[Dshield] Gaps in dShield data?

Johannes B. Ullrich jullrich at sans.org
Tue Jan 6 22:32:07 GMT 2004


yes. if there is a gap, there was no data. Actually, all ports that have
less then 3 reports per day are removed from that day to keep that table
a bit smaller.



On Tue, 2004-01-06 at 16:50, Pete Cap wrote:
> Just a quick question for those in the know.
>  
> For many upper-range ports there are gaps in the data.
>  
> Can I assume that the traffic for the days in question was actually 0 all around, or are there days when no data was collected for those ports?
>  
> In this instance I'm following up on the port 2234 traffic.
> I show a significant increase in the past four days of this traffic, which may be attributed to SoulSeek users.  I checked the associated port 5534 but there are gaps in the data so any correlation I do is going to be less than robust.
>  
> Thanks,
>  
> Pete
> 
> 
> ---------------------------------
> Do you Yahoo!?
> Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040106/2890c033/attachment.bin


More information about the list mailing list