Aguri Traffic Density Graph

The following graph is produced by the density script from aguri output logs archived by the agurify script. The graph plots traffic distribution within the IPv4 address space. The Y-axis represents the IPv4 address space. (e.g., the lower half is the class A address space, and the quarter above the lower half is the class B address space.)

The graph plots a 1-day destination address profile. The graph captures a DoS attack at the end of the day; most of the traffic goes to a single host and its color becomes red. A traffic density graph is effective to detect unusual traffic concentration such as DoS attacks. [aguri traffic density graph]

$Date: 2006/09/28 03:00:40 $