import java.io.EOFException;
import java.net.UnknownHostException;
+import java.time.Duration;
import java.time.Instant;
import java.util.*;
import java.util.concurrent.TimeoutException;
// final String inputPcapFile = path + "/experimental_result/standalone/dlink-plug/wlan1/dlink-plug.wlan1.local.pcap";
// final String outputPcapFile = path + "/experimental_result/standalone/dlink-plug/wlan1/dlink-plug-processed.pcap";
// final String triggerTimesFile = path + "/experimental_result/standalone/dlink-plug/timestamps/dlink-plug-nov-7-2018.timestamps";
-// //final String deviceIp = "192.168.1.199"; // .246 == phone; .199 == dlink plug?
-// final String deviceIp = "192.168.1.246"; // .246 == phone; .199 == dlink plug?
+// final String deviceIp = "192.168.1.199"; // .246 == phone; .199 == dlink plug?
+//// final String deviceIp = "192.168.1.246"; // .246 == phone; .199 == dlink plug?
// 2) TP-Link July 25 experiment
// final String inputPcapFile = path + "/2018-07/tplink/tplink.wlan1.local.pcap";
// final String inputPcapFile = path + "/2018-10/tplink-plug/tplink-plug.wlan1.local.pcap";
// final String outputPcapFile = path + "/2018-10/tplink-plug/tplink-plug-processed.pcap";
// final String triggerTimesFile = path + "/2018-10/tplink-plug/tplink-plug-oct-17-2018.timestamps";
-// final String deviceIp = "192.168.1.246"; // .246 == phone; .159 == tplink plug
+// final String deviceIp = "192.168.1.159"; // .246 == phone; .159 == tplink plug
// TODO: EXPERIMENT - November 8, 2018
// final String inputPcapFile = path + "/experimental_result/standalone/tplink-plug/wlan1/tplink-plug.wlan1.local.pcap";
// final String outputPcapFile = path + "/experimental_result/standalone/tplink-plug/wlan1/tplink-plug-processed.pcap";
// final String inputPcapFile = path + "/experimental_result/standalone/hue-bulb/wlan1/hue-bulb.wlan1.local.pcap";
// final String outputPcapFile = path + "/experimental_result/standalone/hue-bulb/wlan1/hue-bulb-processed.pcap";
// final String triggerTimesFile = path + "/experimental_result/standalone/hue-bulb/timestamps/hue-bulb-nov-19-2018.timestamps";
-// final String deviceIp = "192.168.1.100"; // .246 == phone; .100 == Hue hub
+//// final String deviceIp = "192.168.1.100"; // .246 == phone; .100 == Hue hub
// final String deviceIp = "192.168.1.246"; // .246 == phone; .100 == Hue hub
// 9) Lifx Bulb August 8 experiment
// final String outputPcapFile = path + "/2018-10/blossom-sprinkler/blossom-sprinkler-processed.pcap";
// final String triggerTimesFile = path + "/2018-10/blossom-sprinkler/blossom-sprinkler-nov-2-2018.timestamps";
// final String deviceIp = "192.168.1.229"; // .246 == phone; .229 == sprinkler
- // January 9, 11
- final String inputPcapFile = path + "/experimental_result/standalone/blossom-sprinkler/wlan1/blossom-sprinkler.wlan1.local.pcap";
- final String outputPcapFile = path + "/experimental_result/standalone/blossom-sprinkler/wlan1/blossom-sprinkler-processed.pcap";
- final String triggerTimesFile = path + "/experimental_result/standalone/blossom-sprinkler/timestamps/blossom-sprinkler-standalone-jan-9-2019.timestamps";
-// final String triggerTimesFile = path + "/experimental_result/standalone/blossom-sprinkler/timestamps/blossom-sprinkler-standalone-jan-11-2019.timestamps";
- final String deviceIp = "192.168.1.246"; // .246 == phone; .229 == sprinkler
+ // January 9, 11, 13, 14
+// final String inputPcapFile = path + "/experimental_result/standalone/blossom-sprinkler/wlan1/blossom-sprinkler.wlan1.local.pcap";
+// final String outputPcapFile = path + "/experimental_result/standalone/blossom-sprinkler/wlan1/blossom-sprinkler-processed.pcap";
+// final String triggerTimesFile = path + "/experimental_result/standalone/blossom-sprinkler/timestamps/blossom-sprinkler-standalone-jan-14-2019.timestamps";
+//// final String triggerTimesFile = path + "/experimental_result/standalone/blossom-sprinkler/timestamps/blossom-sprinkler-standalone-jan-11-2019.timestamps";
+// final String deviceIp = "192.168.1.246"; // .246 == phone; .229 == sprinkler
+//// final String deviceIp = "192.168.1.229"; // .246 == phone; .229 == sprinkler
// // 13) DLink siren August 14 experiment
// final String inputPcapFile = path + "/2018-08/dlink-siren/dlink-siren.wlan1.local.pcap";
// final String inputPcapFile = path + "/experimental_result/standalone/dlink-siren/wlan1/dlink-siren.wlan1.local.pcap";
// final String outputPcapFile = path + "/experimental_result/standalone/dlink-siren/wlan1/dlink-siren-processed.pcap";
// final String triggerTimesFile = path + "/experimental_result/standalone/dlink-siren/timestamps/dlink-siren-nov-9-2018.timestamps";
-// final String deviceIp = "192.168.1.183"; // .246 == phone; .183 == siren
-//// final String deviceIp = "192.168.1.246"; // .246 == phone; .183 == siren
+//// final String deviceIp = "192.168.1.183"; // .246 == phone; .183 == siren
+// final String deviceIp = "192.168.1.246"; // .246 == phone; .183 == siren
// 14) Nest thermostat August 15 experiment
// final String inputPcapFile = path + "/2018-08/nest/nest.wlan1.local.pcap";
// final String outputPcapFile = path + "/2018-08/nest/nest-processed.pcap";
// final String triggerTimesFile = path + "/2018-08/nest/nest-aug-15-2018.timestamps";
// final String deviceIp = "192.168.1.246"; // .246 == phone; .127 == Nest thermostat
- // TODO: EXPERIMENT - November 14, 2018
+// // TODO: EXPERIMENT - November 14, 2018
// final String inputPcapFile = path + "/experimental_result/standalone/nest-thermostat/wlan1/nest-thermostat.wlan1.local.pcap";
// final String outputPcapFile = path + "/experimental_result/standalone/nest-thermostat/wlan1/nest-thermostat-processed.pcap";
//// final String inputPcapFile = path + "/experimental_result/standalone/nest-thermostat/eth0/nest-thermostat.eth1.local.pcap";
// final String triggerTimesFile = path + "/2018-08/noise/kwikset-doorlock-noise-sept-27-2018.timestamps";
// final String deviceIp = "192.168.1.142"; // .142 == SmartThings Hub;
+ // TODO: The below part is just for 15-second time sensitivity experiment
+ // TODO: The below part is just for 15-second time sensitivity experiment
+ // TODO: The below part is just for 15-second time sensitivity experiment
+ // D-Link plug
+// final String triggerTimesFile = path + "/experimental_result/standalone/dlink-plug/timestamps/dlink-plug-nov-7-2018.timestamps";
+//// final String onSignatureFile = path + "/experimental_result/standalone/dlink-plug/signatures/dlink-plug-onSignature-phone-side.sig";
+//// final String offSignatureFile = path + "/experimental_result/standalone/dlink-plug/signatures/dlink-plug-offSignature-phone-side.sig";
+// final String onSignatureFile = path + "/experimental_result/standalone/dlink-plug/signatures/dlink-plug-onSignature-device-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/dlink-plug/signatures/dlink-plug-offSignature-device-side.sig";
+ // TP-Link plug
+// final String triggerTimesFile = path + "/experimental_result/standalone/tplink-plug/timestamps/tplink-plug-nov-8-2018.timestamps";
+//// final String onSignatureFile = path + "/experimental_result/standalone/tplink-plug/signatures/tplink-plug-onSignature-phone-side.sig";
+//// final String offSignatureFile = path + "/experimental_result/standalone/tplink-plug/signatures/tplink-plug-offSignature-phone-side.sig";
+// final String onSignatureFile = path + "/experimental_result/standalone/tplink-plug/signatures/tplink-plug-onSignature-device-side-outbound.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/tplink-plug/signatures/tplink-plug-offSignature-device-side-outbound.sig";
+ // D-Link siren
+// final String triggerTimesFile = path + "/experimental_result/standalone/dlink-siren/timestamps/dlink-siren-nov-9-2018.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/dlink-siren/signatures/dlink-siren-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/dlink-siren/signatures/dlink-siren-offSignature-phone-side.sig";
+ // Kwikset door lock
+// final String triggerTimesFile = path + "/experimental_result/standalone/kwikset-doorlock/timestamps/kwikset-doorlock-nov-10-2018.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/kwikset-doorlock/signatures/kwikset-doorlock-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/kwikset-doorlock/signatures/kwikset-doorlock-offSignature-phone-side.sig";
+ // SmartThings plug
+// final String triggerTimesFile = path + "/experimental_result/standalone/st-plug/timestamps/st-plug-nov-12-2018.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/st-plug/signatures/st-plug-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/st-plug/signatures/st-plug-offSignature-phone-side.sig";
+ // Arlo Q
+// final String triggerTimesFile = path + "/experimental_result/standalone/arlo-camera/timestamps/arlo-camera-nov-13-2018.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/arlo-camera/signatures/arlo-camera-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/arlo-camera/signatures/arlo-camera-offSignature-phone-side.sig";
+ // Nest thermostat
+// final String triggerTimesFile = path + "/experimental_result/standalone/nest-thermostat/timestamps/nest-thermostat-nov-15-2018.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/nest-thermostat/signatures/nest-thermostat-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/nest-thermostat/signatures/nest-thermostat-offSignature-phone-side.sig";
+ // Blossom sprinkler
+// final String triggerTimesFile = path + "/experimental_result/standalone/blossom-sprinkler/timestamps/blossom-sprinkler-standalone-jan-14-2019.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/blossom-sprinkler/signatures/blossom-sprinkler-onSignature-device-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/blossom-sprinkler/signatures/blossom-sprinkler-offSignature-device-side.sig";
+// final String onSignatureFile = path + "/experimental_result/standalone/blossom-sprinkler/signatures/blossom-sprinkler-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/blossom-sprinkler/signatures/blossom-sprinkler-offSignature-phone-side.sig";
+ // TP-Link bulb
+// final String triggerTimesFile = path + "/experimental_result/standalone/tplink-bulb/timestamps/tplink-bulb-nov-16-2018.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/tplink-bulb/signatures/tplink-bulb-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/tplink-bulb/signatures/tplink-bulb-offSignature-phone-side.sig";
+ // Philips hue
+// final String triggerTimesFile = path + "/2018-08/hue-bulb/hue-bulb-aug-7-2018.timestamps";
+// final String onSignatureFile = path + "/training/hue-bulb/signatures/hue-bulb-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/training/hue-bulb/signatures/hue-bulb-offSignature-phone-side.sig";
+ // WeMo plug
+// final String triggerTimesFile = path + "/experimental_result/standalone/wemo-plug/timestamps/wemo-plug-nov-20-2018.timestamps";
+// final String onSignatureFile = path + "/experimental_result/standalone/wemo-plug/signatures/wemo-plug-onSignature-phone-side.sig";
+// final String offSignatureFile = path + "/experimental_result/standalone/wemo-plug/signatures/wemo-plug-offSignature-phone-side.sig";
+ // WeMo Insight plug
+ final String triggerTimesFile = path + "/experimental_result/standalone/wemo-insight-plug/timestamps/wemo-insight-plug-nov-21-2018.timestamps";
+ final String onSignatureFile = path + "/experimental_result/standalone/wemo-insight-plug/signatures/wemo-insight-plug-onSignature-phone-side.sig";
+ final String offSignatureFile = path + "/experimental_result/standalone/wemo-insight-plug/signatures/wemo-insight-plug-offSignature-phone-side.sig";
+
+
TriggerTimesFileReader ttfr = new TriggerTimesFileReader();
List<Instant> triggerTimes = ttfr.readTriggerTimes(triggerTimesFile, false);
- // Tag each trigger with "ON" or "OFF", assuming that the first trigger is an "ON" and that they alternate.
- List<UserAction> userActions = new ArrayList<>();
- for (int i = 0; i < triggerTimes.size(); i++) {
- userActions.add(new UserAction(i % 2 == 0 ? Type.TOGGLE_ON : Type.TOGGLE_OFF, triggerTimes.get(i)));
+
+ System.out.println("ON signature file in use is " + onSignatureFile);
+ System.out.println("OFF signature file in use is " + offSignatureFile);
+
+ List<List<List<PcapPacket>>> onSignature = PrintUtils.deserializeSignatureFromFile(onSignatureFile);
+ List<List<List<PcapPacket>>> offSignature = PrintUtils.deserializeSignatureFromFile(offSignatureFile);
+
+ List<Instant> signatureTimestamps = new ArrayList<>();
+ // Load ON signature last packet's timestamp
+ // Get the last only
+ List<List<PcapPacket>> lastListOn = onSignature.get(onSignature.size()-1);
+ for (List<PcapPacket> list : lastListOn) {
+ // Get timestamp Instant from the last packet
+ int lastPacketIndex = list.size()-1;
+ signatureTimestamps.add(list.get(lastPacketIndex).getTimestamp());
+ }
+ // Load OFF signature last packet's timestamp
+ // Get the last only
+ List<List<PcapPacket>> lastListOff = offSignature.get(offSignature.size()-1);
+ for (List<PcapPacket> list : lastListOff) {
+ // Get timestamp Instant from the last packet
+ int lastPacketIndex = list.size()-1;
+ signatureTimestamps.add(list.get(lastPacketIndex).getTimestamp());
+ }
+ // Sort the timestamps
+ signatureTimestamps.sort((p1, p2) -> {
+ return p1.compareTo(p2);
+ });
+
+ Iterator<Instant> iterTrig = triggerTimes.iterator();
+ Iterator<Instant> iterSign = signatureTimestamps.iterator();
+ System.out.println("Trigger to Last Packet:");
+ while (iterTrig.hasNext() && iterSign.hasNext()) {
+ Instant trigInst = (Instant) iterTrig.next();
+ Instant signInst = (Instant) iterSign.next();
+ Duration dur = Duration.between(trigInst, signInst);
+ long duration = dur.toMillis();
+ // Check duration --- should be below 15 seconds
+ if (duration >= 0 && duration <= 15000) {
+ System.out.println(dur.toMillis());
+ } else if (duration > 15000) {
+ while (duration > 15000) { // that means we have to move to the next trigger
+ trigInst = (Instant) iterTrig.next();
+ dur = Duration.between(trigInst, signInst);
+ duration = dur.toMillis();
+ }
+ System.out.println(dur.toMillis());
+ } else { // below 0 / negative --- that means we have to move to the next signature
+ while (duration < 0) { // that means we have to move to the next trigger
+ signInst = (Instant) iterSign.next();
+ dur = Duration.between(trigInst, signInst);
+ duration = dur.toMillis();
+ }
+ System.out.println(dur.toMillis());
+ }
+ }
+
+
+ // ==========================================================================
+ List<Instant> firstSignatureTimestamps = new ArrayList<>();
+ List<Instant> lastSignatureTimestamps = new ArrayList<>();
+ List<List<PcapPacket>> firstListOnSign = onSignature.get(0);
+ List<List<PcapPacket>> lastListOnSign = onSignature.get(onSignature.size()-1);
+ // Load ON signature first and last packet's timestamps
+ for (List<PcapPacket> list : firstListOnSign) {
+ // Get timestamp Instant from the last packet
+ firstSignatureTimestamps.add(list.get(0).getTimestamp());
}
- TriggerTrafficExtractor tte = new TriggerTrafficExtractor(inputPcapFile, triggerTimes, deviceIp);
- final PcapDumper outputter = Pcaps.openDead(DataLinkType.EN10MB, 65536).dumpOpen(outputPcapFile);
- DnsMap dnsMap = new DnsMap();
- TcpReassembler tcpReassembler = new TcpReassembler();
- TrafficLabeler trafficLabeler = new TrafficLabeler(userActions);
- tte.performExtraction(pkt -> {
- try {
- outputter.dump(pkt);
- } catch (NotOpenException e) {
- e.printStackTrace();
+ for (List<PcapPacket> list : lastListOnSign) {
+ // Get timestamp Instant from the last packet
+ int lastPacketIndex = list.size()-1;
+ lastSignatureTimestamps.add(list.get(lastPacketIndex).getTimestamp());
+ }
+
+ List<List<PcapPacket>> firstListOffSign = offSignature.get(0);
+ List<List<PcapPacket>> lastListOffSign = offSignature.get(offSignature.size()-1);
+ // Load OFF signature first and last packet's timestamps
+ for (List<PcapPacket> list : firstListOffSign) {
+ // Get timestamp Instant from the last packet
+ firstSignatureTimestamps.add(list.get(0).getTimestamp());
+ }
+ for (List<PcapPacket> list : lastListOffSign) {
+ // Get timestamp Instant from the last packet
+ int lastPacketIndex = list.size()-1;
+ lastSignatureTimestamps.add(list.get(lastPacketIndex).getTimestamp());
+ }
+ // Sort the timestamps
+ firstSignatureTimestamps.sort((p1, p2) -> {
+ return p1.compareTo(p2);
+ });
+ // Sort the timestamps
+ lastSignatureTimestamps.sort((p1, p2) -> {
+ return p1.compareTo(p2);
+ });
+
+ Iterator<Instant> iterFirst = firstSignatureTimestamps.iterator();
+ Iterator<Instant> iterLast = lastSignatureTimestamps.iterator();
+ System.out.println("First to Last Packet:");
+ while (iterFirst.hasNext() && iterLast.hasNext()) {
+ Instant firstInst = (Instant) iterFirst.next();
+ Instant lastInst = (Instant) iterLast.next();
+ Duration dur = Duration.between(firstInst, lastInst);
+ long duration = dur.toMillis();
+ // Check duration --- should be below 15 seconds
+ if (duration >= 0 && duration <= 15000) {
+ System.out.println(dur.toMillis());
+ } else if (duration > 15000) {
+ while (duration > 15000) { // that means we have to move to the next trigger
+ firstInst = (Instant) iterFirst.next();
+ dur = Duration.between(firstInst, lastInst);
+ duration = dur.toMillis();
+ }
+ System.out.println(dur.toMillis());
+ } else { // below 0 / negative --- that means we have to move to the next signature
+ while (duration < 0) { // that means we have to move to the next trigger
+ lastInst = (Instant) iterLast.next();
+ dur = Duration.between(firstInst, lastInst);
+ duration = dur.toMillis();
+ }
+ System.out.println(dur.toMillis());
+ }
+ if (duration > 8000) {
+ break;
}
- }, dnsMap, tcpReassembler, trafficLabeler);
- outputter.flush();
- outputter.close();
-
- if (tte.getPacketsIncludedCount() != trafficLabeler.getTotalPacketCount()) {
- // Sanity/debug check
- throw new AssertionError(String.format("mismatch between packet count in %s and %s",
- TriggerTrafficExtractor.class.getSimpleName(), TrafficLabeler.class.getSimpleName()));
}
- // Extract all conversations present in the filtered trace.
- List<Conversation> allConversations = tcpReassembler.getTcpConversations();
- // Group conversations by hostname.
- Map<String, List<Conversation>> convsByHostname = TcpConversationUtils.groupConversationsByHostname(allConversations, dnsMap);
- System.out.println("Grouped conversations by hostname.");
- // For each hostname, count the frequencies of packet lengths exchanged with that hostname.
- final Map<String, Map<Integer, Integer>> pktLenFreqsByHostname = new HashMap<>();
- convsByHostname.forEach((host, convs) -> pktLenFreqsByHostname.put(host, TcpConversationUtils.countPacketLengthFrequencies(convs)));
- System.out.println("Counted frequencies of packet lengths exchanged with each hostname.");
- // For each hostname, count the frequencies of packet sequences (i.e., count how many conversations exchange a
- // sequence of packets of some specific lengths).
- final Map<String, Map<String, Integer>> pktSeqFreqsByHostname = new HashMap<>();
- convsByHostname.forEach((host, convs) -> pktSeqFreqsByHostname.put(host, TcpConversationUtils.countPacketSequenceFrequencies(convs)));
- System.out.println("Counted frequencies of packet sequences exchanged with each hostname.");
- // For each hostname, count frequencies of packet pairs exchanged with that hostname across all conversations
- final Map<String, Map<String, Integer>> pktPairFreqsByHostname =
- TcpConversationUtils.countPacketPairFrequenciesByHostname(allConversations, dnsMap);
- System.out.println("Counted frequencies of packet pairs per hostname");
- // For each user action, reassemble the set of TCP connections occurring shortly after
- final Map<UserAction, List<Conversation>> userActionToConversations = trafficLabeler.getLabeledReassembledTcpTraffic();
- final Map<UserAction, Map<String, List<Conversation>>> userActionsToConvsByHostname = trafficLabeler.getLabeledReassembledTcpTraffic(dnsMap);
- System.out.println("Reassembled TCP conversations occurring shortly after each user event");
+ // TODO: The above part is just for 15-second time sensitivity experiment
+ // TODO: The above part is just for 15-second time sensitivity experiment
+ // TODO: The above part is just for 15-second time sensitivity experiment
+
+
+
+
+// TriggerTimesFileReader ttfr = new TriggerTimesFileReader();
+// List<Instant> triggerTimes = ttfr.readTriggerTimes(triggerTimesFile, false);
+// // Tag each trigger with "ON" or "OFF", assuming that the first trigger is an "ON" and that they alternate.
+// List<UserAction> userActions = new ArrayList<>();
+// for (int i = 0; i < triggerTimes.size(); i++) {
+// userActions.add(new UserAction(i % 2 == 0 ? Type.TOGGLE_ON : Type.TOGGLE_OFF, triggerTimes.get(i)));
+// }
+// TriggerTrafficExtractor tte = new TriggerTrafficExtractor(inputPcapFile, triggerTimes, deviceIp);
+// final PcapDumper outputter = Pcaps.openDead(DataLinkType.EN10MB, 65536).dumpOpen(outputPcapFile);
+// DnsMap dnsMap = new DnsMap();
+// TcpReassembler tcpReassembler = new TcpReassembler();
+// TrafficLabeler trafficLabeler = new TrafficLabeler(userActions);
+// tte.performExtraction(pkt -> {
+// try {
+// outputter.dump(pkt);
+// } catch (NotOpenException e) {
+// e.printStackTrace();
+// }
+// }, dnsMap, tcpReassembler, trafficLabeler);
+// outputter.flush();
+// outputter.close();
+//
+// if (tte.getPacketsIncludedCount() != trafficLabeler.getTotalPacketCount()) {
+// // Sanity/debug check
+// throw new AssertionError(String.format("mismatch between packet count in %s and %s",
+// TriggerTrafficExtractor.class.getSimpleName(), TrafficLabeler.class.getSimpleName()));
+// }
+//
+// // Extract all conversations present in the filtered trace.
+// List<Conversation> allConversations = tcpReassembler.getTcpConversations();
+// // Group conversations by hostname.
+// Map<String, List<Conversation>> convsByHostname = TcpConversationUtils.groupConversationsByHostname(allConversations, dnsMap);
+// System.out.println("Grouped conversations by hostname.");
+// // For each hostname, count the frequencies of packet lengths exchanged with that hostname.
+// final Map<String, Map<Integer, Integer>> pktLenFreqsByHostname = new HashMap<>();
+// convsByHostname.forEach((host, convs) -> pktLenFreqsByHostname.put(host, TcpConversationUtils.countPacketLengthFrequencies(convs)));
+// System.out.println("Counted frequencies of packet lengths exchanged with each hostname.");
+// // For each hostname, count the frequencies of packet sequences (i.e., count how many conversations exchange a
+// // sequence of packets of some specific lengths).
+// final Map<String, Map<String, Integer>> pktSeqFreqsByHostname = new HashMap<>();
+// convsByHostname.forEach((host, convs) -> pktSeqFreqsByHostname.put(host, TcpConversationUtils.countPacketSequenceFrequencies(convs)));
+// System.out.println("Counted frequencies of packet sequences exchanged with each hostname.");
+// // For each hostname, count frequencies of packet pairs exchanged with that hostname across all conversations
+// final Map<String, Map<String, Integer>> pktPairFreqsByHostname =
+// TcpConversationUtils.countPacketPairFrequenciesByHostname(allConversations, dnsMap);
+// System.out.println("Counted frequencies of packet pairs per hostname");
+// // For each user action, reassemble the set of TCP connections occurring shortly after
+// final Map<UserAction, List<Conversation>> userActionToConversations = trafficLabeler.getLabeledReassembledTcpTraffic();
+// final Map<UserAction, Map<String, List<Conversation>>> userActionsToConvsByHostname = trafficLabeler.getLabeledReassembledTcpTraffic(dnsMap);
+// System.out.println("Reassembled TCP conversations occurring shortly after each user event");
// ================================================ CLUSTERING ================================================
// Note: no need to use the more convoluted on/off maps; can simply use the UserAction->List<Conversation> map
// when don't care about hostnames and sequences (see comment earlier).
- List<Conversation> onConversations = userActionToConversations.entrySet().stream().
- filter(e -> e.getKey().getType() == Type.TOGGLE_ON). // drop all OFF events from stream
- map(e -> e.getValue()). // no longer interested in the UserActions
- flatMap(List::stream). // flatten List<List<T>> to a List<T>
- collect(Collectors.toList());
- List<Conversation> offConversations = userActionToConversations.entrySet().stream().
- filter(e -> e.getKey().getType() == Type.TOGGLE_OFF).
- map(e -> e.getValue()).
- flatMap(List::stream).
- collect(Collectors.toList());
- //Collections.sort(onConversations, (c1, c2) -> c1.getPackets().)
-
- List<PcapPacketPair> onPairs = onConversations.stream().
- map(c -> c.isTls() ? TcpConversationUtils.extractTlsAppDataPacketPairs(c) :
- TcpConversationUtils.extractPacketPairs(c)).
- flatMap(List::stream). // flatten List<List<>> to List<>
- collect(Collectors.toList());
- List<PcapPacketPair> offPairs = offConversations.stream().
- map(c -> c.isTls() ? TcpConversationUtils.extractTlsAppDataPacketPairs(c) :
- TcpConversationUtils.extractPacketPairs(c)).
- flatMap(List::stream). // flatten List<List<>> to List<>
- collect(Collectors.toList());
- // Note: need to update the DnsMap of all PcapPacketPairs if we want to use the IP/hostname-sensitive distance.
- Stream.concat(Stream.of(onPairs), Stream.of(offPairs)).flatMap(List::stream).forEach(p -> p.setDnsMap(dnsMap));
- // Perform clustering on conversation logged as part of all ON events.
- DBSCANClusterer<PcapPacketPair> onClusterer = new DBSCANClusterer<>(10.0, 45);
- //DBSCANClusterer<PcapPacketPair> onClusterer = new DBSCANClusterer<>(7.0, 45);
- //DBSCANClusterer<PcapPacketPair> onClusterer = new DBSCANClusterer<>(10.0, 10);
- List<Cluster<PcapPacketPair>> onClusters = onClusterer.cluster(onPairs);
- // Perform clustering on conversation logged as part of all OFF events.
- DBSCANClusterer<PcapPacketPair> offClusterer = new DBSCANClusterer<>(10.0, 45);
- //DBSCANClusterer<PcapPacketPair> offClusterer = new DBSCANClusterer<>(7.0, 45);
- //DBSCANClusterer<PcapPacketPair> offClusterer = new DBSCANClusterer<>(10.0, 10);
- List<Cluster<PcapPacketPair>> offClusters = offClusterer.cluster(offPairs);
- // Sort the conversations as reference
- List<Conversation> sortedAllConversation = TcpConversationUtils.sortConversationList(allConversations);
- // Output clusters
- System.out.println("========================================");
- System.out.println(" Clustering results for ON ");
- System.out.println(" Number of clusters: " + onClusters.size());
- int count = 0;
- List<List<List<PcapPacket>>> ppListOfListReadOn = new ArrayList<>();
- List<List<List<PcapPacket>>> ppListOfListListOn = new ArrayList<>();
- for (Cluster<PcapPacketPair> c : onClusters) {
- System.out.println(String.format("<<< Cluster #%02d (%03d points) >>>", ++count, c.getPoints().size()));
- System.out.print(PrintUtils.toSummaryString(c));
- if(c.getPoints().size() > 45 && c.getPoints().size() < 55) {
- //if(c.getPoints().size() > 25) {
- // Print to file
- List<List<PcapPacket>> ppListOfList = PcapPacketUtils.clusterToListOfPcapPackets(c);
- ppListOfListListOn.add(ppListOfList);
- }
- }
- // TODO: Merging test
- ppListOfListListOn = PcapPacketUtils.mergeSignatures(ppListOfListListOn, sortedAllConversation);
- ppListOfListListOn = PcapPacketUtils.sortSignatures(ppListOfListListOn);
- // TODO: Need to remove sequence numbers 0,1 for Blossom phone side since it is not a good signature!
- PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 0);
- PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 1);
- // TODO: Need to remove sequence numbers 0 for Blossom device side since it is not a good signature!
-// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 0);
-// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 0);
- // TODO: Need to remove sequence number 2 for ST plug since it is not a good signature!
- //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 2);
- // TODO: Need to remove sequence number 0 for Arlo Camera since it is not a good signature!
- //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 0);
- // TODO: Need to remove sequence number 0 for TP-Link plug since it is not a good signature!
- // TODO: This sequence actually belongs to the local communication between the plug and the phone
- //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 0);
- PcapPacketUtils.printSignatures(ppListOfListListOn);
- //count = 0;
- /*for (List<List<PcapPacket>> ll : ppListOfListListOn) {
- PrintUtils.serializeClustersIntoFile("./onSignature" + ++count + ".sig", ll);
- ppListOfListReadOn.add(PrintUtils.deserializeClustersFromFile("./onSignature" + count + ".sig"));
- }*/
- PrintUtils.serializeSignatureIntoFile("./onSignature.sig", ppListOfListListOn);
- ppListOfListReadOn = PrintUtils.deserializeSignatureFromFile("./onSignature.sig");
-
- System.out.println("========================================");
- System.out.println(" Clustering results for OFF ");
- System.out.println(" Number of clusters: " + offClusters.size());
- count = 0;
- List<List<List<PcapPacket>>> ppListOfListReadOff = new ArrayList<>();
- List<List<List<PcapPacket>>> ppListOfListListOff = new ArrayList<>();
- for (Cluster<PcapPacketPair> c : offClusters) {
- System.out.println(String.format("<<< Cluster #%03d (%06d points) >>>", ++count, c.getPoints().size()));
- System.out.print(PrintUtils.toSummaryString(c));
- if(c.getPoints().size() > 45 && c.getPoints().size() < 55) {
- //if(c.getPoints().size() > 25) {
- // Print to file
- List<List<PcapPacket>> ppListOfList = PcapPacketUtils.clusterToListOfPcapPackets(c);
- ppListOfListListOff.add(ppListOfList);
- }
- }
- // TODO: Merging test
- ppListOfListListOff = PcapPacketUtils.mergeSignatures(ppListOfListListOff, sortedAllConversation);
- ppListOfListListOff = PcapPacketUtils.sortSignatures(ppListOfListListOff);
- // TODO: Need to remove sequence numbers 0,2 for Blossom device side since it is not a good signature!
-// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 0);
-// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 0);
- // TODO: Need to remove sequence number 1 for Nest Thermostat since it is not a good signature!
- //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 1);
- // TODO: Need to remove sequence number 0 for Arlo Camera since it is not a good signature!
- //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 1);
- // TODO: Need to remove sequence number 2 for ST plug since it is not a good signature!
- //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 2);
- // TODO: Need to remove sequence number 0 for TP-Link plug since it is not a good signature!
- // TODO: This sequence actually belongs to the local communication between the plug and the phone
- //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 0);
- PcapPacketUtils.printSignatures(ppListOfListListOff);
- //count = 0;
- /*for (List<List<PcapPacket>> ll : ppListOfListListOff) {
- PrintUtils.serializeClustersIntoFile("./offSignature" + ++count + ".sig", ll);
- ppListOfListReadOff.add(PrintUtils.deserializeClustersFromFile("./offSignature" + count + ".sig"));
- }*/
- PrintUtils.serializeSignatureIntoFile("./offSignature.sig", ppListOfListListOff);
- ppListOfListReadOff = PrintUtils.deserializeSignatureFromFile("./offSignature.sig");
- System.out.println("========================================");
+// List<Conversation> onConversations = userActionToConversations.entrySet().stream().
+// filter(e -> e.getKey().getType() == Type.TOGGLE_ON). // drop all OFF events from stream
+// map(e -> e.getValue()). // no longer interested in the UserActions
+// flatMap(List::stream). // flatten List<List<T>> to a List<T>
+// collect(Collectors.toList());
+// List<Conversation> offConversations = userActionToConversations.entrySet().stream().
+// filter(e -> e.getKey().getType() == Type.TOGGLE_OFF).
+// map(e -> e.getValue()).
+// flatMap(List::stream).
+// collect(Collectors.toList());
+// //Collections.sort(onConversations, (c1, c2) -> c1.getPackets().)
+//
+// List<PcapPacketPair> onPairs = onConversations.stream().
+// map(c -> c.isTls() ? TcpConversationUtils.extractTlsAppDataPacketPairs(c) :
+// TcpConversationUtils.extractPacketPairs(c)).
+// flatMap(List::stream). // flatten List<List<>> to List<>
+// collect(Collectors.toList());
+// List<PcapPacketPair> offPairs = offConversations.stream().
+// map(c -> c.isTls() ? TcpConversationUtils.extractTlsAppDataPacketPairs(c) :
+// TcpConversationUtils.extractPacketPairs(c)).
+// flatMap(List::stream). // flatten List<List<>> to List<>
+// collect(Collectors.toList());
+// // Note: need to update the DnsMap of all PcapPacketPairs if we want to use the IP/hostname-sensitive distance.
+// Stream.concat(Stream.of(onPairs), Stream.of(offPairs)).flatMap(List::stream).forEach(p -> p.setDnsMap(dnsMap));
+// // Perform clustering on conversation logged as part of all ON events.
+//// DBSCANClusterer<PcapPacketPair> onClusterer = new DBSCANClusterer<>(10.0, 45);
+// DBSCANClusterer<PcapPacketPair> onClusterer = new DBSCANClusterer<>(2, 2);
+// //DBSCANClusterer<PcapPacketPair> onClusterer = new DBSCANClusterer<>(10.0, 10);
+// List<Cluster<PcapPacketPair>> onClusters = onClusterer.cluster(onPairs);
+// // Perform clustering on conversation logged as part of all OFF events.
+//// DBSCANClusterer<PcapPacketPair> offClusterer = new DBSCANClusterer<>(10.0, 45);
+// DBSCANClusterer<PcapPacketPair> offClusterer = new DBSCANClusterer<>(2, 2);
+// //DBSCANClusterer<PcapPacketPair> offClusterer = new DBSCANClusterer<>(10.0, 10);
+// List<Cluster<PcapPacketPair>> offClusters = offClusterer.cluster(offPairs);
+// // Sort the conversations as reference
+// List<Conversation> sortedAllConversation = TcpConversationUtils.sortConversationList(allConversations);
+// // Output clusters
+// System.out.println("========================================");
+// System.out.println(" Clustering results for ON ");
+// System.out.println(" Number of clusters: " + onClusters.size());
+// int count = 0;
+// List<List<List<PcapPacket>>> ppListOfListReadOn = new ArrayList<>();
+// List<List<List<PcapPacket>>> ppListOfListListOn = new ArrayList<>();
+// for (Cluster<PcapPacketPair> c : onClusters) {
+// System.out.println(String.format("<<< Cluster #%02d (%03d points) >>>", ++count, c.getPoints().size()));
+// System.out.print(PrintUtils.toSummaryString(c));
+// if(c.getPoints().size() > 45 && c.getPoints().size() < 55) {
+// //if(c.getPoints().size() > 25) {
+// // Print to file
+// List<List<PcapPacket>> ppListOfList = PcapPacketUtils.clusterToListOfPcapPackets(c);
+// ppListOfListListOn.add(ppListOfList);
+// }
+// }
+// // TODO: Merging test
+// ppListOfListListOn = PcapPacketUtils.mergeSignatures(ppListOfListListOn, sortedAllConversation);
+// // TODO: Need to remove sequence 550 567 for Blossom phone side since it is not a good signature (overlap)!
+//// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 1);
+// // TODO: Need to remove sequence 69 296 for Blossom device side since it is not a good signature (overlap)!
+//// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 2);
+// // TODO: Need to remove sequence number 2 for ST plug since it is not a good signature!
+// //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 2);
+// // TODO: Need to remove sequence number 0 for Arlo Camera since it is not a good signature!
+// //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 0);
+// // TODO: Need to remove sequence number 0 for TP-Link plug since it is not a good signature!
+// // TODO: This sequence actually belongs to the local communication between the plug and the phone
+// //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOn, 0);
+// ppListOfListListOn = PcapPacketUtils.sortSignatures(ppListOfListListOn);
+// PcapPacketUtils.printSignatures(ppListOfListListOn);
+// //count = 0;
+// /*for (List<List<PcapPacket>> ll : ppListOfListListOn) {
+// PrintUtils.serializeClustersIntoFile("./onSignature" + ++count + ".sig", ll);
+// ppListOfListReadOn.add(PrintUtils.deserializeClustersFromFile("./onSignature" + count + ".sig"));
+// }*/
+// PrintUtils.serializeSignatureIntoFile("./onSignature.sig", ppListOfListListOn);
+// ppListOfListReadOn = PrintUtils.deserializeSignatureFromFile("./onSignature.sig");
+//
+// System.out.println("========================================");
+// System.out.println(" Clustering results for OFF ");
+// System.out.println(" Number of clusters: " + offClusters.size());
+// count = 0;
+// List<List<List<PcapPacket>>> ppListOfListReadOff = new ArrayList<>();
+// List<List<List<PcapPacket>>> ppListOfListListOff = new ArrayList<>();
+// for (Cluster<PcapPacketPair> c : offClusters) {
+// System.out.println(String.format("<<< Cluster #%03d (%06d points) >>>", ++count, c.getPoints().size()));
+// System.out.print(PrintUtils.toSummaryString(c));
+// if(c.getPoints().size() > 45 && c.getPoints().size() < 55) {
+// //if(c.getPoints().size() > 25) {
+// // Print to file
+// List<List<PcapPacket>> ppListOfList = PcapPacketUtils.clusterToListOfPcapPackets(c);
+// ppListOfListListOff.add(ppListOfList);
+// }
+// }
+// // TODO: Merging test
+// ppListOfListListOff = PcapPacketUtils.mergeSignatures(ppListOfListListOff, sortedAllConversation);
+// // TODO: Need to remove sequence 69 296 for Blossom device side since it is not a good signature (overlap)!
+//// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 3);
+// // TODO: Need to remove sequence number 1 for Nest Thermostat since it is not a good signature!
+// //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 1);
+// // TODO: Need to remove sequence number 0 for Arlo Camera since it is not a good signature!
+//// PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 1);
+// // TODO: Need to remove sequence number 2 for ST plug since it is not a good signature!
+// //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 2);
+// // TODO: Need to remove sequence number 0 for TP-Link plug since it is not a good signature!
+// // TODO: This sequence actually belongs to the local communication between the plug and the phone
+// //PcapPacketUtils.removeSequenceFromSignature(ppListOfListListOff, 0);
+// ppListOfListListOff = PcapPacketUtils.sortSignatures(ppListOfListListOff);
+// PcapPacketUtils.printSignatures(ppListOfListListOff);
+// //count = 0;
+// /*for (List<List<PcapPacket>> ll : ppListOfListListOff) {
+// PrintUtils.serializeClustersIntoFile("./offSignature" + ++count + ".sig", ll);
+// ppListOfListReadOff.add(PrintUtils.deserializeClustersFromFile("./offSignature" + count + ".sig"));
+// }*/
+// PrintUtils.serializeSignatureIntoFile("./offSignature.sig", ppListOfListListOff);
+// ppListOfListReadOff = PrintUtils.deserializeSignatureFromFile("./offSignature.sig");
+// System.out.println("========================================");
// ============================================================================================================
+ // TODO: This part is just for DBSCAN sensitivity experiment
+ // TODO: This part is just for DBSCAN sensitivity experiment
+ // TODO: This part is just for DBSCAN sensitivity experiment
+ // TODO: This part is just for DBSCAN sensitivity experiment
+ // TODO: This part is just for DBSCAN sensitivity experiment
+// List<Conversation> onConversations = userActionToConversations.entrySet().stream().
+// filter(e -> e.getKey().getType() == Type.TOGGLE_ON). // drop all OFF events from stream
+// map(e -> e.getValue()). // no longer interested in the UserActions
+// flatMap(List::stream). // flatten List<List<T>> to a List<T>
+// collect(Collectors.toList());
+// List<Conversation> offConversations = userActionToConversations.entrySet().stream().
+// filter(e -> e.getKey().getType() == Type.TOGGLE_OFF).
+// map(e -> e.getValue()).
+// flatMap(List::stream).
+// collect(Collectors.toList());
+// //Collections.sort(onConversations, (c1, c2) -> c1.getPackets().)
+//
+// List<PcapPacketPair> onPairs = onConversations.stream().
+// map(c -> c.isTls() ? TcpConversationUtils.extractTlsAppDataPacketPairs(c) :
+// TcpConversationUtils.extractPacketPairs(c)).
+// flatMap(List::stream). // flatten List<List<>> to List<>
+// collect(Collectors.toList());
+// List<PcapPacketPair> offPairs = offConversations.stream().
+// map(c -> c.isTls() ? TcpConversationUtils.extractTlsAppDataPacketPairs(c) :
+// TcpConversationUtils.extractPacketPairs(c)).
+// flatMap(List::stream). // flatten List<List<>> to List<>
+// collect(Collectors.toList());
+// // Note: need to update the DnsMap of all PcapPacketPairs if we want to use the IP/hostname-sensitive distance.
+// Stream.concat(Stream.of(onPairs), Stream.of(offPairs)).flatMap(List::stream).forEach(p -> p.setDnsMap(dnsMap));
+//
+// double eps = 10; // loop from eps 1-10
+// int minPts = 50; // loop from minPts 30-50
+// for(int epsCount = 1; epsCount <= eps; epsCount++) {
+// for(int minPtsCount = 30; minPtsCount <= minPts; minPtsCount++) {
+// System.out.println("Eps: " + epsCount + " --- minPts: " + minPtsCount);
+// DBSCANClusterer<PcapPacketPair> onClusterer = new DBSCANClusterer<>(epsCount, minPtsCount);
+// DBSCANClusterer<PcapPacketPair> offClusterer = new DBSCANClusterer<>(epsCount, minPtsCount);
+// List<Cluster<PcapPacketPair>> onClusters = onClusterer.cluster(onPairs);
+// List<Cluster<PcapPacketPair>> offClusters = offClusterer.cluster(offPairs);
+// // Sort the conversations as reference
+// List<Conversation> sortedAllConversation = TcpConversationUtils.sortConversationList(allConversations);
+// // Output clusters
+// System.out.println("========================================");
+// System.out.println(" Clustering results for ON ");
+// System.out.println(" Number of clusters: " + onClusters.size());
+// int count = 0;
+// List<List<List<PcapPacket>>> ppListOfListListOn = new ArrayList<>();
+// for (Cluster<PcapPacketPair> c : onClusters) {
+// System.out.println(String.format("<<< Cluster #%02d (%03d points) >>>", ++count, c.getPoints().size()));
+// System.out.print(PrintUtils.toSummaryString(c));
+// if (c.getPoints().size() > 45 && c.getPoints().size() < 55) {
+//// if(c.getPoints().size() > 25) {
+// // Print to file
+// List<List<PcapPacket>> ppListOfList = PcapPacketUtils.clusterToListOfPcapPackets(c);
+// ppListOfListListOn.add(ppListOfList);
+// }
+// }
+// PcapPacketUtils.printSignatures(ppListOfListListOn);
+//
+// System.out.println("========================================");
+// System.out.println(" Clustering results for OFF ");
+// System.out.println(" Number of clusters: " + offClusters.size());
+// count = 0;
+// List<List<List<PcapPacket>>> ppListOfListListOff = new ArrayList<>();
+// for (Cluster<PcapPacketPair> c : offClusters) {
+// System.out.println(String.format("<<< Cluster #%03d (%06d points) >>>", ++count, c.getPoints().size()));
+//// System.out.print(PrintUtils.toSummaryString(c));
+// if (c.getPoints().size() > 45 && c.getPoints().size() < 55) {
+// //if(c.getPoints().size() > 25) {
+// // Print to file
+// List<List<PcapPacket>> ppListOfList = PcapPacketUtils.clusterToListOfPcapPackets(c);
+// ppListOfListListOff.add(ppListOfList);
+// }
+// }
+// PcapPacketUtils.printSignatures(ppListOfListListOff);
+// System.out.println();
+// System.out.println();
+// System.out.println();
+// // ============================================================================================================
+// }
+// }
+
// // ================================================================================================
// // <<< Some work-in-progress/explorative code that extracts a "representative" sequence >>>
projects / pingpong.git / blobdiff