[Dshield] Gaps in dShield data?
Johannes B. Ullrich
jullrich at sans.org
Tue Jan 6 22:32:07 GMT 2004
yes. if there is a gap, there was no data. Actually, all ports that have
less then 3 reports per day are removed from that day to keep that table
a bit smaller.
On Tue, 2004-01-06 at 16:50, Pete Cap wrote:
> Just a quick question for those in the know.
> For many upper-range ports there are gaps in the data.
> Can I assume that the traffic for the days in question was actually 0 all around, or are there days when no data was collected for those ports?
> In this instance I'm following up on the port 2234 traffic.
> I show a significant increase in the past four days of this traffic, which may be attributed to SoulSeek users. I checked the associated port 5534 but there are gaps in the data so any correlation I do is going to be less than robust.
> Do you Yahoo!?
> Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
CTO SANS Internet Storm Center http://isc.sans.org
phone: (617) 837 2807 jullrich at sans.org
contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040106/2890c033/attachment.bin
More information about the list