Research Article
A Stateful Approach to Generate Synthetic Events from Kernel Traces
Table 6
Average number of containing events for generating the upper level synthetic events.
| |
Events count |
Size (MB) | Average number of containing events | | Check file | Sequentially file read | Sequentially file write | Read write file | Network connection | HTTP connection | DNS connection |
| | 2279766 | 25 | 3 | 3 | 10 | 9 | 1 | 38 | 5 | | 5420727 | 75 | 3 | 3 | 25 | 87 | 3 | 37 | 5 | | 8872888 | 150 | 3 | 4 | 11 | 9 | 2 | 38 | 0 | | 37328387 | 500 | 3 | 4 | 10 | 26 | 2 | 44 | 5 | | 68961889 | 1000 | 3 | 3 | 20 | 67 | 4 | 82 | 0 | | 140507496 | 2000 | 3 | 4 | 61 | 16 | 5 | 92 | 5 | | 328868336 | 5000 | 3 | 6 | 48 | 62 | 3 | 34 | 5 | | 621132167 | 10000 | 3 | 4 | 34 | 120 | 4 | 42 | 5 |
|
|
