Changes between Version 2 and Version 3 of waue/2009/SEC_to_ICAS

Timestamp:

Aug 4, 2009, 5:43:44 PM (16 years ago)

Author:

waue

Comment:

--

waue/2009/SEC_to_ICAS

@@ -181 +181 @@
 
 {{{
+#!java
         public static class ICAS_M extends MapReduceBase implements
                         Mapper<LongWritable, Text, Text, Text> {
@@ -198 +199 @@
                         String source_ip = getip(str[11]);
                         String dest_ip = getip(str[12]);
-                        String fkey = dest_ip ;
+                        String fkey = dest_ip + "<=" + str[3];
 
                         String date = str[5] + "/" + str[6] + "/" + str[7] + "_" + str[8]
                                         + ":" + str[9] + ":" + str[10];
                         // source @ date @ sig @ class @ type
-                        String fvalue = source_ip + "@" + date + "@" + str[3] +"@" +str[4] 
+                        String fvalue = source_ip + "@" + date + "@"  +"@" +str[4] 
                               + "@"+ str[13];
                         output.collect(new Text(fkey), new Text(fvalue));
@@ -215 +216 @@
 
 {{{
+#!java
         public static class ICAS_R extends TableReduce<Text, Text> {
 
@@ -236 +238 @@
                         // values.next().getByte() can get value and transfer to byte form,
                         while (values.hasNext()) {
-                                // source_ip + "@" + date + "@" + sig + "@" + class + "@" + type;
+                                // source_ip + "@" + date + "@" + class + "@" + type;
                                 rawstr = new String(values.next().getBytes());
                                 str = rawstr.split("@");
@@ -248 +250 @@
                         // map.setTimestamp(timestamp);
                         map.put("infor:source_ip", Bytes.toBytes(source_ip));
-                        map.put("infor:signature", Bytes.toBytes(signature));
                         map.put("infor:date", Bytes.toBytes(date));
                         map.put("infor:class", Bytes.toBytes(sig_class));