Chuck
[EMAIL PROTECTED] wrote:
--On Wednesday, August 27, 2003 1:29 PM -0500 "Akens, Anthony" <[EMAIL PROTECTED]> wrote:
Just wanted to look into a "for fun" project, after a recent project that wasn't much fun at all... Our organization got hit by the blaster worm, which hit many, many windows boxes. The *nix boxes (which I manage) were of course unaffected, except by the total lack of bandwidth available to them. Except for one. We have the syslog on our PIX firewall forward on to one of my boxes, so I have an interested detailed log of how the blaster worm spread on our network.
So much for the history, now on to some ideas... I thought it would be interesting to plot two things - 1) How many hits per minute, and 2) Total compromised systems over time.
I thought of perl immediately as a good tool to break this rather large file down, but being a newbie I'm not sure how to begin.
As much as I like Perl, my first thought for something like this would not be Perl, but some sort of statistical package that has routines already built-in to handle descriptive statistics. I'd use SAS, since I have it available at work and I'm familiar with it, but SPSS, Minitab, and other packages would work well, too. You might also try R <URL:http://www.r-project.org/>, which is an open-source (GNU Public License) language for statistical programming and graphics. It's modelled on the S language (a commercial product). (I still might use Perl just to extract the parts I wanted to analyze and put them in a format the stat package could read easily.)
But if you're doing it just for practice, I won't argue. :-)
-- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
