1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
#!/usr/bin/perl -w
#
# Copyright (C) 2001 by USC/ISI
# All rights reserved.
#
# Redistribution and use in source and binary forms are permitted
# provided that the above copyright notice and this paragraph are
# duplicated in all such forms and that any documentation, advertising
# materials, and other materials related to such distribution and use
# acknowledge that the software was developed by the University of
# Southern California, Information Sciences Institute. The name of the
# University may not be used to endorse or promote products derived from
# this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
#
# An perl script that seperate inbound and outbound traffic of ISI domain,
# used by SAMAN ModelGen
#
# This work is supported by DARPA through SAMAN Project
# (http://www.isi.edu/saman/), administered by the Space and Naval
# Warfare System Center San Diego under Contract No. N66001-00-C-8066
#
open(FCLIENT,"> ftpCLIENT");
open(FSERVER,"> ftpSERVER");
$ftp_port=21;
$wc=0;
$ws=0;
while (<>) {
($time1,$time2,$ip11,$ip12,$ip13,$ip14,$srcPort,$dummy1,$ip21,$ip22,$ip23,$ip24,$dstPort,$dummy2) = split(/[.:() ]/,$_);
# ($time1,$time2,$dummy0,$ip11,$ip12,$ip13,$ip14,$srcPort,$dummy1,$ip21,$ip22,$ip23,$ip24,$dstPort,$dummy2) = split(/[.:() ]/,$_);
# $dummy0="";
$dummy1="";
$dummy2="";
$time1=0;
$time2=0;
$src=join(".",$ip11,$ip12,$ip13,$ip14);
$dst=join(".",$ip21,$ip22,$ip23,$ip24);
if ($srcPort eq $ftp_port) {
$client=$dst;
$server=$src;
} elsif ($dstPort eq $ftp_port) {
$client=$src;
$server=$dst;
} else {
print "Something is wrong!!\n";
}
if ($client ne "") {
$wclient[$wc]=$client;
$wc++;
}
if ($server ne "") {
$wserver[$ws]=$server;
$ws++;
}
}
#@clientsort = sort numerically @wclient;
@clientsort = sort @wclient;
#@serversort = sort numerically @wserver;
@serversort = sort @wserver;
$prev="";
foreach $j (0 .. $#clientsort) {
if ($clientsort[$j] ne $prev) {
print FCLIENT "$clientsort[$j]\n";
}
$prev=$clientsort[$j];
}
$prev="";
foreach $j (0 .. $#serversort) {
if ($serversort[$j] ne $prev) {
print FSERVER "$serversort[$j]\n";
}
$prev=$serversort[$j];
}
close(FCLIENT);
close(FSERVER);
#sub numerically { $a ne $b; }
|
