Comments on: DNS query UDP source port graphs http://www.coverfire.com/archives/2008/07/26/dns-query-udp-source-port-graphs/ Thoughts and musings Sun, 07 Feb 2010 17:31:54 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Dan Siemon http://www.coverfire.com/archives/2008/07/26/dns-query-udp-source-port-graphs/comment-page-1/#comment-234589 Dan Siemon Thu, 28 Aug 2008 11:16:09 +0000 http://www.coverfire.com/?p=326#comment-234589 The graphs were created with Python and the following libraries: matplotlib - http://matplotlib.sourceforge.net/ dpkt - http://code.google.com/p/dpkt/ pypcap - http://code.google.com/p/pypcap/ The graphs were created with Python and the following libraries:
matplotlib – http://matplotlib.sourceforge.net/
dpkt – http://code.google.com/p/dpkt/
pypcap – http://code.google.com/p/pypcap/

]]> By: theetabond http://www.coverfire.com/archives/2008/07/26/dns-query-udp-source-port-graphs/comment-page-1/#comment-234484 theetabond Thu, 28 Aug 2008 02:45:33 +0000 http://www.coverfire.com/?p=326#comment-234484 Hey...just interested in how you generated these graphs...i've got some PCAP files and i want to generate good looking graphs on the bandwidth utilisation of link. Any hints pls? Cheers Hey…just interested in how you generated these graphs…i’ve got some PCAP files and i want to generate good looking graphs on the bandwidth utilisation of link.

Any hints pls?

Cheers

]]> By: Dan Siemon » More fun with DNS packet captures http://www.coverfire.com/archives/2008/07/26/dns-query-udp-source-port-graphs/comment-page-1/#comment-224991 Dan Siemon » More fun with DNS packet captures Tue, 29 Jul 2008 03:27:36 +0000 http://www.coverfire.com/?p=326#comment-224991 [...] Comments Dan Siemon on DNS query UDP source port graphscobolhacker on Chicago (U-505)cobolhacker on Gin and the cognitive surplusDan Siemon on Gin and the [...] [...] Comments Dan Siemon on DNS query UDP source port graphscobolhacker on Chicago (U-505)cobolhacker on Gin and the cognitive surplusDan Siemon on Gin and the [...]

]]> By: Dan Siemon http://www.coverfire.com/archives/2008/07/26/dns-query-udp-source-port-graphs/comment-page-1/#comment-223884 Dan Siemon Sat, 26 Jul 2008 05:52:20 +0000 http://www.coverfire.com/?p=326#comment-223884 One extra note: when talking about the banding I was referring to the vertical banding. The horizontal band is also interesting. Does it indicate a slight preference for that port? I am grabbing another capture now to see if this behaviour still exists. One extra note: when talking about the banding I was referring to the vertical banding. The horizontal band is also interesting. Does it indicate a slight preference for that port? I am grabbing another capture now to see if this behaviour still exists.

]]>