Question

This is all I was provided as data to go off of. The sample data continues on and on.

The sample represents timestamps of SSH interactions (column 1) between a server and its anonymized users (column 2). Each interaction represents a real measurement of keystrokes received by the server. Consistent with sound Internet measurement strategies, the aim is to build a meta-data summary of the provided data sample Answer the following. Also, provide a brief explanation on how you obtained the answer. Q1: What is the number of keystrokes received by the server? Q2: What is the complete duration of the interaction with the server? Q3: What is the rate (events/sec) of the interaction with the server? Q4: What is the probability distribution (i.e., Gaussian, Poisson, etc.) that best models the inter-arrival rate of the keystrokes? The inter-arrival is the time between each subsequent interaction arriving to the server?

Answer 1

Monitore all for a network device: - implies # + cpdunp Ietho tepdump: output supressed, use - v or - -vv fore fell protocol decode listening on etho lines type EM1OMB(Ethernal) size 96 bytes Monitore call traffic fore wspecific poret(HTTP): - implies #tcpdump ietho poret 8080 tepdump: verebose output surrecessed, use - v - ore -vv fore full protocol decode listening on etho, line - type EN10MB (Ethernet) , capture size 96 bytes capture all package fore forest 8080 and print only that contain data: - implies # topdump tcp poret 8080 and ((ip(2: 2) - ((I p [0] & 0 times f < (2)) - ((tcp[12] so times fo) > >))! = 0)' # tcpdump -w - x - x - s 1500 - ieth1 poret 25' monitore all traffic fore a specific protocol: - implies # tcpdump - I etho ip # tcpdump - I etho arup # tcpdump - I etho udp