A Stateful Approach to Generate Synthetic Events from Kernel Traces

Table 5

Count of different event types in second level of abstraction.

		Number of synthetic events in second level of abstraction
Events count	Size (MB)	File operations				Network operations
		Check file	Sequentially file read	Sequentially file write	Read write file	Network connection	HTTP connection	DNS connection
2279766	25	928	673	496	230	43	103	4
5420727	75	1117	742	253	10	372	193	46
8872888	150	66141	19742	440	213	58	103	0
37328387	500	53371	32093	1791	888	688	274	108
68961889	1000	81607	14343	207	69	139	29	0
140507496	2000	61647	96921	2505	504	1486	867	285
328868336	5000	948436	87095	8047	984	1921	3116	319
621132167	10000	395067	303452	20267	1230	11740	16668	651