【发布时间】:2021-10-29 19:38:12
【问题描述】:
我正在尝试为网络 5 元组设置流 id,原始数据帧如下所示:
tup = [['192.168.0.1', '1032', '192.168.0.2', '443'],
['192.168.0.1', '1032', '192.168.0.2', '443'],
['192.168.0.1', '1034', '192.168.0.2', '443'],
['192.168.0.2', '443', '192.168.0.1', '1034'],
['192.168.0.1', '1034', '192.168.0.2', '443'],
['192.168.0.1', '1034', '192.168.0.2', '443'],
['192.168.0.2', '443', '192.168.0.1', '1034'],
['192.168.0.2', '443', '192.168.0.1', '1034'],
['192.168.0.1', '1032', '192.168.0.2', '443'],
['192.168.0.2', '443', '192.168.0.1', '1032']]
df = pd.DataFrame(tup,columns=['src','src_port','dst','dst_port'])
对于来自同一流(入站/出站)的流量,应将流 ID 设置为:
src src_port dst dst_port flow_id
0 192.168.0.1 1032 192.168.0.2 443 1
1 192.168.0.1 1032 192.168.0.2 443 1
2 192.168.0.1 1034 192.168.0.2 443 2
3 192.168.0.2 443 192.168.0.1 1034 2
4 192.168.0.1 1034 192.168.0.2 443 2
5 192.168.0.1 1034 192.168.0.2 443 2
6 192.168.0.2 443 192.168.0.1 1034 2
7 192.168.0.2 443 192.168.0.1 1034 2
8 192.168.0.1 1032 192.168.0.2 443 1
9 192.168.0.2 443 192.168.0.1 1032 1
我将数据帧转换为值并将它们排序在一起,但坚持设置正确的流索引。
有没有更快/优雅的方式?
【问题讨论】:
标签: python pandas pcap network-flow