61439ec6ef
Previously, the analyzer assumed that two consecutive flows would be a pair. This proved unreliable, therefore a new comparison algorithm is ussed. It utilizes the IP addresses and the 'first_switched' parameter to identify two flows of the same connection. More improvements can be done, especially filtering and in the identification of the initiating peer. Tests still fail, have to be adapted to the new dicts and gzip. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| v1.py | ||
| v5.py | ||
| v9.py | ||