create scatter graph (or similar) from access list output

[gurner]

I'm not sure which was the right forum to post this to, but as VBS is the only scripting language im any good at i thought this would be ok, unless someone can point me somewhere else?

I am looking at a way of graphing an output from a router to a graph of some description, i guess some sort of scatter graph.

I am hoping to log points (IP addresses) at places on a graph and then relate them together

the logfile is generated in the following format

16:11:43:256 123.123.123.1:3389 > 34.25.23.232:1447
16:11:43:266 123.123.123.1:3389 > 34.25.23.232:1431
16:11:43:281 192.172.226.123:80 > 34.25.23.232:3380
16:11:43:281 123.123.123.1:3380 > 192.172.226.123:80
16:11:43:336 234.23.21.1:3389 > 34.25.23.232:1431
16:11:43:337 123.123.123.1:1431 > 34.25.23.232:3389

i was looking in to getting a single point for 34.25.23.232 then getting branches off of it to 123.123.123.1 and 234.23.21.1 and so on

a bit like the charts you see on Caida, but only basic really.

I am unfortunately (ha) very M$ and VBS focussed, and am not good at Perl or Java, which i believe it can be done on.

Im just looking at a basic way to generate an Excel Graph or PNG or JPG based on a small set of this information.

I have looked at Graphviz and found it doesn't seem to except this format of logfile, i dont know how or if you can change how it interprets a logfile.

I have got it so that it pipes it in to an Excel spreadsheet, but it just produces gibberish from the style of the columns and rows, as i haven't yet figured out a way for it to work of one of each IP and join them

Im not so much asking for someone to do this for us, thats not what we're here for, but pointers would be cool. i'd really like pointers to an easily scriptable solution

Cheers

Gurner

 

[SkipVought]

Hi,

Not sure what you are charting.

But using Excel, Data > Text to columns, you can parse the data to get...
[tt]
TIM IP1 IP2
16:11:43 123.123.123.1 34.25.23.232
16:11:43 123.123.123.1 34.25.23.232
16:11:43 192.172.226.123 34.25.23.232
16:11:43 123.123.123.1 192.172.226.123
16:11:43 234.23.21.1 34.25.23.232
16:11:43 123.123.123.1 34.25.23.232
[/tt]
and Data > Pivot Table... to get
[tt]
Count of TIM
IP2 IP1 Total
192.172.226.123 123.123.123.1 1
34.25.23.232 123.123.123.1 3
192.172.226.123 1
234.23.21.1 1
Grand Total 6
[/tt]
all generated in about 3 minutes.

Skip,

_{Have you heard that the roundest knight at King Arthur's round table was...
Sir Cumference!}

 

[gurner]

that'll be really cool for a summary table, cheers

i wasn't expecting too much of a charting capability, but wondered if something could relate the IPs like the sort of thing they do here with the Linux and open source C type apps

http://www.caida.org/home/

but obviously not on that scale, but a really simple way of plotting one IP at one point, another IP at another point, and drawing a line from one to the other, using Microsoft proprietary apps?

like this does

http://www.graphviz.org/

(especially the one on the far right) but i cant seem to get it to accept that style of log file i have, as graphwiz is more in to this sort of relationship

graph G {
run -- intr;
intr -- runbl;
runbl -- run;
run -- kernel;
kernel -- zombie;
kernel -- sleep;
kernel -- runmem;
sleep -- swap;
swap -- runswap;
runswap -- new;
runswap -- runmem;
new -- runmem;
sleep -- runmem;
}

which plots 'run', 'kernel', 'runswap' etc and draws points between each one that matches another

Gurner

 

[SkipVought]

You can play around with a Stacked Bar chart. A chart cannot plot TEXT, but you can write cell formulas that look at the text values and produce numeric values that can produce a Gantt Chart.

Hint: the FIRST bar SERIES will have NO BORDER and NO FILL. The next bar SERIES will then appear to start giving an appearance like...
[tt]
| ------
[/tt]


Skip,

_{Have you heard that the roundest knight at King Arthur's round table was...
Sir Cumference!}