|
|
|
| go ahead... be a heretic | |
| PerlMonks |
Re^4: analyzing databy Theodore (Friar) |
| on Apr 23, 2014 at 11:11 UTC ( #1083329=note: print w/replies, xml ) | Need Help?? |
|
You can't know that. You can know how much time passed between the first and the last packet from a specific src_ip to a specific dst_ip for a specific arbitrary time span or a specific log file. Example: You may have one day's worth of data. There is a packet going from ip A to ip B at 00:01. There is a second packet between A and B at 23:59. Is this (23 hours 58 mins) "how long" ip A spent on ip B?
In Section
Seekers of Perl Wisdom
|
|
||||||||||||||||||||||||