A Stateful Approach to Generate Synthetic Events from Kernel Traces

Table 7

Execution time for generating the first abstraction level.

			Time spent (ms) for analysing and generating the first level of abstract events
Events count	Size (MB)	All (ms)	File operations				Network operations
			File open	File read	File write	File close	Socket create	Socket connect	Socket receive	Socket send	Socket close
2279766	25	4748	3963	4024	3995	4038	4151	3952	3871	3937	3777
5420727	75	9176	5900	6195	6394	6218	6394	6257	5884	6014	5957
8872888	150	12735	10403	10308	10183	10282	9975	10025	97125	10125	10424
37328387	500	58477	50251	50855	51928	50424	49366	47896	48962	49163	48104
68961889	1000	148284	128252	129157	138988	128186	127912	128312	127191	126915	128061
140507496	2000	226569	177913	180017	187366	178640	177389	174385	179372	178509	179097
328868336	5000	650228	513230	514012	546782	512659	510139	507873	511201	510139	512771
621132167	10000	1105124	902245	916292	941668	909893	907177	901127	899976	904227	874227