Implementation of data collection tools using NetFlow for statistical ...

8 Appendix
# Remove the first line from the lists, as these contain the
# actual name of the fields such as PROTO, BYTE and PACKETS
# instead of the values itself. MySQL doesn't like doing
# numerical calculations on fields containing text, for instance.
v4_out.pop(0)
v4_in.pop(0)
v4_attack.pop(0)
# Emptying the database before new values are inserted.
cursor.execute("TRUNCATE TABLE AS_in_v4")
cursor.execute("TRUNCATE TABLE AS_out_v4")
cursor.execute("TRUNCATE TABLE AS_attack_v4")
# Looping through each list and inserting the values
# into MySQL.
# Traffic going OUT from I2B
for kolumn in v4_out:
cursor.execute("""INSERT INTO AS_out_v4 (DST_AS, packets,
bytes) VALUES (%s, %s, %s)""", (kolumn[9], kolumn[30],
kolumn[32]))
# Note:
# kolumn 9, 30 and 32 are the delimited fields which
# contain the data we want to save. In this case, the
# destination AS, the number of packets and bytes sent.
# Traffic going IN to I2B
for kolumn in v4_in:
cursor.execute("INSERT INTO AS_in_v4 (SRC_AS, packets, bytes)
VALUES (%s, %s, %s)", (kolumn[8], kolumn[30], kolumn[32]))
# Note:
# kolumn 8, 30 and 32 are the delimited fields which
# contain the data we want to save. In this case, the
# source AS, the number of packets and bytes received.
# Attacking AS
for kolumn in v4_attack:
cursor.execute("INSERT INTO AS_attack_v4 (DST_AS, SRC_IP,
DST_IP, DST_PORT, proto, packets, bytes) VALUES (%s, %s, %s, %s,
%s, %s, %s)", (kolumn[9], kolumn[21], kolumn[22], kolumn[26],
kolumn[28], kolumn[30], kolumn[32]))
# Note:
# kolumn 9, 21, 22, 26, 28, 30 and 32 are the delimited fields
57