static void Main(string[] args)
{
var origins = ContentExtractor.CsvReader <IdsTech>(@"E:\data\IDS\242.txt");
var comparer = new IdsTech.IdsTechCoreCompare();
var content = new List <IdsTech>(origins.Distinct(comparer));
//Console.WriteLine(Statics.Percentile(new double[] { 1,2,5,8,9}, .9));
//TechAnalyzer.NumberAnalyzer(new List<IdsTech>(content));
//Console.ReadKey();
Console.WriteLine(content.Count());
//TechAnalyzer.NumberAnalyzer(origins);
Console.ReadKey();
}
public static void Counter()
{
var content = ContentExtractor.CsvReader <IdsTech>(@"E:\data\IDS\241.txt");
var s = content.GroupBy(a => a.TargetIp).ToDictionary(g => g.Key, h => h.Count()).OrderByDescending(d => d.Value);
int i = 0;
foreach (var item in s)
{
Console.WriteLine(i++ + ":" + item.Value + " " + item.Key);
}
Console.WriteLine();
Console.ReadKey();
}
static void Main2(string[] args)
{
var content = ContentExtractor.LineJsonReader <IdsEve>(@"E:\data\eve11.json");
var max = content.GroupBy(x => x.TargetIp).ToDictionary(x => x.Key, x => x.Count());
var maxip = max.OrderByDescending(x => x.Value).FirstOrDefault().Key;
var samples = content.Where(x => Statics.IpEquals(maxip, x.TargetIp)).ToArray();
//var samples = content.ToArray();
//Console.WriteLine("EventType: " + content.Select(x => x.EventType).Distinct().Count());
//Console.WriteLine("FlowId: " + content.Select(x => x.FlowId).Distinct().Count());
//Console.WriteLine("SourceIp: " + content.Select(x => x.SourceIp).Distinct().Count());
var drawer = new Drawer <DateTime, int>()
{
Path = @"E:\data\eve11_by_alert_signature_maxip.jpg"
};
drawer.InitialGraph();
var groups = samples.Where(x => x.EventType == "alert").GroupBy(x => x.Alert.SignatureId);
foreach (var items in groups)
{
var points = items.GroupBy(x => Statics.Timeround(x.Timestamp, TimeSpan.FromMilliseconds(100)))
.ToDictionary(x => x.Key, x => x.Count()).OrderBy(x => x.Key);
drawer.AddSeries(points, SeriesChartType.Line, items.Key);
}
//drawer.Chart.ChartAreas["Default"].AxisX.
drawer.SetAxisLogarithmic(false);
drawer.Save(true);
// Console.ReadKey();
}
