Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Gurvinder Singh
spark_apps
Commits
cd8890ca
Commit
cd8890ca
authored
Jul 03, 2014
by
Sigmund Augdal
Browse files
Added constants for the CSV fields, and updated the older functions for the new format
parent
9bdfc08d
Changes
1
Show whitespace changes
Inline
Side-by-side
pythonApp/netflowAlgs.py
View file @
cd8890ca
SRC_IP
=
3
DEST_IP
=
4
DEST_PORT
=
6
def
add
(
x
,
y
):
return
x
+
y
def
top_ips
(
csv
,
which
=
"both"
,
num
=
10
):
if
which
==
"both"
:
ips
=
csv
.
flatMap
(
lambda
x
:
x
[
1
:
3
])
ips
=
csv
.
flatMap
(
lambda
x
:
(
x
[
SRC_IP
],
x
[
DEST_IP
])
)
elif
which
==
"client"
:
ips
=
csv
.
map
(
lambda
x
:
x
[
1
])
ips
=
csv
.
map
(
lambda
x
:
x
[
SRC_IP
])
elif
which
==
"server"
:
ips
=
csv
.
map
(
lambda
x
:
x
[
2
])
ips
=
csv
.
map
(
lambda
x
:
x
[
DEST_IP
])
ip_count
=
ips
.
map
(
lambda
x
:
(
x
,
1
)).
reduceByKey
(
add
)
return
ip_count
.
map
(
lambda
x
:
(
x
[
1
],
x
[
0
])).
sortByKey
(
False
).
take
(
num
)
def
top_ports
(
csv
,
num
=
10
):
ports
=
csv
.
map
(
lambda
x
:
x
[
3
])
ports
=
csv
.
map
(
lambda
x
:
x
[
DEST_PORT
])
port_count
=
ports
.
map
(
lambda
x
:
(
x
,
1
)).
reduceByKey
(
add
)
return
port_count
.
map
(
lambda
x
:
(
x
[
1
],
x
[
0
])).
sortByKey
(
False
).
take
(
num
)
def
ports_count_by_ip3
(
csv
):
ips
=
csv
.
map
(
lambda
x
:
((
x
[
6
],
x
[
3
],
x
[
4
]),
1
))
ips
=
csv
.
map
(
lambda
x
:
((
x
[
DEST_PORT
],
x
[
SRC_IP
],
x
[
DEST_IP
]),
1
))
ip_count
=
ips
.
reduceByKey
(
add
,
numPartitions
=
30
)
return
ip_count
.
map
(
lambda
x
:
(
x
[
1
],
x
[
0
])).
sortByKey
(
False
,
numPartitions
=
30
).
take
(
20
)
def
ports_count_by_ip
(
csv
):
srcs
=
csv
.
map
(
lambda
x
:
((
x
[
6
],
x
[
3
]),
1
))
dsts
=
csv
.
map
(
lambda
x
:
((
x
[
6
],
x
[
4
]),
1
))
srcs
=
csv
.
map
(
lambda
x
:
((
x
[
DEST_PORT
],
x
[
SRC_IP
]),
1
))
dsts
=
csv
.
map
(
lambda
x
:
((
x
[
DEST_PORT
],
x
[
DEST_IP
]),
1
))
ips
=
srcs
.
union
(
dsts
).
reduceByKey
(
add
)
return
ips
.
map
(
lambda
x
:
(
x
[
1
],
x
[
0
])).
sortByKey
(
False
).
take
(
20
)
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment