000,4164449000.000000,0.000000,50785000.000000,0.000000,62576000.000000,0.000000,6000.000000,0.000000,145912000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38292--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38292,914098000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11147000.000000,33973000.000000,5000.000000,131222000.000000,0.000000,914098000.000000,0.000000,11147000.000000,0.000000,33973000.000000,0.000000,5000.000000,0.000000,131222000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40240--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40240,535767000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6533000.000000,28792000.000000,1000.000000,135442000.000000,0.000000,535767000.000000,0.000000,6533000.000000,0.000000,28792000.000000,0.000000,1000.000000,0.000000,135442000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50072--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50072,539582000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6580000.000000,28984000.000000,2000.000000,135862000.000000,0.000000,539582000.000000,0.000000,6580000.000000,0.000000,28984000.000000,0.000000,2000.000000,0.000000,135862000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--55610,198.199.96.210,138.68.177.159,TCP,55610,8080(http-alt),2542058000.000000,83.000000,0.000000,83.000000,10715.000000,129.096386,128.881436,66.000000,399.000000,0.000000,10715.000000,129.096386,129.096386,0.000000,128.881436,0.000000,66.000000,0.000000,399.000000,31000000.000000,53577000.000000,3000.000000,134116000.000000,0.000000,2542058000.000000,0.000000,31000000.000000,0.000000,53577000.000000,0.000000,3000.000000,0.000000,134116000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38212,198.199.96.210,138.68.177.159,TCP,38212,8080(http-alt),4275752000.000000,83.000000,0.000000,83.000000,15931.000000,191.939759,158.999079,66.000000,402.000000,0.000000,15931.000000,191.939759,191.939759,0.000000,158.999079,0.000000,66.000000,0.000000,402.000000,52143000.000000,63287000.000000,3000.000000,146214000.000000,0.000000,4275752000.000000,0.000000,52143000.000000,0.000000,63287000.000000,0.000000,3000.000000,0.000000,146214000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38792--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38792,6439342000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131415000.000000,2480000.000000,129564000.000000,143476000.000000,0.000000,6439342000.000000,0.000000,131415000.000000,0.000000,2480000.000000,0.000000,129564000.000000,0.000000,143476000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--40432--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),40432,918737000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11204000.000000,34166000.000000,3000.000000,132174000.000000,0.000000,918737000.000000,0.000000,11204000.000000,0.000000,34166000.000000,0.000000,3000.000000,0.000000,132174000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55086--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55086,527272000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6430000.000000,28332000.000000,1000.000000,132541000.000000,0.000000,527272000.000000,0.000000,6430000.000000,0.000000,28332000.000000,0.000000,1000.000000,0.000000,132541000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58912,198.199.96.210,138.68.177.159,TCP,58912,8080(http-alt),2746661000.000000,78.000000,0.000000,78.000000,11019.000000,141.269231,137.184199,66.000000,395.000000,0.000000,11019.000000,141.269231,141.269231,0.000000,137.184199,0.000000,66.000000,0.000000,395.000000,35670000.000000,57743000.000000,3000.000000,157629000.000000,0.000000,2746661000.000000,0.000000,35670000.000000,0.000000,57743000.000000,0.000000,3000.000000,0.000000,157629000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38086,198.199.96.210,138.68.177.159,TCP,38086,8080(http-alt),3355923000.000000,83.000000,0.000000,83.000000,13630.000000,164.216867,149.603657,66.000000,396.000000,0.000000,13630.000000,164.216867,164.216867,0.000000,149.603657,0.000000,66.000000,0.000000,396.000000,40925000.000000,59615000.000000,3000.000000,139172000.000000,0.000000,3355923000.000000,0.000000,40925000.000000,0.000000,59615000.000000,0.000000,3000.000000,0.000000,139172000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38340--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38340,941578000.000000,83.000000,0.000000,83.000000,193386.000000,2329.951807,1118.803512,66.000000,2962.000000,0.000000,193386.000000,2329.951807,2329.951807,0.000000,1118.803512,0.000000,66.000000,0.000000,2962.000000,11482000.000000,35245000.000000,5000.000000,154941000.000000,0.000000,941578000.000000,0.000000,11482000.000000,0.000000,35245000.000000,0.000000,5000.000000,0.000000,154941000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43284--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43284,655247000.000000,59.000000,0.000000,59.000000,138077.000000,2340.288136,1109.939242,66.000000,2962.000000,0.000000,138077.000000,2340.288136,2340.288136,0.000000,1109.939242,0.000000,66.000000,0.000000,2962.000000,11297000.000000,33192000.000000,1000.000000,132163000.000000,0.000000,655247000.000000,0.000000,11297000.000000,0.000000,33192000.000000,0.000000,1000.000000,0.000000,132163000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--38728--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),38728,6439276000.000000,50.000000,0.000000,50.000000,8750.000000,175.000000,0.000000,175.000000,175.000000,0.000000,8750.000000,175.000000,175.000000,0.000000,0.000000,0.000000,175.000000,0.000000,175.000000,131413000.000000,2428000.000000,129587000.000000,143760000.000000,0.000000,6439276000.000000,0.000000,131413000.000000,0.000000,2428000.000000,0.000000,129587000.000000,0.000000,143760000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58884,198.199.96.210,138.68.177.159,TCP,58884,8080(http-alt),3369155000.000000,83.000000,0.000000,83.000000,12980.000000,156.385542,145.779982,66.000000,400.000000,0.000000,12980.000000,156.385542,156.385542,0.000000,145.779982,0.000000,66.000000,0.000000,400.000000,41087000.000000,59551000.000000,3000.000000,143756000.000000,0.000000,3369155000.000000,0.000000,41087000.000000,0.000000,59551000.000000,0.000000,3000.000000,0.000000,143756000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58702--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58702,546410000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6663000.000000,29358000.000000,2000.000000,138056000.000000,0.000000,546410000.000000,0.000000,6663000.000000,0.000000,29358000.000000,0.000000,2000.000000,0.000000,138056000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40182,198.199.96.210,138.68.177.159,TCP,40182,8080(http-alt),1219497000.000000,25.000000,0.000000,25.000000,4606.000000,184.240000,157.703083,66.000000,412.000000,0.000000,4606.000000,184.240000,184.240000,0.000000,157.703083,0.000000,66.000000,0.000000,412.000000,50812000.000000,62390000.000000,9000.000000,137791000.000000,0.000000,1219497000.000000,0.000000,50812000.000000,0.000000,62390000.000000,0.000000,9000.000000,0.000000,137791000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--58664--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),58664,535260000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6527000.000000,28760000.000000,2000.000000,135187000.000000,0.000000,535260000.000000,0.000000,6527000.000000,0.000000,28760000.000000,0.000000,2000.000000,0.000000,135187000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58896,198.199.96.210,138.68.177.159,TCP,58896,8080(http-alt),3119810000.000000,83.000000,0.000000,83.000000,12333.000000,148.590361,141.695587,66.000000,398.000000,0.000000,12333.000000,148.590361,148.590361,0.000000,141.695587,0.000000,66.000000,0.000000,398.000000,38046000.000000,58110000.000000,3000.000000,151433000.000000,0.000000,3119810000.000000,0.000000,38046000.000000,0.000000,58110000.000000,0.000000,3000.000000,0.000000,151433000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--36860,198.199.96.210,138.68.177.159,TCP,36860,8080(http-alt),4036150000.000000,74.000000,0.000000,74.000000,14695.000000,198.581081,160.574224,66.000000,402.000000,0.000000,14695.000000,198.581081,198.581081,0.000000,160.574224,0.000000,66.000000,0.000000,402.000000,55289000.000000,63603000.000000,9000.000000,134252000.000000,0.000000,4036150000.000000,0.000000,55289000.000000,0.000000,63603000.000000,0.000000,9000.000000,0.000000,134252000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--50066,198.199.96.210,138.68.177.159,TCP,50066,8080(http-alt),4029144000.000000,83.000000,0.000000,83.000000,15284.000000,184.144578,157.036879,66.000000,399.000000,0.000000,15284.000000,184.144578,184.144578,0.000000,157.036879,0.000000,66.000000,0.000000,399.000000,49135000.000000,62691000.000000,3000.000000,136337000.000000,0.000000,4029144000.000000,0.000000,49135000.000000,0.000000,62691000.000000,0.000000,3000.000000,0.000000,136337000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38060,198.199.96.210,138.68.177.159,TCP,38060,8080(http-alt),1456527000.000000,32.000000,0.000000,32.000000,5714.000000,178.562500,155.542787,66.000000,402.000000,0.000000,5714.000000,178.562500,178.562500,0.000000,155.542787,0.000000,66.000000,0.000000,402.000000,46984000.000000,61454000.000000,5000.000000,132993000.000000,0.000000,1456527000.000000,0.000000,46984000.000000,0.000000,61454000.000000,0.000000,5000.000000,0.000000,132993000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38188,198.199.96.210,138.68.177.159,TCP,38188,8080(http-alt),3862350000.000000,83.000000,0.000000,83.000000,14952.000000,180.144578,155.768915,66.000000,402.000000,0.000000,14952.000000,180.144578,180.144578,0.000000,155.768915,0.000000,66.000000,0.000000,402.000000,47101000.000000,62057000.000000,15000.000000,135968000.000000,0.000000,3862350000.000000,0.000000,47101000.000000,0.000000,62057000.000000,0.000000,15000.000000,0.000000,135968000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40238,198.199.96.210,138.68.177.159,TCP,40238,8080(http-alt),3893392000.000000,83.000000,0.000000,83.000000,15305.000000,184.397590,157.391840,66.000000,412.000000,0.000000,15305.000000,184.397590,184.397590,0.000000,157.391840,0.000000,66.000000,0.000000,412.000000,47480000.000000,62240000.000000,3000.000000,137037000.000000,0.000000,3893392000.000000,0.000000,47480000.000000,0.000000,62240000.000000,0.000000,3000.000000,0.000000,137037000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58632,198.199.96.210,138.68.177.159,TCP,58632,8080(http-alt),2032976000.000000,37.000000,0.000000,37.000000,7348.000000,198.594595,160.591383,66.000000,399.000000,0.000000,7348.000000,198.594595,198.594595,0.000000,160.591383,0.000000,66.000000,0.000000,399.000000,56471000.000000,63088000.000000,240000.000000,137078000.000000,0.000000,2032976000.000000,0.000000,56471000.000000,0.000000,63088000.000000,0.000000,240000.000000,0.000000,137078000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55066--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55066,534160000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6514000.000000,28704000.000000,2000.000000,134865000.000000,0.000000,534160000.000000,0.000000,6514000.000000,0.000000,28704000.000000,0.000000,2000.000000,0.000000,134865000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38798,198.199.96.210,138.68.177.159,TCP,38798,8080(http-alt),6426041000.000000,51.000000,0.000000,51.000000,17771.000000,348.450980,40.173796,66.000000,375.000000,0.000000,17771.000000,348.450980,348.450980,0.000000,40.173796,0.000000,66.000000,0.000000,375.000000,128520000.000000,3315000.000000,421000.000000,140887000.000000,0.000000,6426041000.000000,0.000000,128520000.000000,0.000000,3315000.000000,0.000000,421000.000000,0.000000,140887000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--43104,198.199.96.210,138.68.177.159,TCP,43104,8080(http-alt),4134422000.000000,83.000000,0.000000,83.000000,15674.000000,188.843373,159.107562,66.000000,400.000000,0.000000,15674.000000,188.843373,188.843373,0.000000,159.107562,0.000000,66.000000,0.000000,400.000000,50419000.000000,62851000.000000,4000.000000,134412000.000000,0.000000,4134422000.000000,0.000000,50419000.000000,0.000000,62851000.000000,0.000000,4000.000000,0.000000,134412000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40180,198.199.96.210,138.68.177.159,TCP,40180,8080(http-alt),1219827000.000000,27.000000,0.000000,27.000000,4729.000000,175.148148,154.409437,66.000000,412.000000,0.000000,4729.000000,175.148148,175.148148,0.000000,154.409437,0.000000,66.000000,0.000000,412.000000,46916000.000000,61132000.000000,16000.000000,137134000.000000,0.000000,1219827000.000000,0.000000,46916000.000000,0.000000,61132000.000000,0.000000,16000.000000,0.000000,137134000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38222,198.199.96.210,138.68.177.159,TCP,38222,8080(http-alt),3997970000.000000,83.000000,0.000000,83.000000,15267.000000,183.939759,156.766218,66.000000,398.000000,0.000000,15267.000000,183.939759,183.939759,0.000000,156.766218,0.000000,66.000000,0.000000,398.000000,48755000.000000,62258000.000000,3000.000000,133973000.000000,0.000000,3997970000.000000,0.000000,48755000.000000,0.000000,62258000.000000,0.000000,3000.000000,0.000000,133973000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58900,198.199.96.210,138.68.177.159,TCP,58900,8080(http-alt),2975000000.000000,83.000000,0.000000,83.000000,12006.000000,144.650602,139.369443,66.000000,393.000000,0.000000,12006.000000,144.650602,144.650602,0.000000,139.369443,0.000000,66.000000,0.000000,393.000000,36280000.000000,57464000.000000,3000.000000,153487000.000000,0.000000,2975000000.000000,0.000000,36280000.000000,0.000000,57464000.000000,0.000000,3000.000000,0.000000,153487000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--55104--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),55104,531050000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6476000.000000,28549000.000000,1000.000000,134622000.000000,0.000000,531050000.000000,0.000000,6476000.000000,0.000000,28549000.000000,0.000000,1000.000000,0.000000,134622000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--38184,198.199.96.210,138.68.177.159,TCP,38184,8080(http-alt),3594670000.000000,83.000000,0.000000,83.000000,14304.000000,172.337349,153.147875,66.000000,398.000000,0.000000,14304.000000,172.337349,172.337349,0.000000,153.147875,0.000000,66.000000,0.000000,398.000000,43837000.000000,60860000.000000,4000.000000,133975000.000000,0.000000,3594670000.000000,0.000000,43837000.000000,0.000000,60860000.000000,0.000000,4000.000000,0.000000,133975000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--50066--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),50066,539570000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6580000.000000,29007000.000000,1000.000000,136093000.000000,0.000000,539570000.000000,0.000000,6580000.000000,0.000000,29007000.000000,0.000000,1000.000000,0.000000,136093000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--58650,198.199.96.210,138.68.177.159,TCP,58650,8080(http-alt),3231285000.000000,70.000000,0.000000,70.000000,12471.000000,178.157143,155.284406,66.000000,400.000000,0.000000,12471.000000,178.157143,178.157143,0.000000,155.284406,0.000000,66.000000,0.000000,400.000000,46830000.000000,62045000.000000,3000.000000,143315000.000000,0.000000,3231285000.000000,0.000000,46830000.000000,0.000000,62045000.000000,0.000000,3000.000000,0.000000,143315000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--43088--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),43088,537931000.000000,83.000000,0.000000,83.000000,193066.000000,2326.096386,1129.907914,103.000000,2962.000000,0.000000,193066.000000,2326.096386,2326.096386,0.000000,1129.907914,0.000000,103.000000,0.000000,2962.000000,6560000.000000,28916000.000000,0.000000,135624000.000000,0.000000,537931000.000000,0.000000,6560000.000000,0.000000,28916000.000000,0.000000,0.000000,0.000000,135624000.000000
|
||||||
|
138.68.177.159--198.199.96.210--TCP--8080(http-alt)--40188,198.199.96.210,138.68.177.159,TCP,40188,8080(http-alt),1735327000.000000,36.000000,0.000000,36.000000,6627.000000,184.083333,157.089743,66.000000,408.000000,0.000000,6627.000000,184.083333,184.083333,0.000000,157.089743,0.000000,66.000000,0.000000,408.000000,49580000.000000,62205000.000000,32000.000000,134767000.000000,0.000000,1735327000.000000,0.000000,49580000.000000,0.000000,62205000.000000,0.000000,32000.000000,0.000000,134767000.000000
|
||||||
|
198.199.96.210--138.68.177.159--TCP--36874--8080(http-alt),138.68.177.159,198.199.96.210,TCP,8080(http-alt),36874,531286000.000000,83.000000,0.000000,83.000000,195182.000000,2351.590361,1078.558420,378.000000,2962.000000,0.000000,195182.000000,2351.590361,2351.590361,0.000000,1078.558420,0.000000,378.000000,0.000000,2962.000000,6479000.000000,28548000.000000,1000.000000,133118000.000000,0.000000,531286000.000000,0.000000,6479000.000000,0.000000,28548000.000000,0.000000,1000.000000,0.000000,133118000.000000
|
|
141
pkg/ml/mlCommon.go
Normal file
141
pkg/ml/mlCommon.go
Normal file
@@ -0,0 +1,141 @@
|
|||||||
|
package ml
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bufio"
|
||||||
|
"math"
|
||||||
|
"os"
|
||||||
|
"strconv"
|
||||||
|
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/constants"
|
||||||
|
"github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
// Get categorical class.
|
||||||
|
func GetCategory(num int) string {
|
||||||
|
if num == 0 {
|
||||||
|
return "Benign"
|
||||||
|
} else {
|
||||||
|
return "Malicious"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
//Activation function - two class classifier.
|
||||||
|
func BinaryClassifier(z float64) int {
|
||||||
|
if z >= 0.5 {
|
||||||
|
return 1
|
||||||
|
} else {
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
//Sigmoid function.
|
||||||
|
func Sigmoid(z float64) float64 {
|
||||||
|
return 1.0 / (1 + math.Exp(-1*z))
|
||||||
|
}
|
||||||
|
|
||||||
|
//Net input (z.)
|
||||||
|
func NetInput(w []float64, intercept float64, x []float64) float64 {
|
||||||
|
var z float64 = 0
|
||||||
|
|
||||||
|
for i := 0; i < len(x); i++ {
|
||||||
|
z += (w[i] * x[i])
|
||||||
|
}
|
||||||
|
|
||||||
|
return z + intercept
|
||||||
|
}
|
||||||
|
|
||||||
|
// Standard Scaler.
|
||||||
|
func StdScaler(x []float64, mu []float64, std []float64) []float64 {
|
||||||
|
scaledX := []float64{}
|
||||||
|
|
||||||
|
for i := 0; i < len(x); i++ {
|
||||||
|
scaledX = append(scaledX, (x[i]-mu[i])/std[i])
|
||||||
|
}
|
||||||
|
|
||||||
|
return scaledX
|
||||||
|
}
|
||||||
|
|
||||||
|
// Offline values of means , standard deviation from standard scaling and weights.
|
||||||
|
func ModelParameters() ([]float64, float64, []float64, []float64) {
|
||||||
|
// Weights from logistic regression
|
||||||
|
f, errWt := os.Open(constants.WeightsFile)
|
||||||
|
|
||||||
|
if errWt != nil {
|
||||||
|
logrus.Info(errWt)
|
||||||
|
}
|
||||||
|
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
scannerWt := bufio.NewScanner(f)
|
||||||
|
scannerWt.Split(bufio.ScanWords)
|
||||||
|
|
||||||
|
weights := []float64{}
|
||||||
|
|
||||||
|
for scannerWt.Scan() {
|
||||||
|
if s, errWt := strconv.ParseFloat(scannerWt.Text(), 32); errWt == nil {
|
||||||
|
weights = append(weights, s)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Intercept from logistic regression
|
||||||
|
f, errIntercept := os.Open(constants.InterceptFile)
|
||||||
|
|
||||||
|
if errIntercept != nil {
|
||||||
|
logrus.Info(errIntercept)
|
||||||
|
}
|
||||||
|
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
scannerIntercept := bufio.NewScanner(f)
|
||||||
|
scannerIntercept.Split(bufio.ScanWords)
|
||||||
|
|
||||||
|
intercept := []float64{}
|
||||||
|
|
||||||
|
for scannerIntercept.Scan() {
|
||||||
|
if s, errIntercept := strconv.ParseFloat(scannerIntercept.Text(), 32); errIntercept == nil {
|
||||||
|
intercept = append(intercept, s)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Means from standard scaling
|
||||||
|
f, errMean := os.Open(constants.MeansFile)
|
||||||
|
|
||||||
|
if errMean != nil {
|
||||||
|
logrus.Info(errMean)
|
||||||
|
}
|
||||||
|
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
scannerMean := bufio.NewScanner(f)
|
||||||
|
scannerMean.Split(bufio.ScanWords)
|
||||||
|
|
||||||
|
meanArrOffline := []float64{}
|
||||||
|
|
||||||
|
for scannerMean.Scan() {
|
||||||
|
if s, errMean := strconv.ParseFloat(scannerMean.Text(), 32); errMean == nil {
|
||||||
|
meanArrOffline = append(meanArrOffline, s)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Standard deviation from standard scaling
|
||||||
|
f, errStd := os.Open(constants.StdFile)
|
||||||
|
|
||||||
|
if errStd != nil {
|
||||||
|
logrus.Info(errStd)
|
||||||
|
}
|
||||||
|
|
||||||
|
defer f.Close()
|
||||||
|
|
||||||
|
scannerStd := bufio.NewScanner(f)
|
||||||
|
scannerStd.Split(bufio.ScanWords)
|
||||||
|
|
||||||
|
stdArrOffline := []float64{}
|
||||||
|
|
||||||
|
for scannerStd.Scan() {
|
||||||
|
if s, errStd := strconv.ParseFloat(scannerStd.Text(), 32); errStd == nil {
|
||||||
|
stdArrOffline = append(stdArrOffline, s)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return weights, intercept[0], meanArrOffline, stdArrOffline
|
||||||
|
}
|
1
pkg/ml/parameters/intercept.txt
Normal file
1
pkg/ml/parameters/intercept.txt
Normal file
@@ -0,0 +1 @@
|
|||||||
|
-4.105410736377801406e-01
|
39
pkg/ml/parameters/mean.txt
Normal file
39
pkg/ml/parameters/mean.txt
Normal file
@@ -0,0 +1,39 @@
|
|||||||
|
5.891352011522364807e+10
|
||||||
|
3.726153011394465864e+01
|
||||||
|
0.000000000000000000e+00
|
||||||
|
3.726153011394465864e+01
|
||||||
|
2.038670882454495950e+04
|
||||||
|
4.409490738155675444e+02
|
||||||
|
3.199338647921866254e+02
|
||||||
|
6.385438760913530132e+01
|
||||||
|
1.030226656143639275e+03
|
||||||
|
0.000000000000000000e+00
|
||||||
|
2.038670882454495950e+04
|
||||||
|
4.409490738155675444e+02
|
||||||
|
4.409490738155675444e+02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
3.199338647921866254e+02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
6.385438760913530132e+01
|
||||||
|
0.000000000000000000e+00
|
||||||
|
1.030226656143639275e+03
|
||||||
|
2.339887548167513371e+09
|
||||||
|
4.286260684851773262e+09
|
||||||
|
1.917939510037981439e+06
|
||||||
|
1.653379251439204788e+10
|
||||||
|
0.000000000000000000e+00
|
||||||
|
5.891352011522364807e+10
|
||||||
|
0.000000000000000000e+00
|
||||||
|
2.339887548167513371e+09
|
||||||
|
0.000000000000000000e+00
|
||||||
|
4.286260684851773262e+09
|
||||||
|
0.000000000000000000e+00
|
||||||
|
1.917939510037981439e+06
|
||||||
|
0.000000000000000000e+00
|
||||||
|
1.653379251439204788e+10
|
||||||
|
1.439789701758388241e-08
|
||||||
|
0.000000000000000000e+00
|
||||||
|
1.439789701758388241e-08
|
||||||
|
1.207027350098949487e-05
|
||||||
|
0.000000000000000000e+00
|
||||||
|
1.207027350098949487e-05
|
39
pkg/ml/parameters/std.txt
Normal file
39
pkg/ml/parameters/std.txt
Normal file
@@ -0,0 +1,39 @@
|
|||||||
|
1.409130741507534180e+11
|
||||||
|
2.402971056741887068e+01
|
||||||
|
1.000000000000000000e+00
|
||||||
|
2.402971056741887068e+01
|
||||||
|
3.223064204240666368e+04
|
||||||
|
4.558940363790126185e+02
|
||||||
|
2.203706608003984400e+02
|
||||||
|
1.004395251900482933e+01
|
||||||
|
4.987337323089956840e+02
|
||||||
|
1.000000000000000000e+00
|
||||||
|
3.223064204240666368e+04
|
||||||
|
4.558940363790126185e+02
|
||||||
|
4.558940363790126185e+02
|
||||||
|
1.000000000000000000e+00
|
||||||
|
2.203706608003984400e+02
|
||||||
|
1.000000000000000000e+00
|
||||||
|
1.004395251900482933e+01
|
||||||
|
1.000000000000000000e+00
|
||||||
|
4.987337323089956840e+02
|
||||||
|
5.847715871538892746e+09
|
||||||
|
2.343678150974565506e+10
|
||||||
|
3.549062781620947272e+07
|
||||||
|
1.201408071143101349e+11
|
||||||
|
1.000000000000000000e+00
|
||||||
|
1.409130741507534180e+11
|
||||||
|
1.000000000000000000e+00
|
||||||
|
5.847715871538892746e+09
|
||||||
|
1.000000000000000000e+00
|
||||||
|
2.343678150974565506e+10
|
||||||
|
1.000000000000000000e+00
|
||||||
|
3.549062781620947272e+07
|
||||||
|
1.000000000000000000e+00
|
||||||
|
1.201408071143101349e+11
|
||||||
|
3.870531562879405407e-08
|
||||||
|
1.000000000000000000e+00
|
||||||
|
3.870531562879405407e-08
|
||||||
|
5.097837367619243180e-05
|
||||||
|
1.000000000000000000e+00
|
||||||
|
5.097837367619243180e-05
|
39
pkg/ml/parameters/weights.txt
Normal file
39
pkg/ml/parameters/weights.txt
Normal file
@@ -0,0 +1,39 @@
|
|||||||
|
-6.573786156016622750e-02
|
||||||
|
2.745589064262227708e-01
|
||||||
|
0.000000000000000000e+00
|
||||||
|
2.745589064262227708e-01
|
||||||
|
6.874503175474717953e-02
|
||||||
|
-1.652606032430505023e-02
|
||||||
|
-1.535479726532198996e-02
|
||||||
|
2.004116339866893470e-01
|
||||||
|
-1.342684741988264263e-01
|
||||||
|
0.000000000000000000e+00
|
||||||
|
6.874503175474629135e-02
|
||||||
|
-1.652606032430505023e-02
|
||||||
|
-1.652606032430505023e-02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
-1.535479726532308110e-02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
2.004116339866893470e-01
|
||||||
|
0.000000000000000000e+00
|
||||||
|
-1.342684741988264263e-01
|
||||||
|
-5.265543499435411390e-02
|
||||||
|
-1.211007354620357614e-02
|
||||||
|
-3.188784801386884867e-03
|
||||||
|
-5.601170831657927354e-03
|
||||||
|
0.000000000000000000e+00
|
||||||
|
-6.573786156016640791e-02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
-5.265543499435446778e-02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
-1.211007354620357614e-02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
-3.188784801386884867e-03
|
||||||
|
0.000000000000000000e+00
|
||||||
|
-5.601170831657927354e-03
|
||||||
|
8.543686142077633328e-02
|
||||||
|
0.000000000000000000e+00
|
||||||
|
8.543686142077633328e-02
|
||||||
|
1.452269787838654236e-01
|
||||||
|
0.000000000000000000e+00
|
||||||
|
1.452269787838654236e-01
|
130
pkg/packetAnalyzer/networkCommon.go
Normal file
130
pkg/packetAnalyzer/networkCommon.go
Normal file
@@ -0,0 +1,130 @@
|
|||||||
|
package packetAnalyzer
|
||||||
|
|
||||||
|
import (
|
||||||
|
"log"
|
||||||
|
"net"
|
||||||
|
"strconv"
|
||||||
|
"strings"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/google/gopacket"
|
||||||
|
"github.com/google/gopacket/layers"
|
||||||
|
"github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
// Function to get information from packet layers.
|
||||||
|
func PacketInfo(packet gopacket.Packet) (string, string, int, time.Time) {
|
||||||
|
var connection string = ""
|
||||||
|
packetData := strings.Split(packet.String(), "\n")[0]
|
||||||
|
|
||||||
|
layout := "2006-01-02 15:04:05 -0700 MST"
|
||||||
|
|
||||||
|
packetSize, _ := strconv.Atoi(strings.Split(strings.Split(strings.Split(packetData, ":")[1], ",")[0], " ")[1])
|
||||||
|
packetTime, _ := time.Parse(layout, strings.Split(packetData, "@")[1][1:])
|
||||||
|
|
||||||
|
// Let's see if the packet is an ethernet packet
|
||||||
|
// ethernetLayer := packet.Layer(layers.LayerTypeEthernet)
|
||||||
|
// if ethernetLayer != nil {
|
||||||
|
// logrus.Info("Ethernet layer detected.")
|
||||||
|
// ethernetPacket, _ := ethernetLayer.(*layers.Ethernet)
|
||||||
|
// logrus.Info("Source MAC: ", ethernetPacket.SrcMAC)
|
||||||
|
// logrus.Info("Destination MAC: ", ethernetPacket.DstMAC)
|
||||||
|
// // Ethernet type is typically IPv4 but could be ARP or other
|
||||||
|
// logrus.Info("Ethernet type: ", ethernetPacket.EthernetType)
|
||||||
|
// logrus.Info()
|
||||||
|
// }
|
||||||
|
|
||||||
|
// Let's see if the packet is IP (even though the ether type told us)
|
||||||
|
ipLayer := packet.Layer(layers.LayerTypeIPv4)
|
||||||
|
protocol := ""
|
||||||
|
if ipLayer != nil {
|
||||||
|
//logrus.Info("IPv4 layer detected.")
|
||||||
|
ip, _ := ipLayer.(*layers.IPv4)
|
||||||
|
|
||||||
|
// IP layer variables:
|
||||||
|
// Version (Either 4 or 6)
|
||||||
|
// IHL (IP Header Length in 32-bit words)
|
||||||
|
// TOS, Length, Id, Flags, FragOffset, TTL, Protocol (TCP?),
|
||||||
|
// Checksum, SrcIP, DstIP
|
||||||
|
connection += ip.SrcIP.String() + "--" + ip.DstIP.String() + "--" + ip.Protocol.String()
|
||||||
|
protocol = ip.Protocol.String()
|
||||||
|
}
|
||||||
|
|
||||||
|
// Let's see if the packet is TCP
|
||||||
|
tcpLayer := packet.Layer(layers.LayerTypeTCP)
|
||||||
|
if tcpLayer != nil {
|
||||||
|
//logrus.Info("TCP layer detected.")
|
||||||
|
tcp, _ := tcpLayer.(*layers.TCP)
|
||||||
|
connection += "--" + tcp.SrcPort.String() + "--" + tcp.DstPort.String()
|
||||||
|
|
||||||
|
// TCP layer variables:
|
||||||
|
// SrcPort, DstPort, Seq, Ack, DataOffset, Window, Checksum, Urgent
|
||||||
|
// Bool flags: FIN, SYN, RST, PSH, ACK, URG, ECE, CWR, NS
|
||||||
|
// logrus.Info("Sequence number: ", tcp.Seq)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Let's see if the packet is TCP
|
||||||
|
udpLayer := packet.Layer(layers.LayerTypeUDP)
|
||||||
|
if udpLayer != nil {
|
||||||
|
//logrus.Info("UDP layer detected.")
|
||||||
|
udp, _ := udpLayer.(*layers.UDP)
|
||||||
|
connection += "--" + udp.SrcPort.String() + "--" + udp.DstPort.String()
|
||||||
|
|
||||||
|
// UDP layer variables:
|
||||||
|
// SrcPort, DstPort, Length, Checksum
|
||||||
|
}
|
||||||
|
|
||||||
|
// // Iterate over all layers, printing out each layer type
|
||||||
|
// logrus.Info("All packet layers:")
|
||||||
|
// for _, layer := range packet.Layers() {
|
||||||
|
// logrus.Info("- ", layer.LayerType())
|
||||||
|
// }
|
||||||
|
|
||||||
|
// When iterating through packet.Layers() above,
|
||||||
|
// if it lists Payload layer then that is the same as
|
||||||
|
// this applicationLayer. applicationLayer contains the payload
|
||||||
|
|
||||||
|
applicationLayer := packet.ApplicationLayer()
|
||||||
|
|
||||||
|
if applicationLayer != nil {
|
||||||
|
// logrus.Info("Application layer/Payload found. ", applicationLayer.Payload())
|
||||||
|
// logrus.Info("%s\n", applicationLayer.Payload())
|
||||||
|
|
||||||
|
// // Search for a string inside the payload
|
||||||
|
// if strings.Contains(string(applicationLayer.Payload()), "HTTP") {
|
||||||
|
// logrus.Info("HTTP found!")
|
||||||
|
// }
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check for errors
|
||||||
|
if err := packet.ErrorLayer(); err != nil {
|
||||||
|
logrus.Info("Error decoding some part of the packet:", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Return if protocol=TCP/UDP and if packets have correct time stamps.
|
||||||
|
if (protocol == "TCP") || (protocol == "UDP") && (packetTime.String()[0:19] != "0001-01-01 00:00:00") {
|
||||||
|
return connection, Reverse5Tuple(connection), packetSize, packetTime
|
||||||
|
} else {
|
||||||
|
return connection, "nil", packetSize, packetTime
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// GetOutboundIP: Get preferred outbound ip of this machine.
|
||||||
|
func GetOutboundIP() net.IP {
|
||||||
|
conn, err := net.Dial("udp", "8.8.8.8:80")
|
||||||
|
if err != nil {
|
||||||
|
log.Fatal(err)
|
||||||
|
}
|
||||||
|
defer conn.Close()
|
||||||
|
|
||||||
|
localAddr := conn.LocalAddr().(*net.UDPAddr)
|
||||||
|
|
||||||
|
return localAddr.IP
|
||||||
|
}
|
||||||
|
|
||||||
|
// Reverse a 5 tuple.
|
||||||
|
func Reverse5Tuple(fTuple string) string {
|
||||||
|
srcIP, dstIP, protocol, srcPort, dstPort := strings.Split(fTuple, "--")[0], strings.Split(fTuple, "--")[1], strings.Split(fTuple, "--")[2], strings.Split(fTuple, "--")[3], strings.Split(fTuple, "--")[4]
|
||||||
|
|
||||||
|
return dstIP + "--" + srcIP + "--" + protocol + "--" + dstPort + "--" + srcPort
|
||||||
|
}
|
262
pkg/packetAnalyzer/packetAnalyzer.go
Normal file
262
pkg/packetAnalyzer/packetAnalyzer.go
Normal file
@@ -0,0 +1,262 @@
|
|||||||
|
package packetAnalyzer
|
||||||
|
|
||||||
|
import (
|
||||||
|
"os"
|
||||||
|
"strings"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/common"
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/constants"
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/fileProcess"
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/ml"
|
||||||
|
"github.com/google/gopacket"
|
||||||
|
"github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
// This go routine communicates through channels and computes flow stats
|
||||||
|
func FlowMeter(ch chan gopacket.Packet, done chan struct{}, maxNumPackets int, localIP string, ifLocalIPKnown bool, fname string) error {
|
||||||
|
flowDict := make(map[string][]interface{})
|
||||||
|
flowSave := make(map[string][]interface{})
|
||||||
|
|
||||||
|
// Import model parameters (weight, scaling - mean, standard deviations)
|
||||||
|
wt, intercept, meanScale, stdScale := ml.ModelParameters()
|
||||||
|
|
||||||
|
numPackets := 0
|
||||||
|
|
||||||
|
err := os.MkdirAll(constants.FlowOutputFolder, 0777)
|
||||||
|
if err != nil {
|
||||||
|
logrus.Error(err)
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
|
||||||
|
for packet := range ch {
|
||||||
|
numPackets++
|
||||||
|
|
||||||
|
if constants.Verbose {
|
||||||
|
if numPackets > 0 {
|
||||||
|
logrus.Info("Num packets: ", numPackets)
|
||||||
|
logrus.Info(" ")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
packet5Tuple, reverseTuple, packetSize, packetTime := PacketInfo(packet)
|
||||||
|
|
||||||
|
if reverseTuple != "nil" {
|
||||||
|
ok, ok1, ok2 := true, true, true
|
||||||
|
direction := ""
|
||||||
|
|
||||||
|
// Ascertain directionality.
|
||||||
|
if ifLocalIPKnown {
|
||||||
|
if strings.Split(packet5Tuple, "--")[0] == localIP {
|
||||||
|
//If packet5Tuple is localIP. Check if flow key for this already exists.
|
||||||
|
_, ok = flowDict[packet5Tuple]
|
||||||
|
direction = "fwd"
|
||||||
|
} else {
|
||||||
|
//If packetReverse5Tuple is localIP. Check if flow key for this already exists.
|
||||||
|
_, ok = flowDict[reverseTuple]
|
||||||
|
packet5Tuple = reverseTuple
|
||||||
|
direction = "bwd"
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
_, ok1 = flowDict[packet5Tuple]
|
||||||
|
_, ok2 = flowDict[reverseTuple]
|
||||||
|
|
||||||
|
ok = ok1 || ok2
|
||||||
|
|
||||||
|
if (!ok1) && (!ok2) {
|
||||||
|
direction = "fwd"
|
||||||
|
} else if (ok1) && (!ok2) {
|
||||||
|
direction = "fwd"
|
||||||
|
} else if (!ok1) && (ok2) {
|
||||||
|
packet5Tuple = reverseTuple
|
||||||
|
direction = "bwd"
|
||||||
|
} else {
|
||||||
|
logrus.Info("We shouldn't have keys for flow-five-tuple and reverse-five-tuple. Error in code.")
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
dstIPFlow, srcIPFlow, protocolFlow, dstPortFlow, srcPortFlow := strings.Split(packet5Tuple, "--")[0], strings.Split(packet5Tuple, "--")[1], strings.Split(packet5Tuple, "--")[2], strings.Split(packet5Tuple, "--")[3], strings.Split(packet5Tuple, "--")[4]
|
||||||
|
|
||||||
|
fwdPacketSize, bwdPacketSize := 0, 0
|
||||||
|
|
||||||
|
if !ok {
|
||||||
|
flowDict[packet5Tuple] = []interface{}{srcIPFlow, dstIPFlow, protocolFlow, srcPortFlow, dstPortFlow, 0 * time.Microsecond, 1, 0, 0, packetSize, float64(packetSize), 0.0, packetSize, packetSize, fwdPacketSize, bwdPacketSize, 0.0, 0.0, 0.0, 0.0, 0, 0, 0, 0, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, 0 * time.Microsecond, packetTime, packetTime, packetTime, packetTime, false, []int{}, []int{}, []time.Duration{}, []time.Duration{}, []time.Duration{}, []int{packetSize}}
|
||||||
|
|
||||||
|
if direction == "fwd" {
|
||||||
|
fwdPacketSize, bwdPacketSize = 1.0*packetSize, 0.0
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]].([]int), fwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeTotal"]] = fwdPacketSize
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeMean"]] = float64(fwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdFlowLength"]] = 1
|
||||||
|
} else {
|
||||||
|
fwdPacketSize, bwdPacketSize = 0.0, 1.0*packetSize
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeArr"]].([]int), bwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeTotal"]] = bwdPacketSize
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeMean"]] = float64(bwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdFlowLength"]] = 1
|
||||||
|
}
|
||||||
|
|
||||||
|
} else {
|
||||||
|
if flowDict[packet5Tuple][constants.MapKeys["flowLength"]].(int) <= constants.MaxPacketsPerFlow {
|
||||||
|
currIAT := packetTime.Sub(flowDict[packet5Tuple][constants.MapKeys["flowPrevTime"]].(time.Time))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["IATArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["IATArr"]].([]time.Duration), currIAT)
|
||||||
|
|
||||||
|
if direction == "fwd" {
|
||||||
|
fwdPacketSize, bwdPacketSize = packetSize, 0
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]].([]int), fwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]].([]int), fwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdFlowLength"]] = flowDict[packet5Tuple][constants.MapKeys["fwdFlowLength"]].(int) + 1
|
||||||
|
|
||||||
|
if flowDict[packet5Tuple][constants.MapKeys["fwdFlowLength"]] == 1 {
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdFlowPrevTime"]] = packetTime
|
||||||
|
} else {
|
||||||
|
currFwdIAT := packetTime.Sub(flowDict[packet5Tuple][constants.MapKeys["fwdFlowPrevTime"]].(time.Time))
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdIATTotal"]] = flowDict[packet5Tuple][constants.MapKeys["fwdIATTotal"]].(time.Duration) + currFwdIAT
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdIATArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["fwdIATArr"]].([]time.Duration), currFwdIAT)
|
||||||
|
fwdIATMin, fwdIATMax := common.MinMaxTimeDuration(flowDict[packet5Tuple][constants.MapKeys["fwdIATArr"]].([]time.Duration))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdIATMean"]] = common.MeanTimeDuration(flowDict[packet5Tuple][constants.MapKeys["fwdIATArr"]].([]time.Duration))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdIATStd"]] = common.StdDevTimeDuration(flowDict[packet5Tuple][constants.MapKeys["fwdIATArr"]].([]time.Duration))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdIATMin"]] = fwdIATMin
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdIATMax"]] = fwdIATMax
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdFlowPrevTime"]] = packetTime
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
if direction == "bwd" {
|
||||||
|
fwdPacketSize, bwdPacketSize = 0, packetSize
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeArr"]].([]int), bwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]].([]int), bwdPacketSize)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdFlowLength"]] = flowDict[packet5Tuple][constants.MapKeys["bwdFlowLength"]].(int) + 1
|
||||||
|
|
||||||
|
if flowDict[packet5Tuple][constants.MapKeys["bwdFlowLength"]] == 1 {
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdFlowPrevTime"]] = packetTime
|
||||||
|
} else {
|
||||||
|
currBwdIAT := packetTime.Sub(flowDict[packet5Tuple][constants.MapKeys["bwdFlowPrevTime"]].(time.Time))
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdIATTotal"]] = flowDict[packet5Tuple][constants.MapKeys["bwdIATTotal"]].(time.Duration) + currBwdIAT
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdIATArr"]] = append(flowDict[packet5Tuple][constants.MapKeys["bwdIATArr"]].([]time.Duration), currBwdIAT)
|
||||||
|
bwdIATMin, bwdIATMax := common.MinMaxTimeDuration(flowDict[packet5Tuple][constants.MapKeys["bwdIATArr"]].([]time.Duration))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdIATMean"]] = common.MeanTimeDuration(flowDict[packet5Tuple][constants.MapKeys["bwdIATArr"]].([]time.Duration))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdIATStd"]] = common.StdDevTimeDuration(flowDict[packet5Tuple][constants.MapKeys["bwdIATArr"]].([]time.Duration))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdIATMin"]] = bwdIATMin
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdIATMax"]] = bwdIATMax
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdFlowPrevTime"]] = packetTime
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["flowDuration"]] = packetTime.Sub(flowDict[packet5Tuple][constants.MapKeys["flowStartTime"]].(time.Time))
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["flowLength"]] = flowDict[packet5Tuple][constants.MapKeys["flowLength"]].(int) + 1
|
||||||
|
|
||||||
|
IATArr := append(flowDict[packet5Tuple][constants.MapKeys["fwdIATArr"]].([]time.Duration), flowDict[packet5Tuple][constants.MapKeys["bwdIATArr"]].([]time.Duration)...)
|
||||||
|
//flowDict[packet5Tuple][constants.MapKeys["IATTotal"]] = flowDict[packet5Tuple][constants.MapKeys["IATTotal"]].(time.Duration) + currIAT
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["IATTotal"]] = flowDict[packet5Tuple][constants.MapKeys["fwdIATTotal"]].(time.Duration) + flowDict[packet5Tuple][constants.MapKeys["bwdIATTotal"]].(time.Duration)
|
||||||
|
IATMin, IATMax := common.MinMaxTimeDuration(IATArr)
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["IATMin"]] = IATMin
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["IATMax"]] = IATMax
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["IATMean"]] = common.MeanTimeDuration(IATArr)
|
||||||
|
if len(IATArr) > 1 {
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["IATStd"]] = common.StdDevTimeDuration(IATArr)
|
||||||
|
}
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["flowPrevTime"]] = packetTime
|
||||||
|
|
||||||
|
fwdPacketSizeMin, fwdPacketSizeMax := common.MinMax(flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]].([]int))
|
||||||
|
bwdPacketSizeMin, bwdPacketSizeMax := common.MinMax(flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeArr"]].([]int))
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeTotal"]] = flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeTotal"]].(int) + fwdPacketSize
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeTotal"]] = flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeTotal"]].(int) + bwdPacketSize
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeMean"]] = common.Mean(flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]].([]int))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeMean"]] = common.Mean(flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeArr"]].([]int))
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeStd"]] = common.StdDev(flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]].([]int))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeStd"]] = common.StdDev(flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeArr"]].([]int))
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeMin"]] = fwdPacketSizeMin
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeMin"]] = bwdPacketSizeMin
|
||||||
|
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeMax"]] = fwdPacketSizeMax
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeMax"]] = bwdPacketSizeMax
|
||||||
|
|
||||||
|
// flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]]
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["packetSizeTotal"]] = flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeTotal"]].(int) + flowDict[packet5Tuple][constants.MapKeys["bwdPacketSizeTotal"]].(int)
|
||||||
|
//packetSizeArr := append(flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]].([]int), flowDict[packet5Tuple][constants.MapKeys["fwdPacketSizeArr"]].([]int)...)
|
||||||
|
packetSizeMin, packetSizeMax := common.MinMax(flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]].([]int))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["packetSizeMin"]] = packetSizeMin
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["packetSizeMax"]] = packetSizeMax
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["packetSizeMean"]] = common.Mean(flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]].([]int))
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["packetSizeStd"]] = common.StdDev(flowDict[packet5Tuple][constants.MapKeys["packetSizeArr"]].([]int))
|
||||||
|
|
||||||
|
if flowDict[packet5Tuple][constants.MapKeys["flowLength"]].(int) >= constants.MinPacketsPerFlow {
|
||||||
|
flowDict[packet5Tuple][constants.MapKeys["minPacketsBool"]] = true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
//logrus.Info("SaveInterval: ", constants.SaveIntervals)
|
||||||
|
_, ifSave := common.IfPresentInSlice(constants.SaveIntervals, numPackets)
|
||||||
|
|
||||||
|
if ifSave {
|
||||||
|
// if flowDict[packet5Tuple][constants.MapKeys["flowLength"]].(int) <= constants.MaxPacketsPerFlow {
|
||||||
|
|
||||||
|
if len(flowDict) > 0 {
|
||||||
|
for flow5Tuple, values := range flowDict {
|
||||||
|
features := []float64{}
|
||||||
|
|
||||||
|
// logrus.Info(flow5Tuple, flowDict[flow5Tuple][constants.MapKeys["flowLength"]], constants.MinPacketsPerFlow, numPackets, " - Flow stats.")
|
||||||
|
|
||||||
|
if (flowDict[flow5Tuple][constants.MapKeys["flowLength"]].(int) >= constants.MinPacketsPerFlow) && (flowDict[flow5Tuple][constants.MapKeys["flowDuration"]].(time.Duration) >= constants.MinTimeDuration) {
|
||||||
|
// Populate flowSave map with flows for which number of packets is beyond a given threshold.
|
||||||
|
flowSave[flow5Tuple] = values
|
||||||
|
|
||||||
|
// Create feature struct with float64 datatypes for features.
|
||||||
|
flow := common.FlowData(values)
|
||||||
|
|
||||||
|
// Create feature array for machine learning (ML) analysis.
|
||||||
|
features = append(features, flow.FlowDuration, flow.FlowLength, flow.FwdFlowLength, flow.BwdFlowLength, flow.PacketSizeTotal, flow.PacketSizeMean, flow.PacketSizeStd, flow.PacketSizeMin, flow.PacketSizeMax, flow.FwdPacketSizeTotal, flow.BwdPacketSizeTotal, flow.FwdPacketSizeMean, flow.BwdPacketSizeMean, flow.FwdPacketSizeStd, flow.BwdPacketSizeStd, flow.FwdPacketSizeMin, flow.BwdPacketSizeMin, flow.FwdPacketSizeMax, flow.BwdPacketSizeMax, flow.IATMean, flow.IATStd, flow.IATMin, flow.IATMax, flow.FwdIATTotal, flow.BwdIATTotal, flow.FwdIATMean, flow.BwdIATMean, flow.FwdIATStd, flow.BwdIATStd, flow.FwdIATMin, flow.BwdIATMin, flow.FwdIATMax, flow.BwdIATMax, flow.FlowLengthPerTime, flow.FwdFlowLengthPerTime, flow.BwdFlowLengthPerTime, flow.PacketSizeTotalPerTime, flow.FwdPacketSizeTotalPerTime, flow.BwdPacketSizeTotalPerTime)
|
||||||
|
|
||||||
|
if constants.IfFlowStatsVerbose {
|
||||||
|
// Scaling of array and ML prediction
|
||||||
|
scaledFeature := ml.StdScaler(features, meanScale, stdScale)
|
||||||
|
yPred := ml.GetCategory(ml.BinaryClassifier(ml.Sigmoid(ml.NetInput(wt, intercept, scaledFeature))))
|
||||||
|
|
||||||
|
logrus.Info(flow5Tuple, ": ", yPred, " ", ml.Sigmoid(ml.NetInput(wt, intercept, scaledFeature)))
|
||||||
|
logrus.Info(" ")
|
||||||
|
|
||||||
|
// Print flow statistics.
|
||||||
|
for j := 0; j < 41; j++ {
|
||||||
|
logrus.Info(constants.MapLabels[j], ": ", flowDict[flow5Tuple][j])
|
||||||
|
}
|
||||||
|
logrus.Info("Flow Length Per Time(ms) : ", float64(flowDict[flow5Tuple][constants.MapKeys["flowLength"]].(int))/float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Millisecond))
|
||||||
|
logrus.Info("Forward Flow Length Per Time(ms) : ", float64(flowDict[flow5Tuple][constants.MapKeys["fwdFlowLength"]].(int))/float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Millisecond))
|
||||||
|
logrus.Info("Backward Flow Length Per Time(ms) : ", float64(flowDict[flow5Tuple][constants.MapKeys["bwdFlowLength"]].(int))/float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Millisecond))
|
||||||
|
logrus.Info("Packet Size Per Time(ms) : ", float64(flowDict[flow5Tuple][constants.MapKeys["packetSizeTotal"]].(int))/float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Millisecond))
|
||||||
|
logrus.Info("Forward Packet Size Per Time(ms) : ", float64(flowDict[flow5Tuple][constants.MapKeys["fwdPacketSizeTotal"]].(int))/float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Millisecond))
|
||||||
|
logrus.Info("Backward Packet Size Per Time(ms) : ", float64(flowDict[flow5Tuple][constants.MapKeys["bwdPacketSizeTotal"]].(int))/float64(values[constants.MapKeys["flowDuration"]].(time.Duration)/time.Millisecond))
|
||||||
|
logrus.Info(" ")
|
||||||
|
logrus.Info(" ")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
fileProcess.FileSave(flowSave, constants.MapKeys, constants.FlowOutputFolder+"/"+fname+"_flow_stats")
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if numPackets == maxNumPackets {
|
||||||
|
logrus.Info("Target number packets reached.")
|
||||||
|
done <- struct{}{}
|
||||||
|
return nil
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return nil
|
||||||
|
}
|
BIN
pkg/packetbreeze
Executable file
BIN
pkg/packetbreeze
Executable file
Binary file not shown.
80
pkg/packetbreeze.go
Normal file
80
pkg/packetbreeze.go
Normal file
@@ -0,0 +1,80 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"flag"
|
||||||
|
"log"
|
||||||
|
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/constants"
|
||||||
|
"github.com/deepfence/FlowMeter/pkg/packetAnalyzer"
|
||||||
|
"github.com/google/gopacket"
|
||||||
|
"github.com/google/gopacket/p cap"
|
||||||
|
|
||||||
|
"github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
func packetCollect() {
|
||||||
|
ch := make(chan gopacket.Packet)
|
||||||
|
done := make(chan struct{}) // signal channel
|
||||||
|
|
||||||
|
// Command line arguments.
|
||||||
|
ifLiveCapturePtr := flag.Bool("ifLiveCapture", true, "a bool")
|
||||||
|
filenamePtr := flag.String("fname", "foo", "a string")
|
||||||
|
maxNumPacketsPtr := flag.Int("maxNumPackets", 42, "an int")
|
||||||
|
ifLocalIPKnownPtr := flag.Bool("ifLocalIPKnown", false, "a bool")
|
||||||
|
localIPPtr := flag.String("localIP", "143.198.72.237", "a string")
|
||||||
|
|
||||||
|
flag.Parse()
|
||||||
|
|
||||||
|
ifLiveCapture := *ifLiveCapturePtr
|
||||||
|
filename := *filenamePtr
|
||||||
|
maxNumPackets := *maxNumPacketsPtr
|
||||||
|
ifLocalIPKnown := *ifLocalIPKnownPtr
|
||||||
|
localIP := *localIPPtr
|
||||||
|
|
||||||
|
logrus.Info("Live Capture: ", ifLiveCapture)
|
||||||
|
logrus.Info("Target max number packets: ", maxNumPackets)
|
||||||
|
|
||||||
|
logrus.Info("Start Main method")
|
||||||
|
|
||||||
|
if ifLiveCapture {
|
||||||
|
// Open device
|
||||||
|
constants.Handle, constants.Err = pcap.OpenLive(constants.Device, constants.SnapshotLen, constants.Promiscuous, constants.Timeout)
|
||||||
|
localIP = packetAnalyzer.GetOutboundIP().String()
|
||||||
|
ifLocalIPKnown = true
|
||||||
|
logrus.Info("Live capture of packets.")
|
||||||
|
} else {
|
||||||
|
// Open file instead of device
|
||||||
|
constants.Handle, constants.Err = pcap.OpenOffline(constants.PacketFolder + "/" + filename + constants.PacketFileType)
|
||||||
|
|
||||||
|
if !ifLocalIPKnown {
|
||||||
|
localIP = ""
|
||||||
|
}
|
||||||
|
|
||||||
|
logrus.Info("Analyzing offline pcap files.")
|
||||||
|
}
|
||||||
|
|
||||||
|
if constants.Err != nil {
|
||||||
|
log.Fatal(constants.Err)
|
||||||
|
}
|
||||||
|
|
||||||
|
go packetAnalyzer.FlowMeter(ch, done, maxNumPackets, localIP, ifLocalIPKnown, filename)
|
||||||
|
|
||||||
|
defer constants.Handle.Close()
|
||||||
|
|
||||||
|
packetSource := gopacket.NewPacketSource(constants.Handle, constants.Handle.LinkType())
|
||||||
|
|
||||||
|
loop:
|
||||||
|
for packet := range packetSource.Packets() {
|
||||||
|
select {
|
||||||
|
case ch <- packet:
|
||||||
|
case <-done:
|
||||||
|
close(ch)
|
||||||
|
close(done)
|
||||||
|
break loop
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
func main() {
|
||||||
|
packetCollect()
|
||||||
|
}
|
Reference in New Issue
Block a user