Skip to content

Commit

Permalink
Update fasterPlz.py
Browse files Browse the repository at this point in the history
  • Loading branch information
deveyNull authored Nov 17, 2017
1 parent 8d1f351 commit 55632d9
Showing 1 changed file with 26 additions and 1 deletion.
27 changes: 26 additions & 1 deletion fasterPlz.py
Original file line number Diff line number Diff line change
Expand Up @@ -475,7 +475,32 @@ def enrichHTTP(dictEntry, domainName):
))

finalArray = list(itertools.chain.from_iterable(finalArray))

# domainName,
# count, count # just in general useful for all of this... if you use total values for things like bytes or packets io, should be used to scale results.

# Word Magic: return([countUnique, percentageUnique, modeCount, percentageMode])

# temp0, subdomain array #super important for DNS, less so for http
# temp1, agent array #unlikely, ignore
# temp2, uri array #super important for http, encoded in URI

# Math Magic: (return([countUnique, percentageUnique, average, minimum, maximum, entStat, varStat, skewStat,kurtosisStat])


# temp_0, delta time list # very important, periodicity?
# magicDurationArray, durations #possibly important
# magicOrigBytesArray, bytes sent #yes * maybe something can be done with ratios here
# magicRespBytesArray, bytes received #yes
# magicOrigPacketsArray, packets sent #yes
# magicOrigIpBytesArray, ip bytes sent #yes
# magicRespPacketsArray, packets recieved #yes
# magicRespIpBytesArray, ip bytes recieved #yes * maybe something can be done with ratios here
# temp_2, uri length
# temp_3, uri depth
# temp_4, uri entropy
# temp_5, agent length #unlikely to matter, #unlikely to matter
# temp_6, agent depth #unlikely to matter, #unlikely to matter
# temp_7, agent entropy #unlikely to matter, recommend ignore
return(finalArray)

def listMaker(csvOne):
Expand Down

0 comments on commit 55632d9

Please sign in to comment.