Execution log for simulation run:

load saved models from 30k seconds sim time under base conditions
run for 960 seconds to allow traffic to stabilize; start agents
run 200 seconds before attacker port scan
fragmented packet attack starts 30-90 seconds after port scan

<<Blue text added; not part of output>>

On-screen viewing recommended. Do not print (it’s 50+ pages). Links provided for easier reading:

periodic actions
saying hello
ChAD event log
heuristics
using the event log
requesting status from peers
the attacker’s port scan
port scan shows up in ChAD event log
the attack starts
agent sees a problem
the attack shows up in ChAD event log
no response to ping
filter applied
attack traffic is blocked
some valid traffic is blocked
traffic is captured to find the source of the problem
a more specific filter is applied
peer notices the dropped packet count
ChAD model structure changes
ChAD model changes again

Note that though we are discussing this "attack" the agents are simply taking actions based on observations. They are responding to events without necessarily diagnosing the attack. As the actions and action selection mechanism matures, the agents’ methodology will be to respond to observations first, to improve or preserve network health, then continue gathering more information for root cause analysis or even for forensics.

C:\Documents and Settings\lynn>java -Xmx256m SSF.Net.Net 1300 C:\projects\reliability\masrrcode\masrr\examples\myScen1Build.dml c:\projects\reliability\masrrcode\masrr\examples\net.dml

<<set up peers>>

0.0 masrr5 agent = masrr6

0.0 masrr5 agent = masrr7

0.0 masrr6 agent = masrr5

0.0 masrr7 agent = masrr5

----------------------------------------------------------------------

| Raceway SSF 1.0b09 (2 May 2001)

| Proprietary Internal Development Release

----------------------------------------------------------------------

~# = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

~# IBGP Validation Test: success if 1 internal and 2 external msgs rcvd

~# = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

0.0 current dir = C:\projects\reliability\MASRRcode\MASRR

<<background noise port scan (not from attacker)>>

878.290817396 udpPortScan of 0:55(0), port 116

878.290917396 udpPortScan of 0:55(0), port 117

878.291017396 udpPortScan of 0:55(0), port 118

878.291117396 udpPortScan of 0:55(0), port 119

878.291217396 udpPortScan of 0:55(0), port 120

<<agent 5 monitors router>>

960.0 masrr5 Starting chad

<<agent 6 monitors web server>>

960.2 masrr6 Starting chad

<<agent 7 monitors file server>>

960.4 masrr7 Starting chad

<<agents set up periodic (repeating) actions>>

<<agents say hello to each other – and expect hellos from each other, every 30 seconds>>

961.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

<<agents collect snmp data every 10 seconds>>

961.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

<<cpu utilization (delay) monitored by snmp client every 2.5 seconds, but agents receive the value at the same interval as the rest of the snmp data>>

961.0 masrr5 Exec: 54 AtomicAction: "get CPUUtil buffer" bindings: <>

961.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

961.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

961.2 masrr6 Exec: 57 AtomicAction: "get CPUUtil buffer" bindings: <>

961.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

961.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

961.4 masrr7 Exec: 60 AtomicAction: "get CPUUtil buffer" bindings: <>

962.0 masrr5 EVENT LOG received =

<<agents receiving hellos from peers>>

962.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

962.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

962.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

masrr5:

963.0 wm AtomicAction "54 get CPUUtil buffer" got response: "started"

963.0 masrr5 rec'd message from masrr7 message type: 2, bindings = <command hello, peer masrr7, type peer, >

963.0 masrr7 EVENT LOG received =

masrr6:

963.2 wm AtomicAction "57 get CPUUtil buffer" got response: "started"

masrr7:

963.4 wm AtomicAction "60 get CPUUtil buffer" got response: "started"

971.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

971.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

971.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

<<agents get events from the Change Detection models; while the current behavior matches the learned behavior, the event logs are short (or, here, empty)>>

972.0 masrr5 EVENT LOG received =

972.2 masrr6 EVENT LOG received =

972.4 masrr7 EVENT LOG received =

<<Heuristics note acceptable ranges for the raw data, regardless of whether or not it represents "normal" – unfortunately, I set up the heuristic values for warnings and errors based on a 15-second polling period, but then changed the polling period to 10 before running the simulation. Running the baseline simulation to build the initial Change Detection models took too long to redo it! The heuristic indices are not yet used by agents to retrieve actions. Agents also note whether values are increasing or decreasing over time, after their warm-up data gathering.>>

973.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 899.2

973.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 1758.9

973.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 21262.0

973.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 3229.5

973.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1598.8

973.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1280.8

973.0 masrr5 - Create "error" index for ipForwDatagrams = 53.1

973.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 21349.6

973.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 3804.8

973.0 masrr5 WARM UP PERIOD LEFT = 4

973.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 2454.4

973.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 968.0

973.2 masrr6 WARM UP PERIOD LEFT = 4

973.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20727.234

973.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 1051.9149

973.4 masrr7 WARM UP PERIOD LEFT = 4

976.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 3730.5288

976.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 2244.129

976.2 masrr6 WARM UP PERIOD LEFT = 3

976.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21411.105

976.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 1735.7859

976.4 masrr7 WARM UP PERIOD LEFT = 3

977.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 2060.4902

977.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 2184.7065

977.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 21262.0

977.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 4390.79

977.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2024.6064

977.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1280.8

977.0 masrr5 - Create "error" index for ipForwDatagrams = 57.93871

977.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 23402.18

977.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 5857.381

977.0 masrr5 WARM UP PERIOD LEFT = 3

981.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

981.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

981.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

982.2 masrr5 EVENT LOG received =

C ipForwDatagrams 4000 3 1 Cred --> Cyellow

982.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 3998 0 301

E wwwSummaryOutBytesLow 3999 0 301

982.4 masrr7 EVENT LOG received =

C udpInDatagrams 4000 3 1 C0.500000 - 1.000000 --> C1.000000 - 1.500000

C udpOutDatagrams 4000 3 1 C0.500000 - 1.000000 --> C1.000000 - 1.500000

983.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 4694.7314

983.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 2740.6506

983.2 masrr6 WARM UP PERIOD LEFT = 2

983.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21564.729

983.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 1889.409

983.4 masrr7 WARM UP PERIOD LEFT = 2

984.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 2401.3352

984.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 2905.3403

984.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 21888.338

984.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 4959.8745

984.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2024.6064

984.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1452.631

984.0 masrr5 - Create "error" index for ipForwDatagrams = 60.121807

984.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 23402.18

984.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6351.747

984.0 masrr5 WARM UP PERIOD LEFT = 2

991.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

991.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

991.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 5958.846

991.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3095.054

991.2 masrr6 WARM UP PERIOD LEFT = 1

991.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

991.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

991.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21651.97

991.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 1976.6519

991.4 masrr7 WARM UP PERIOD LEFT = 1

991.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

991.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

992.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 2553.2341

992.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 4015.298

992.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 22998.297

992.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5111.773

992.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2024.6064

992.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1629.8462

992.0 masrr5 - Create "error" index for ipForwDatagrams = 62.52687

992.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 23402.18

992.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6528.963

992.0 masrr5 WARM UP PERIOD LEFT = 1

992.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

992.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

992.2 masrr5 EVENT LOG received =

C ipInDelivers 4001 2 1 CMAX --> C1.000000 - 1.500000

C ipOutRequests 4001 2 1 CMAX --> C1.000000 - 1.500000

C ipForwDatagrams 4001 2 1 Cred --> Cyellow

C udpInDatagrams 4001 2 1 C0.500000 - 1.000000 --> C1.000000 - 1.500000

C udpOutDatagrams 4001 2 1 C0.500000 - 1.000000 --> C1.000000 - 1.500000

E ipForwDatagrams 4002 2 2

992.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

993.0 masrr6 EVENT LOG received =

E ipOutRequests 4000 0 301

E wwwSummaryOutBytesLow 4000 0 301

C udpInDatagrams 4000 6 1 C1.500000 - 2.000000 --> C2.000000 - 2.500000

C udpOutDatagrams 4000 6 1 C1.500000 - 2.000000 --> C2.000000 - 2.500000

E wwwSummaryOutBytesLow 4001 0 301

993.0 masrr5 rec'd message from masrr7 message type: 2, bindings = <command hello, peer masrr7, type peer, >

993.0 masrr7 EVENT LOG received =

993.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 7022.8276

993.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3594.6836

993.2 masrr6 WARM UP PERIOD LEFT = 0

994.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3110.377

994.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 4912.322

994.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 24023.893

994.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5668.916

994.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2024.6064

994.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1929.8462

994.0 masrr5 - Create "error" index for ipForwDatagrams = 65.26497

994.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 23402.18

994.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6700.3916

994.0 masrr5 WARM UP PERIOD LEFT = 0

<<agents do not yet reason about the ChAD event logs>>

994.2 masrr6 Exec: 61 AtomicAction: "fake response to chad message" bindings: <chadevent null, type fakechadresponse, >

994.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21863.97

994.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2188.6519

994.4 masrr7 WARM UP PERIOD LEFT = 0

995.0 masrr5 Exec: 68 AtomicAction: "fake response to chad message" bindings: <chadevent null, type fakechadresponse, >

995.4 masrr7 Exec: 82 AtomicAction: "fake response to chad message" bindings: <chadevent null, type fakechadresponse, >

1001.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1001.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1001.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1002.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4003 4 149

1002.4 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4002 0 301

C ifOutOctets0:2(0) 4002 39 3 CyellowLow --> CveryLow

1002.511680644 masrr7 EVENT LOG received =

E ipOutRequests 4003 5 2

C udpInDatagrams 4003 4 1 C0.500000 - 1.000000 --> C1.500000 - 2.000000

C udpOutDatagrams 4003 4 1 C0.500000 - 1.000000 --> C1.500000 - 2.000000

1003.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3130.5369

1003.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 4953.011

1003.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 20051.309

1003.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5583.057

1003.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1784.03

1003.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4077.9922

1003.0 masrr5 - Create "error" index for ipForwDatagrams = 56.808228

1003.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19490.34

1003.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6833.8804

1003.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 6825.3726

1003.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3551.722

1003.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 17859.008

1003.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4449.1626

1006.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 6842.974

1006.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3569.3237

1006.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 23644.51

1006.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4687.238

1007.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3130.5369

1007.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 4874.2373

1007.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 25626.664

1007.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5583.057

1007.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 9366.934

1007.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4302.7666

1007.0 masrr5 - Create "error" index for ipForwDatagrams = 71.453384

1007.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 24949.373

1007.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6425.945

1011.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1011.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1011.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1012.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4004 28 130

E ifOutOctets0:1(0) 4005 43 6

E ifInOctets0:1(2) 4005 10 2

E ipForwDatagrams 4005 3 2

1012.4 masrr6 EVENT LOG received =

E ipOutRequests 4003 0 301

E wwwSummaryOutBytesLow 4003 0 301

E ipOutRequests 4004 0 301

E wwwSummaryOutBytesLow 4004 0 301

1012.4 masrr7 EVENT LOG received =

1013.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3098.5466

1013.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5510.9985

1013.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26229.26

1013.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5459.7705

1013.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 9438.818

1013.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4453.1646

1013.0 masrr5 - Create "error" index for ipForwDatagrams = 78.37724

1013.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 25194.678

1013.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6694.3438

1013.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 7410.6733

1013.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3707.9546

1013.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 23644.51

1013.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4687.238

1021.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1021.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1021.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 8281.445

1021.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3719.414

1021.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1021.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1021.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 23752.164

1021.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 7403.361

1021.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1021.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1022.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3125.926

1022.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 6274.259

1022.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 27151.012

1022.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5560.113

1022.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 12184.572

1022.0 masrr5 - Create "increasing" index for ifOutOctets0:1(0) = 7172.5884

1022.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 7172.5884

1022.0 masrr5 - Create "error" index for ipForwDatagrams = 85.5268

1022.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 25382.8

1022.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6770.608

1022.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4006 2 3

1022.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1022.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1022.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1023.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 10440.422

1023.0 masrr5 - Create "increasing" index for ipInReceives = 104.93856

1023.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5800.85

1023.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26726.328

1023.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6343.0303

1023.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 12184.572

1023.0 masrr5 - Create "increasing" index for ifOutOctets0:1(0) = 14069.641

1023.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 14069.641

1023.0 masrr5 - Create "increasing" index for ipForwDatagrams = 99.44158

1023.0 masrr5 - Create "error" index for ipForwDatagrams = 99.44158

1023.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 25382.8

1023.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7144.2017

1023.0 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4005 0 301

E tcpInSegs 4006 14 5

E wwwSummaryOutBytesLow 4006 0 301

1023.2 masrr7 EVENT LOG received =

1023.2 masrr6 - Create "increasing" index for ifOutOctets0:2(0) = 11088.927

1023.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11088.927

1023.2 masrr6 - Create "increasing" index for ifInOctets0:2(0) = 3820.1548

1023.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3820.1548

1024.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 23938.121

1024.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 12333.169

1031.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1031.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1031.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1032.2 masrr5 EVENT LOG received =

C ifInOctets0:1(3) 4008 84 3 CyellowLow --> CveryLow

E ifInOctets0:1(3) 4008 80 7

1032.2 masrr6 EVENT LOG received =

1032.4 masrr7 EVENT LOG received =

1033.2 masrr6 - Create "increasing" index for tcpOutSegs = 9.644556

1033.2 masrr6 - Create "increasing" index for ifOutOctets0:2(0) = 11815.914

1033.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11815.914

1033.2 masrr6 - Create "increasing" index for ipOutRequests = 17.475166

1033.2 masrr6 - Create "increasing" index for wwwSummaryOutBytesLow = 7933.193

1033.2 masrr6 - Create "increasing" index for ipInDelivers = 18.258284

1033.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 26.8

1033.2 masrr6 - Create "increasing" index for ifInOctets0:2(0) = 4013.864

1033.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4013.864

1033.2 masrr6 - Create "increasing" index for ipInReceives = 18.258284

1033.2 masrr6 - Create "increasing" index for tcpInSegs = 10.427672

1033.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 26.8

1033.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 27491.941

1033.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 10056.361

1034.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 10311.01

1034.0 masrr5 - Create "increasing" index for ipInReceives = 113.90615

1034.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 6891.361

1034.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5864.1665

1034.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 12386.33

1034.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 12073.334

1034.0 masrr5 - Create "increasing" index for ipForwDatagrams = 108.39597

1034.0 masrr5 - Create "error" index for ipForwDatagrams = 108.39597

1034.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 28886.09

1034.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6709.948

1036.2 masrr6 - Create "increasing" index for tcpOutSegs = 10.0961685

1036.2 masrr6 - Create "increasing" index for ifOutOctets0:2(0) = 12210.184

1036.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 12210.184

1036.2 masrr6 - Create "increasing" index for ipOutRequests = 18.011318

1036.2 masrr6 - Create "increasing" index for wwwSummaryOutBytesLow = 8262.483

1036.2 masrr6 - Create "increasing" index for ipInDelivers = 18.858952

1036.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 26.0

1036.2 masrr6 - Create "increasing" index for ifInOctets0:2(0) = 4081.4233

1036.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4081.4233

1036.2 masrr6 - Create "increasing" index for ipInReceives = 18.858952

1036.2 masrr6 - Create "increasing" index for tcpInSegs = 10.943802

1036.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 26.0

1036.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21706.44

1036.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 9818.286

1037.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 10327.027

1037.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 7328.009

1037.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26322.277

1037.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5880.184

1037.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4718.2646

1037.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 11939.595

1037.0 masrr5 - Create "error" index for ipForwDatagrams = 93.81755

1037.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 23016.543

1037.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6802.471

1041.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1041.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1041.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1042.0 masrr5 EVENT LOG received =

C ifOutOctets0:1(2) 4009 37 3 CyellowLow --> CveryLow

C ipInDelivers 4010 6 1 C0.500000 - 1.000000 --> C3.000000 - 3.500000

C ipOutRequests 4010 6 1 C0.500000 - 1.000000 --> C3.000000 - 3.500000

C ipForwDatagrams 4010 45 1 Cred --> Corange

C udpInDatagrams 4010 6 1 C0.500000 - 1.000000 --> C2.500000 - 3.000000

C udpOutDatagrams 4010 6 1 C0.500000 - 1.000000 --> C2.500000 - 3.000000

1042.4 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4008 0 301

E wwwSummaryOutBytesLow 4009 0 301

1043.0 masrr7 EVENT LOG received =

1043.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 10605.5205

1043.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 6474.878

1043.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 30583.988

1043.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 11274.648

1043.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4646.381

1043.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 11927.072

1043.0 masrr5 - Create "error" index for ipForwDatagrams = 96.91901

1043.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 22771.238

1043.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6615.949

1043.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11381.085

1043.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 25.6

1043.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3868.4656

1043.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 25.6

1044.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 26407.176

1044.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 10003.45

1051.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1051.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1051.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 9966.351

1051.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 25.2

1051.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3786.4402

1051.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 25.2

1051.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1051.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1051.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 26303.709

1051.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 7291.5146

1051.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1051.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1052.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 10657.668

1052.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5127.4214

1052.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 29096.531

1052.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 11878.6

1052.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1956.4303

1052.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(0) = 9130.948

1052.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 9130.948

1052.0 masrr5 - Create "error" index for ipForwDatagrams = 90.15358

1052.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 22709.559

1052.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7139.9

1052.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1052.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1052.2 masrr5 EVENT LOG received =

C ipForwDatagrams 4011 2 4 Cyellow --> Cred

E ipForwDatagrams 4012 28 132

1052.2 masrr6 EVENT LOG received =

E ipOutRequests 4010 0 301

E wwwSummaryOutBytesLow 4010 0 301

C ifOutOctets0:2(0) 4010 39 1 CveryLow --> CyellowLow

C wwwSummaryOutBytesLow 4010 0 300 Chigh --> CmedLow

E ipOutRequests 4011 0 301

E wwwSummaryOutBytesLow 4011 0 301

1052.312112644 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1053.0 masrr7 EVENT LOG received =

1053.0 masrr5 rec'd message from masrr7 message type: 2, bindings = <command hello, peer masrr7, type peer, >

1053.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 6724.1045

1053.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 24.8

1053.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3702.4167

1053.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 24.8

1054.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3343.1724

1054.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 4883.211

1054.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 28803.598

1054.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 11095.683

1054.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1956.4303

1054.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(0) = 2096.7534

1054.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 2096.7534

1054.0 masrr5 - Create "error" index for ipForwDatagrams = 74.33403

1054.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 22709.559

1054.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6629.163

1054.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 26117.754

1054.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2361.7075

1061.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1061.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1061.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1062.2 masrr5 EVENT LOG received =

E ipForwDatagrams 4013 4 146

1062.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4012 0 301

1062.4 masrr7 EVENT LOG received =

C ipOutRequests 4013 5 3 C1.000000 - 1.500000 --> C1.500000 - 2.000000

1063.2 masrr6 - Create "decreasing" index for tcpOutSegs = 3.615295

1063.2 masrr6 - Create "decreasing" index for ifOutOctets0:2(0) = 6076.7915

1063.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 6076.7915

1063.2 masrr6 - Create "decreasing" index for ipOutRequests = 11.647463

1063.2 masrr6 - Create "decreasing" index for wwwSummaryOutBytesLow = 2577.254

1063.2 masrr6 - Create "decreasing" index for ipInDelivers = 12.290669

1063.2 masrr6 - Create "decreasing" index for ifInOctets0:2(0) = 3525.269

1063.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3525.269

1063.2 masrr6 - Create "decreasing" index for ipInReceives = 12.290669

1063.2 masrr6 - Create "decreasing" index for tcpInSegs = 4.258503

1063.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 24267.426

1063.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 3953.0886

1064.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4979.724

1064.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(1) = 3682.5105

1064.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3682.5105

1064.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 25763.994

1064.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 12774.246

1064.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1675.489

1064.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3399.0938

1064.0 masrr5 - Create "error" index for ipForwDatagrams = 67.19639

1064.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 18848.188

1064.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6245.347

1066.2 masrr6 - Create "decreasing" index for tcpOutSegs = 3.1636822

1066.2 masrr6 - Create "decreasing" index for ifOutOctets0:2(0) = 5664.9204

1066.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 5664.9204

1066.2 masrr6 - Create "decreasing" index for ipOutRequests = 11.195849

1066.2 masrr6 - Create "decreasing" index for wwwSummaryOutBytesLow = 2247.9636

1066.2 masrr6 - Create "decreasing" index for ipInDelivers = 11.77454

1066.2 masrr6 - Create "decreasing" index for ifInOctets0:2(0) = 3440.108

1066.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3440.108

1066.2 masrr6 - Create "decreasing" index for ipInReceives = 11.77454

1066.2 masrr6 - Create "decreasing" index for tcpInSegs = 3.742374

1066.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 24267.426

1066.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 3953.0886

1067.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4982.483

1067.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(1) = 3239.476

1067.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3239.476

1067.0 masrr5 - Create "decreasing" index for ifInOctets0:1(0) = 25323.717

1067.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 25323.717

1067.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 12785.28

1067.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1675.489

1067.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3308.0593

1067.0 masrr5 - Create "error" index for ipForwDatagrams = 77.12742

1067.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 18848.188

1067.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6150.2437

1071.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1071.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1071.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1072.0 masrr5 EVENT LOG received =

E udpInDatagrams 4014 2 5

E udpOutDatagrams 4014 2 5

C ipForwDatagrams 4015 3 3 Cyellow --> Cred

1072.2 masrr6 EVENT LOG received =

E ipOutRequests 4013 0 301

E wwwSummaryOutBytesLow 4014 0 301

1072.4 masrr7 EVENT LOG received =

1073.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4791.0625

1073.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3340.259

1073.0 masrr5 - Create "decreasing" index for ifInOctets0:1(0) = 22484.5

1073.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 22484.5

1073.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9529.715

1073.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1711.431

1073.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3224.4653

1073.0 masrr5 - Create "error" index for ipForwDatagrams = 71.18539

1073.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 18979.926

1073.0 masrr5 - Create "decreasing" index for ifInOctets0:1(1) = 6038.302

1073.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6038.302

1073.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 5805.247

1073.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3479.6523

1073.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21705.586

1073.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 3854.9973

1081.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1081.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1081.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 5699.6787

1081.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3446.515

1081.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1081.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1081.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21701.398

1081.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 3850.8098

1081.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1081.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1082.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4864.3467

1082.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3470.827

1082.0 masrr5 - Create "decreasing" index for ifInOctets0:1(0) = 22384.229

1082.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 22384.229

1082.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9432.728

1082.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1712.9125

1082.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3194.8354

1082.0 masrr5 - Create "error" index for ipForwDatagrams = 70.98786

1082.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 18965.8

1082.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6053.635

1082.2 masrr5 EVENT LOG received =

E ipForwDatagrams 4017 28 132

1082.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1082.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1082.2 masrr6 EVENT LOG received =

E ipOutRequests 4015 0 301

E wwwSummaryOutBytesLow 4015 0 301

E ipOutRequests 4016 0 301

E wwwSummaryOutBytesLow 4016 0 301

1082.312112644 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1083.0 masrr5 rec'd message from masrr7 message type: 2, bindings = <command hello, peer masrr7, type peer, >

1083.0 masrr7 EVENT LOG received =

1083.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 6652.31

1083.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3593.8833

1084.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4864.3467

1084.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3470.827

1084.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 23246.133

1084.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9432.728

1084.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1846.2458

1084.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3328.1687

1084.0 masrr5 - Create "error" index for ipForwDatagrams = 73.84501

1084.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19827.705

1084.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6053.635

1084.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 21701.398

1084.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 3850.8098

1091.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1091.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1091.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1092.0 masrr5 EVENT LOG received =

1092.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4017 0 301

1092.4 masrr7 EVENT LOG received =

1093.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5253.37

1093.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 6081.2407

1093.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26554.035

1093.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 10134.927

1093.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1846.2458

1093.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3838.89

1093.0 masrr5 - Create "error" index for ipForwDatagrams = 79.701744

1093.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19827.705

1093.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6117.2344

1093.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 8333.51

1093.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3654.683

1093.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 22392.633

1093.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4219.214

1096.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11144.349

1096.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3845.651

1096.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 22392.633

1096.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4219.214

1097.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5422.9814

1097.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 6269.628

1097.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26554.035

1097.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 11427.682

1097.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1846.2458

1097.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3838.89

1097.0 masrr5 - Create "error" index for ipForwDatagrams = 83.25236

1097.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19827.705

1097.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7628.009

1101.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1101.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1101.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1102.0 masrr5 EVENT LOG received =

E udpInDatagrams 4019 2 7

E udpOutDatagrams 4019 2 7

1102.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4019 0 301

1102.4 masrr7 EVENT LOG received =

1103.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5335.9087

1103.0 masrr5 - Create "increasing" index for ipInReceives = 90.58744

1103.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 8894.874

1103.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26998.645

1103.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9288.783

1103.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1887.9851

1103.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3881.6726

1103.0 masrr5 - Create "increasing" index for ipForwDatagrams = 85.22337

1103.0 masrr5 - Create "error" index for ipForwDatagrams = 85.22337

1103.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 20110.98

1103.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8041.139

1103.2 masrr6 - Create "increasing" index for tcpOutSegs = 13.648111

1103.2 masrr6 - Create "increasing" index for ifOutOctets0:2(0) = 13727.856

1103.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 13727.856

1103.2 masrr6 - Create "increasing" index for ipOutRequests = 21.67437

1103.2 masrr6 - Create "increasing" index for wwwSummaryOutBytesLow = 12599.6

1103.2 masrr6 - Create "increasing" index for ipInDelivers = 22.520012

1103.2 masrr6 - Create "increasing" index for ifInOctets0:2(0) = 3975.5059

1103.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3975.5059

1103.2 masrr6 - Create "increasing" index for ipInReceives = 22.520012

1103.2 masrr6 - Create "increasing" index for tcpInSegs = 14.493753

1103.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20253.734

1103.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4132.1416

1111.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1111.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1111.2 masrr6 - Create "increasing" index for tcpOutSegs = 13.8209505

1111.2 masrr6 - Create "increasing" index for ifOutOctets0:2(0) = 13899.362

1111.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 13899.362

1111.2 masrr6 - Create "increasing" index for ipOutRequests = 21.84721

1111.2 masrr6 - Create "increasing" index for wwwSummaryOutBytesLow = 12739.502

1111.2 masrr6 - Create "increasing" index for ipInDelivers = 22.71754

1111.2 masrr6 - Create "increasing" index for httpCurrentConnects = 25.6

1111.2 masrr6 - Create "increasing" index for ifInOctets0:2(0) = 4008.0984

1111.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4008.0984

1111.2 masrr6 - Create "increasing" index for ipInReceives = 22.71754

1111.2 masrr6 - Create "increasing" index for tcpInSegs = 14.691284

1111.2 masrr6 - Create "increasing" index for tcpCurrEstab = 25.6

1111.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1111.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1111.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20253.734

1111.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4132.1416

1111.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1111.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1112.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5243.859

1112.0 masrr5 - Create "increasing" index for ipInReceives = 101.74793

1112.0 masrr5 - Create "increasing" index for ifOutOctets0:1(1) = 9671.615

1112.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 9671.615

1112.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 27170.15

1112.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 8903.005

1112.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2585.763

1112.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3914.2651

1112.0 masrr5 - Create "increasing" index for ipForwDatagrams = 96.383865

1112.0 masrr5 - Create "error" index for ipForwDatagrams = 96.383865

1112.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 26005.648

1112.0 masrr5 - Create "increasing" index for ifInOctets0:1(1) = 13556.447

1112.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 13556.447

1112.2 masrr5 EVENT LOG received =

1112.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1112.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1112.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4020 0 301

E ipOutRequests 4021 0 301

E wwwSummaryOutBytesLow 4021 0 301

1113.0 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1113.0 masrr7 EVENT LOG received =

1113.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 12946.731

1113.2 masrr6 - Create "increasing" index for httpCurrentConnects = 25.8

1113.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3860.73

1113.2 masrr6 - Create "increasing" index for tcpCurrEstab = 25.8

1114.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5243.859

1114.0 masrr5 - Create "increasing" index for ipInReceives = 106.795555

1114.0 masrr5 - Create "increasing" index for ifOutOctets0:1(1) = 10037.33

1114.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 10037.33

1114.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26308.244

1114.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 8903.005

1114.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2917.1914

1114.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3780.9316

1114.0 masrr5 - Create "increasing" index for ipForwDatagrams = 101.43148

1114.0 masrr5 - Create "error" index for ipForwDatagrams = 101.43148

1114.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 26758.791

1114.0 masrr5 - Create "increasing" index for ifInOctets0:1(1) = 15171.494

1114.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 15171.494

1114.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20253.734

1114.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4132.1416

1121.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1121.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1121.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1122.0 masrr5 EVENT LOG received =

1122.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4022 0 301

1122.4 masrr7 EVENT LOG received =

1123.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3221.165

1123.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 7505.003

1123.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 23045.855

1123.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6514.535

1123.0 masrr5 - Create "increasing" index for ifInOctets0:1(2) = 3006.2524

1123.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 3006.2524

1123.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1749.3398

1123.0 masrr5 - Create "error" index for ipForwDatagrams = 95.860054

1123.0 masrr5 - Create "increasing" index for ifOutOctets0:1(2) = 28417.2

1123.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 28417.2

1123.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 15133.942

1123.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11470.911

1123.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3850.33

1123.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19349.521

1123.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2088.1414

1126.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11014.589

1126.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3956.1367

1126.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19349.521

1126.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2088.1414

1127.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3032.7778

1127.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 9637.068

1127.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 25400.371

1127.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5194.729

1127.0 masrr5 - Create "increasing" index for ifInOctets0:1(2) = 3258.6394

1127.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 3258.6394

1127.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 2046.114

1127.0 masrr5 - Create "error" index for ipForwDatagrams = 88.4407

1127.0 masrr5 - Create "increasing" index for ifOutOctets0:1(2) = 29493.459

1127.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 29493.459

1127.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 14709.75

1131.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1131.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1131.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1132.0 masrr5 EVENT LOG received =

E udpInDatagrams 4024 2 9

E udpOutDatagrams 4024 2 9

S ifInOctets0:1(3) 4025 80 2 ifInOctets0:1(2)

S udpInDatagrams 4025 2 1 udpOutDatagrams

S udpOutDatagrams 4025 2 1 udpInDatagrams

1132.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4024 0 301

1132.4 masrr7 EVENT LOG received =

1133.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3139.4443

1133.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 6945.822

1133.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 22680.14

1133.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5546.874

1133.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 3180.9583

1133.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1880.317

1133.0 masrr5 - Create "error" index for ipForwDatagrams = 82.41171

1133.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 29078.443

1133.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 14481.084

1133.2 masrr6 - Create "decreasing" index for tcpOutSegs = 5.842353

1133.2 masrr6 - Create "decreasing" index for ifOutOctets0:2(0) = 8294.357

1133.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 8294.357

1133.2 masrr6 - Create "decreasing" index for ipOutRequests = 13.868611

1133.2 masrr6 - Create "decreasing" index for wwwSummaryOutBytesLow = 4536.486

1133.2 masrr6 - Create "decreasing" index for ipInDelivers = 14.680224

1133.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3790.3394

1133.2 masrr6 - Create "decreasing" index for ipInReceives = 14.680224

1133.2 masrr6 - Create "decreasing" index for tcpInSegs = 6.6539664

1133.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19349.521

1133.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2088.1414

1141.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1141.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1141.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 9518.9

1141.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3997.7468

1141.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1141.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1141.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19466.066

1141.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4928.216

1141.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1141.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1142.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5916.5063

1142.0 masrr5 - Create "decreasing" index for ipInReceives = 83.775795

1142.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 7462.415

1142.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 24129.4

1142.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5439.6396

1142.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2425.8965

1142.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4958.4155

1142.0 masrr5 - Create "decreasing" index for ipForwDatagrams = 78.38702

1142.0 masrr5 - Create "error" index for ipForwDatagrams = 78.38702

1142.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 23071.457

1142.0 masrr5 - Create "decreasing" index for ifInOctets0:1(1) = 8484.887

1142.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8484.887

1142.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1142.2 masrr5 EVENT LOG received =

E ipForwDatagrams 4026 2 10

C udpInDatagrams 4027 7 1 C1.000000 - 1.500000 --> C0.500000 - 1.000000

C udpOutDatagrams 4027 7 1 C1.000000 - 1.500000 --> C0.500000 - 1.000000

1142.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1142.2 masrr6 EVENT LOG received =

E ipOutRequests 4025 0 301

E wwwSummaryOutBytesLow 4025 0 301

E wwwSummaryOutBytesLow 4026 0 301

1143.0 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1143.0 masrr7 EVENT LOG received =

1143.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11225.637

1143.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4397.747

1144.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5916.5063

1144.0 masrr5 - Create "decreasing" index for ipInReceives = 80.632935

1144.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 8223.653

1144.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 25256.352

1144.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5439.6396

1144.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1961.1345

1144.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 5202.2256

1144.0 masrr5 - Create "decreasing" index for ipForwDatagrams = 75.244156

1144.0 masrr5 - Create "error" index for ipForwDatagrams = 75.244156

1144.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 21456.41

1144.0 masrr5 - Create "decreasing" index for ifInOctets0:1(1) = 7231.7437

1144.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7231.7437

1144.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19658.066

1144.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 9763.736

<<agent 5 failed to receive a hello from agent 7 (due to our implementation in the simulation; agents 6 and 7 were probably writing their messages simultaneously), so agent 5 checks the peer host machine, and, finding the machine up, requests a hello / status from its peer 7.>>

1145.0 masrr5 Exec: 7909 AtomicAction: "ping machine X" bindings: <peer masrr7, type ping, >

masrr5:

1147.0 wm AtomicAction "7909 ping machine X" got response: "alive"

1147.0 masrr5 Exec: 8080 AtomicAction: "request status from peer" bindings: <peer masrr7, type peer, >

1148.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command status, peer masrr5, type peer, >

1149.4 masrr7 Exec: 8300 AtomicAction: "respond to status request from peer" bindings: <commandId 185, peer masrr5, returnAddress masrr5, type response, >

1151.0 masrr5 rec'd message from masrr5 message type: 2, bindings = <command alive, commandId 185, peer masrr7, returnAddress masrr5, type response, >

1151.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1151.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1151.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1152.0 masrr5 EVENT LOG received =

1152.2 masrr6 EVENT LOG received =

E tcpInSegs 4027 22 22

E wwwSummaryOutBytesLow 4027 0 301

1152.4 masrr7 EVENT LOG received =

1153.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 7582.8936

1153.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 7920.4287

1153.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 27198.354

1153.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9259.619

1153.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4811.9307

1153.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 9566.021

1153.0 masrr5 - Create "error" index for ipForwDatagrams = 88.244156

1153.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(2) = 20251.062

1153.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 20251.062

1153.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7466.845

1153.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 10739.957

1153.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4272.947

1153.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 23687.322

1153.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 13208.459

masrr7:

1155.4 wm AtomicAction "8300 respond to status request from peer" got response: "timed out"

1156.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 8925.764

1156.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4138.753

1156.4 masrr7 - Create "increasing" index for ifOutOctets0:3(0) = 27330.678

1156.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 27330.678

1156.4 masrr7 - Create "increasing" index for tcpInSegs = 37.09623

1156.4 masrr7 - Create "increasing" index for tcpOutSegs = 36.625725

1156.4 masrr7 - Create "increasing" index for ifInOctets0:3(0) = 13360.975

1156.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 13360.975

1157.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 7582.8936

1157.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5599.9775

1157.0 masrr5 - Create "increasing" index for ifInOctets0:1(0) = 33732.867

1157.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9259.619

1157.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 5071.0273

1157.0 masrr5 - Create "increasing" index for ifOutOctets0:1(0) = 9770.15

1157.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 9770.15

1157.0 masrr5 - Create "error" index for ipForwDatagrams = 99.01834

1157.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 28133.512

1157.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6380.2646

1161.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1161.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1161.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1162.0 masrr5 EVENT LOG received =

E ifInOctets0:1(0) 4030 188 3

C ifOutOctets0:1(1) 4030 62 1 CveryLow --> CyellowLow

C ifOutOctets0:1(2) 4030 110 1 CyellowLow --> CveryLow

1162.2 masrr6 EVENT LOG received =

E ipOutRequests 4028 0 301

E wwwSummaryOutBytesLow 4028 0 301

1162.4 masrr7 EVENT LOG received =

E ifOutOctets0:3(0) 4029 10 8

1163.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 7717.618

1163.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 6035.658

1163.0 masrr5 - Create "increasing" index for ifInOctets0:1(0) = 41032.664

1163.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 14928.198

1163.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 5161.462

1163.0 masrr5 - Create "increasing" index for ifOutOctets0:1(0) = 10248.063

1163.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 10248.063

1163.0 masrr5 - Create "error" index for ipForwDatagrams = 113.453125

1163.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 28870.238

1163.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6174.207

1163.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 10204.836

1163.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4375.275

1163.4 masrr7 - Create "increasing" index for ifOutOctets0:3(0) = 33351.402

1163.4 masrr7 - Create "increasing" index for tcpInSegs = 43.125214

1163.4 masrr7 - Create "increasing" index for tcpOutSegs = 42.59674

1163.4 masrr7 - Create "increasing" index for ifInOctets0:3(0) = 13602.365

1163.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 13602.365

<<the attacker’s port scan>>

1164.413196475 udpPortScan of 0:2(0), port 15

1164.413296475 udpPortScan of 0:2(0), port 16

1164.413396475 udpPortScan of 0:2(0), port 17

1164.413496475 udpPortScan of 0:2(0), port 18

1164.413596475 udpPortScan of 0:2(0), port 19

1164.413696475 udpPortScan of 0:2(0), port 20

1164.413796475 udpPortScan of 0:2(0), port 21

1164.413896475 udpPortScan of 0:2(0), port 22

1164.413996475 udpPortScan of 0:2(0), port 23

1164.414096475 udpPortScan of 0:2(0), port 24

1164.414196475 udpPortScan of 0:2(0), port 25

1171.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1171.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1171.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 15336.047

1171.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4762.238

1171.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1171.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1171.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 10762.291

1171.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1171.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1172.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4912.902

1172.0 masrr5 - Create "increasing" index for ipInReceives = 124.32768

1172.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 10962.053

1172.0 masrr5 - Create "increasing" index for ifInOctets0:1(0) = 45939.156

1172.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 15010.05

1172.0 masrr5 - Create "increasing" index for ifInOctets0:1(2) = 5219.2393

1172.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 5219.2393

1172.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 7764.335

1172.0 masrr5 - Create "increasing" index for ipForwDatagrams = 118.959305

1172.0 masrr5 - Create "error" index for ipForwDatagrams = 118.959305

1172.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 29028.41

1172.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6727.96

1172.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1172.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1172.2 masrr5 EVENT LOG received =

E ifInOctets0:1(0) 4031 177 9

C ifOutOctets0:1(1) 4031 60 1 CveryLow --> CyellowLow

E ifOutOctets0:1(1) 4032 60 2

1172.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4030 0 301

E wwwSummaryOutBytesLow 4031 0 301

<<ChAD sees a change as a result of the port scan. This is the first time that icmpOutDestUnreachs has shown up in the event log. The agent does not yet include this information in its reasoning (due to our own delay in completing the ChAD modeling system) – but this shows potential for detecting subtle changes (10 msgs in a 1/1000 second).>>

E icmpOutDestUnreachs 4031 0 301

1172.312112644 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1173.0 masrr5 rec'd message from masrr7 message type: 2, bindings = <command hello, peer masrr7, type peer, >

1173.0 masrr7 EVENT LOG received =

E tcpInSegs 4031 6 44

E tcpOutSegs 4031 3 16

1173.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 16909.309

1173.2 masrr6 - Create "increasing" index for httpCurrentConnects = 27.6

1173.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 5048.5537

1173.2 masrr6 - Create "increasing" index for tcpCurrEstab = 27.6

1174.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 5045.473

1174.0 masrr5 - Create "increasing" index for ipInReceives = 127.661026

1174.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 13038.148

1174.0 masrr5 - Create "increasing" index for ifInOctets0:1(0) = 47878.87

1174.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 15676.908

1174.0 masrr5 - Create "increasing" index for ifInOctets0:1(2) = 5320.1914

1174.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 5320.1914

1174.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 8240.525

1174.0 masrr5 - Create "increasing" index for ipForwDatagrams = 122.29264

1174.0 masrr5 - Create "error" index for ipForwDatagrams = 122.29264

1174.0 masrr5 - Create "increasing" index for ifOutOctets0:1(2) = 29129.363

1174.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 29129.363

1174.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7659.4844

1174.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 5926.7705

1181.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1181.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1181.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1182.0 masrr5 EVENT LOG received =

1182.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4032 0 301

1182.4 masrr7 EVENT LOG received =

1183.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3473.0442

1183.0 masrr5 - Create "increasing" index for ifOutOctets0:1(1) = 15664.659

1183.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 15664.659

1183.0 masrr5 - Create "increasing" index for ifInOctets0:1(0) = 48167.75

1183.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 13643.234

1183.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2476.6606

1183.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4159.178

1183.0 masrr5 - Create "error" index for ipForwDatagrams = 114.884476

1183.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 28923.688

1183.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8094.525

1183.2 masrr6 - Create "increasing" index for tcpOutSegs = 16.986973

1183.2 masrr6 - Create "increasing" index for ifOutOctets0:2(0) = 19440.889

1183.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 19440.889

1183.2 masrr6 - Create "increasing" index for ipOutRequests = 25.284838

1183.2 masrr6 - Create "increasing" index for wwwSummaryOutBytesLow = 13842.367

1183.2 masrr6 - Create "increasing" index for ipInDelivers = 26.99917

1183.2 masrr6 - Create "increasing" index for wwwSummaryInRequests = 1.9297978

1183.2 masrr6 - Create "increasing" index for wwwSummaryOutResponses = 1.8445346

1183.2 masrr6 - Create "increasing" index for httpCurrentConnects = 28.0

1183.2 masrr6 - Create "increasing" index for ifInOctets0:2(0) = 5464.5537

1183.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 5464.5537

1183.2 masrr6 - Create "increasing" index for ipInReceives = 27.246082

1183.2 masrr6 - Create "increasing" index for tcpInSegs = 18.948215

1183.2 masrr6 - Create "increasing" index for tcpCurrEstab = 28.0

1183.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 29185.053

1183.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2488.8555

1186.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 18900.566

1186.2 masrr6 - Create "increasing" index for httpCurrentConnects = 28.2

1186.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 5301.9736

1186.2 masrr6 - Create "increasing" index for tcpCurrEstab = 28.2

1186.4 masrr7 - Create "decreasing" index for ifOutOctets0:3(0) = 25541.7

1186.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 25541.7

1186.4 masrr7 - Create "decreasing" index for tcpInSegs = 24.326864

1186.4 masrr7 - Create "decreasing" index for tcpOutSegs = 24.077394

1186.4 masrr7 - Create "decreasing" index for ifInOctets0:3(0) = 2336.3394

1186.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2336.3394

1187.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3473.0442

1187.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 15664.659

1187.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 13643.234

1187.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1965.1765

1187.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3658.275

1187.0 masrr5 - Create "error" index for ipForwDatagrams = 98.04576

1187.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19964.979

1187.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8094.525

1191.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1191.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1191.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1192.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4035 3 7

1192.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4033 0 301

E wwwSummaryOutBytesLow 4034 0 301

1192.4 masrr7 EVENT LOG received =

1193.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3231.6528

1193.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 15497.383

1193.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 7622.5093

1193.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2106.6257

1193.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 3322.9707

1193.0 masrr5 - Create "error" index for ipForwDatagrams = 86.07475

1193.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 20449.818

1193.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8966.119

1193.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 18111.176

1193.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 5208.06

1193.4 masrr7 - Create "decreasing" index for ifOutOctets0:3(0) = 19520.977

1193.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19520.977

1193.4 masrr7 - Create "decreasing" index for tcpInSegs = 18.297878

1193.4 masrr7 - Create "decreasing" index for tcpOutSegs = 18.10638

1193.4 masrr7 - Create "decreasing" index for ifInOctets0:3(0) = 2094.948

1193.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2094.948

masrr5:

1195.0 wm AtomicAction "8080 request status from peer" got response: "timed out"

1201.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1201.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1201.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 11778.212

1201.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4668.0107

1201.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1201.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1201.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19520.977

1201.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2094.948

1201.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1201.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1202.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3226.912

1202.0 masrr5 - Create "decreasing" index for ipInReceives = 78.060425

1202.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 9098.37

1202.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 26135.64

1202.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 7542.337

1202.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2135.7617

1202.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(0) = 2782.9214

1202.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 2782.9214

1202.0 masrr5 - Create "decreasing" index for ipForwDatagrams = 72.69204

1202.0 masrr5 - Create "error" index for ipForwDatagrams = 72.69204

1202.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 20485.941

1202.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8292.045

1202.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1202.2 masrr5 EVENT LOG received =

E ipForwDatagrams 4037 2 15

1202.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1202.2 masrr6 EVENT LOG received =

E ipOutRequests 4036 0 301

E wwwSummaryOutBytesLow 4036 0 301

1202.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1203.2 masrr6 - Create "decreasing" index for tcpOutSegs = 8.4347

1203.2 masrr6 - Create "decreasing" index for ifOutOctets0:2(0) = 10715.896

1203.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 10715.896

1203.2 masrr6 - Create "decreasing" index for ipOutRequests = 16.460957

1203.2 masrr6 - Create "decreasing" index for wwwSummaryOutBytesLow = 6563.8696

1203.2 masrr6 - Create "decreasing" index for ipInDelivers = 17.480236

1203.2 masrr6 - Create "decreasing" index for ifInOctets0:2(0) = 4284.853

1203.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4284.853

1203.2 masrr6 - Create "decreasing" index for ipInReceives = 17.480232

1203.2 masrr6 - Create "decreasing" index for tcpInSegs = 9.453968

1203.2 masrr7 EVENT LOG received =

1204.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3094.3406

1204.0 masrr5 - Create "decreasing" index for ipInReceives = 73.96519

1204.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 8118.6562

1204.0 masrr5 - Create "decreasing" index for ifInOctets0:1(0) = 25292.309

1204.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 25292.309

1204.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6875.4795

1204.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2034.8093

1204.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(0) = 2455.3025

1204.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 2455.3025

1204.0 masrr5 - Create "decreasing" index for ipForwDatagrams = 68.50157

1204.0 masrr5 - Create "error" index for ipForwDatagrams = 68.50157

1204.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 20384.988

1204.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7390.9976

1204.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19508.414

1204.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2082.3853

1211.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1211.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1211.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1212.0 masrr5 EVENT LOG received =

1212.2 masrr6 EVENT LOG received =

E wwwSummaryOutBytesLow 4037 0 301

1212.4 masrr7 EVENT LOG received =

1213.0 masrr5 - Create "decreasing" index for ifInOctets0:1(3) = 3000.3813

1213.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3000.3813

1213.0 masrr5 - Create "decreasing" index for ipInReceives = 65.985596

1213.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(1) = 5683.3296

1213.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5683.3296

1213.0 masrr5 - Create "decreasing" index for ifInOctets0:1(0) = 21205.656

1213.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 21205.656

1213.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(3) = 5089.1733

1213.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5089.1733

1213.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2025.8297

1213.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(0) = 2011.1393

1213.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 2011.1393

1213.0 masrr5 - Create "decreasing" index for ipForwDatagrams = 60.542397

1213.0 masrr5 - Create "error" index for ipForwDatagrams = 60.542397

1213.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 20693.152

1213.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7201.733

1213.2 masrr6 - Create "decreasing" index for tcpOutSegs = 6.0147

1213.2 masrr6 - Create "decreasing" index for ifOutOctets0:2(0) = 8387.617

1213.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 8387.617

1213.2 masrr6 - Create "decreasing" index for ipOutRequests = 14.0409565

1213.2 masrr6 - Create "decreasing" index for wwwSummaryOutBytesLow = 4541.8296

1213.2 masrr6 - Create "decreasing" index for ipInDelivers = 14.800237

1213.2 masrr6 - Create "decreasing" index for ifInOctets0:2(0) = 3920.853

1213.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3920.853

1213.2 masrr6 - Create "decreasing" index for ipInReceives = 14.800232

1213.2 masrr6 - Create "decreasing" index for tcpInSegs = 6.7739677

1213.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 17752.055

1213.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2011.7913

1216.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 8606.908

1216.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 26.6

1216.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3998.2727

1216.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 26.6

1216.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 17752.055

1216.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2011.7913

1217.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3000.3813

1217.0 masrr5 - Create "decreasing" index for ipInReceives = 64.95334

1217.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5902.62

1217.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 21424.947

1217.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 5089.1733

1217.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2025.8297

1217.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 2088.5586

1217.0 masrr5 - Create "decreasing" index for ipForwDatagrams = 59.51014

1217.0 masrr5 - Create "error" index for ipForwDatagrams = 59.51014

1217.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 20693.152

1217.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7279.1523

1221.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1221.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1221.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1222.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4039 28 126

E ipInReceives 4040 1 31

E ipForwDatagrams 4040 3 8

1222.2 masrr6 EVENT LOG received =

E ipOutRequests 4038 0 301

E wwwSummaryOutBytesLow 4038 0 301

E wwwSummaryOutBytesLow 4039 0 301

1222.4 masrr7 EVENT LOG received =

1223.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3190.2944

1223.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 7495.3154

1223.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 22711.41

1223.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6742.6226

1223.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1824.6703

1223.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 2233.4863

1223.0 masrr5 - Create "error" index for ipForwDatagrams = 64.26376

1223.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19502.312

1223.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8203.615

1223.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 9893.371

1223.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 25.8

1223.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4143.2

1223.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 25.8

1223.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 17752.055

1223.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2011.7913

1231.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1231.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1231.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 10136.014

1231.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 25.0

1231.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 4152.089

1231.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 25.0

1231.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1231.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1231.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 17858.723

1231.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4701.939

1231.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1231.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1232.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3220.9116

1232.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 7961.414

1232.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 23060.717

1232.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6844.203

1232.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4427.905

1232.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4932.5234

1232.0 masrr5 - Create "error" index for ipForwDatagrams = 70.33784

1232.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19414.684

1232.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8400.011

1232.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1232.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1232.2 masrr5 EVENT LOG received =

1232.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1232.4 masrr6 EVENT LOG received =

C tcpOutSegs 4040 31 17 C0.000000 - 10.000000 --> C10.000000 - 20.000000

E wwwSummaryOutBytesLow 4040 0 301

E tcpCurrEstab 4041 21 24

1233.0 masrr5 rec'd message from masrr7 message type: 2, bindings = <command hello, peer masrr7, type peer, >

1233.0 masrr7 EVENT LOG received =

1233.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 7878.6704

1233.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 24.2

1233.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3809.272

1233.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 24.2

1234.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3220.9116

1234.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5738.0806

1234.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 20837.385

1234.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6844.203

1234.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4427.905

1234.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4540.142

1234.0 masrr5 - Create "error" index for ipForwDatagrams = 66.43307

1234.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19414.684

1234.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8007.63

1234.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 17871.285

1234.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 4714.502

1241.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1241.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1241.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1242.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4043 4 137

1242.2 masrr6 EVENT LOG received =

E tcpCurrEstab 4042 15 6

E wwwSummaryOutBytesLow 4042 0 301

1242.4 masrr7 EVENT LOG received =

1243.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4743.6875

1243.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5489.754

1243.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 22788.61

1243.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 8956.407

1243.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4340.5576

1243.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 6035.1626

1243.0 masrr5 - Create "error" index for ipForwDatagrams = 71.57592

1243.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 18859.133

1243.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 7424.323

1243.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 7677.264

1243.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 23.6

1243.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3759.1655

1243.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 23.6

1243.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20072.387

1243.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 6301.0957

<<The attacker sends identical, fragmented packets to the victim ("0:2"), consuming all the CPU as the victim’s IP protocol tried to reassemble them. Here, we are not modeling the "true" behavior, because presumably the packets would be dropped by the NIC at some point at which it can no longer deliver them to IP. I have also chosen to "escalate" the amount of CPU consumed (as a delay in the simulation) based on the number of packets causing the delay, or more specifically, based on the current delay. This is not validated, but it does make the simulation behave according to the vulnerability and attack description.>>

1245.305232203 ****** udpPingAttacker STARTING ATTACK on 0:2(0) from 1:100 ******

IP cpu delay at 0:2 is 0.01

IP cpu delay at 0:2 is 3.33333E-4

IP cpu delay at 0:2 is 1.57224E-4

IP cpu delay at 0:2 is 1.36651E-4

IP cpu delay at 0:2 is 0.010020906

IP cpu delay at 0:2 is 3.54937E-4

IP cpu delay at 0:2 is 0.010033435

IP cpu delay at 0:2 is 3.46279E-4

IP cpu delay at 0:2 is 0.010046092

IP cpu delay at 0:2 is 3.46412E-4

IP cpu delay at 0:2 is 2.2574E-4

IP cpu delay at 0:2 is 2.33265E-4

IP cpu delay at 0:2 is 0.010074475

IP cpu delay at 0:2 is 3.62663E-4

IP cpu delay at 0:2 is 0.010089047

IP cpu delay at 0:2 is 3.4839E-4

IP cpu delay at 0:2 is 1.20784E-4

IP cpu delay at 0:2 is 0.010107654

IP cpu delay at 0:2 is 4.35919E-4

IP cpu delay at 0:2 is 3.67091E-4

IP cpu delay at 0:2 is 0.010138009

IP cpu delay at 0:2 is 3.647E-4

IP cpu delay at 0:2 is 0.010154766

IP cpu delay at 0:2 is 3.50648E-4

IP cpu delay at 0:2 is 0.010171614

IP cpu delay at 0:2 is 3.50742E-4

IP cpu delay at 0:2 is 2.34259E-4

IP cpu delay at 0:2 is 2.42067E-4

IP cpu delay at 0:2 is 0.010204903

IP cpu delay at 0:2 is 3.67732E-4

IP cpu delay at 0:2 is 0.010223991

IP cpu delay at 0:2 is 3.53057E-4

IP cpu delay at 0:2 is 0.010243226

IP cpu delay at 0:2 is 4.71395E-4

IP cpu delay at 0:2 is 4.74948E-4

IP cpu delay at 0:2 is 3.84754E-4

IP cpu delay at 0:2 is 0.010295703

IP cpu delay at 0:2 is 3.8756E-4

IP cpu delay at 0:2 is 0.010318479

IP cpu delay at 0:2 is 3.56868E-4

IP cpu delay at 0:2 is 0.01034099

IP cpu delay at 0:2 is 5.00544E-4

IP cpu delay at 0:2 is 5.17229E-4

IP cpu delay at 0:2 is 3.90521E-4

IP cpu delay at 0:2 is 0.0103993

IP cpu delay at 0:2 is 0.01041261

IP cpu delay at 0:2 is 7.40673E-4

IP cpu delay at 0:2 is 0.010451052

IP cpu delay at 0:2 is 7.20144E-4

IP cpu delay at 0:2 is 0.010490092

IP cpu delay at 0:2 is 7.46732E-4

IP cpu delay at 0:2 is 0.01053132

IP cpu delay at 0:2 is 7.49609E-4

IP cpu delay at 0:2 is 0.010574017

IP cpu delay at 0:2 is 7.53389E-4

IP cpu delay at 0:2 is 0.010618264

IP cpu delay at 0:2 is 7.56509E-4

IP cpu delay at 0:2 is 0.01066409

IP cpu delay at 0:2 is 7.59741E-4

IP cpu delay at 0:2 is 0.010711551

IP cpu delay at 0:2 is 7.63063E-4

IP cpu delay at 0:2 is 0.010760705

IP cpu delay at 0:2 is 0.010786062

IP cpu delay at 0:2 is 0.001126037

IP cpu delay at 0:2 is 0.010849798

IP cpu delay at 0:2 is 0.001142855

IP cpu delay at 0:2 is 0.01091622

IP cpu delay at 0:2 is 0.001160699

IP cpu delay at 0:2 is 0.010985451

IP cpu delay at 0:2 is 0.001206035

IP cpu delay at 0:2 is 0.0110585

IP cpu delay at 0:2 is 0.001215658

IP cpu delay at 0:2 is 0.011134306

IP cpu delay at 0:2 is 0.001225354

IP cpu delay at 0:2 is 0.011212961

IP cpu delay at 0:2 is 0.011253393

IP cpu delay at 0:2 is 0.001610206

IP cpu delay at 0:2 is 0.011348846

IP cpu delay at 0:2 is 0.001633357

IP cpu delay at 0:2 is 0.011448253

IP cpu delay at 0:2 is 0.001657745

IP cpu delay at 0:2 is 0.011551786

IP cpu delay at 0:2 is 0.001683452

IP cpu delay at 0:2 is 0.011659628

IP cpu delay at 0:2 is 0.001753109

IP cpu delay at 0:2 is 0.011773385

IP cpu delay at 0:2 is 0.011832498

IP cpu delay at 0:2 is 0.00216644

IP cpu delay at 0:2 is 0.011965796

IP cpu delay at 0:2 is 0.002201461

IP cpu delay at 0:2 is 0.012104705

IP cpu delay at 0:2 is 0.002238015

IP cpu delay at 0:2 is 0.012249462

IP cpu delay at 0:2 is 0.012324444

IP cpu delay at 0:2 is 0.002686977

IP cpu delay at 0:2 is 0.012491492

IP cpu delay at 0:2 is 0.002742043

IP cpu delay at 0:2 is 0.012665943

IP cpu delay at 0:2 is 0.002861225

IP cpu delay at 0:2 is 0.012850182

IP cpu delay at 0:2 is 0.012945188

IP cpu delay at 0:2 is 0.003345371

IP cpu delay at 0:2 is 0.013154873

IP cpu delay at 0:2 is 0.003418507

IP cpu delay at 0:2 is 0.013373986

IP cpu delay at 0:2 is 0.003495341

IP cpu delay at 0:2 is 0.013602963

IP cpu delay at 0:2 is 0.013723062

IP cpu delay at 0:2 is 0.004111905

IP cpu delay at 0:2 is 0.013984228

IP cpu delay at 0:2 is 0.00420916

IP cpu delay at 0:2 is 0.01425734

IP cpu delay at 0:2 is 0.014399252

IP cpu delay at 0:2 is 0.004791086

IP cpu delay at 0:2 is 0.014705596

IP cpu delay at 0:2 is 0.004917261

IP cpu delay at 0:2 is 0.015026358

IP cpu delay at 0:2 is 0.015193904

IP cpu delay at 0:2 is 0.005657006

IP cpu delay at 0:2 is 0.015555601

IP cpu delay at 0:2 is 0.005814085

IP cpu delay at 0:2 is 0.01593459

IP cpu delay at 0:2 is 0.01613241

IP cpu delay at 0:2 is 0.006517038

IP cpu delay at 0:2 is 0.016554058

IP cpu delay at 0:2 is 0.016772527

IP cpu delay at 0:2 is 0.007275215

IP cpu delay at 0:2 is 0.017240785

IP cpu delay at 0:2 is 0.00763498

IP cpu delay at 0:2 is 0.017736644

IP cpu delay at 0:2 is 0.017994532

IP cpu delay at 0:2 is 0.008477314

IP cpu delay at 0:2 is 0.018543593

IP cpu delay at 0:2 is 0.01882838

IP cpu delay at 0:2 is 0.009390073

IP cpu delay at 0:2 is 0.019435661

IP cpu delay at 0:2 is 0.009870956

IP cpu delay at 0:2 is 0.020079215

IP cpu delay at 0:2 is 0.020415189

IP cpu delay at 0:2 is 0.010899912

IP cpu delay at 0:2 is 0.021125693

IP cpu delay at 0:2 is 0.021496549

IP cpu delay at 0:2 is 0.012019197

IP cpu delay at 0:2 is 0.022280407

IP cpu delay at 0:2 is 0.022689754

IP cpu delay at 0:2 is 0.013412378

IP cpu delay at 0:2 is 0.023559825

IP cpu delay at 0:2 is 0.024011819

IP cpu delay at 0:2 is 0.014738092

IP cpu delay at 0:2 is 0.02497015

IP cpu delay at 0:2 is 0.025469155

IP cpu delay at 0:2 is 0.016185716

IP cpu delay at 0:2 is 0.026524317

IP cpu delay at 0:2 is 0.027075128

IP cpu delay at 0:2 is 0.017974141

IP cpu delay at 0:2 is 0.028243437

IP cpu delay at 0:2 is 0.028851551

IP cpu delay at 0:2 is 0.019707409

IP cpu delay at 0:2 is 0.03013685

IP cpu delay at 0:2 is 0.0208098

IP cpu delay at 0:2 is 0.031501738

IP cpu delay at 0:2 is 0.032218463

IP cpu delay at 0:2 is 0.032959078

IP cpu delay at 0:2 is 0.023908903

IP cpu delay at 0:2 is 0.034521344

1246.2 masrr6 - Create "warning" index for ifOutOctets0:2(0) = 7504.383

1246.2 masrr6 - Create "decreasing" index for httpCurrentConnects = 23.0

1246.2 masrr6 - Create "warning" index for ifInOctets0:2(0) = 3735.7026

1246.2 masrr6 - Create "decreasing" index for tcpCurrEstab = 23.0

IP cpu delay at 0:2 is 0.035338722

IP cpu delay at 0:2 is 0.026188814

IP cpu delay at 0:2 is 0.037056307

IP cpu delay at 0:2 is 0.037958184

IP cpu delay at 0:2 is 0.02896244

IP cpu delay at 0:2 is 0.039855538

IP cpu delay at 0:2 is 0.040850722

IP cpu delay at 0:2 is 0.04187908

IP cpu delay at 0:2 is 0.033113336

IP cpu delay at 0:2 is 0.044045494

IP cpu delay at 0:2 is 0.045180344

IP cpu delay at 0:2 is 0.036563696

IP cpu delay at 0:2 is 0.047571812

IP cpu delay at 0:2 is 0.048824205

IP cpu delay at 0:2 is 0.050118345

IP cpu delay at 0:2 is 0.04170544

IP cpu delay at 0:2 is 0.052845805

IP cpu delay at 0:2 is 0.054273998

IP cpu delay at 0:2 is 0.055749798

IP cpu delay at 0:2 is 0.047526269

IP cpu delay at 0:2 is 0.058859001

IP cpu delay at 0:2 is 0.060487634

IP cpu delay at 0:2 is 0.052408193

IP cpu delay at 0:2 is 0.063917495

IP cpu delay at 0:2 is 0.065714745

IP cpu delay at 0:2 is 0.067571903

IP cpu delay at 0:2 is 0.059661084

IP cpu delay at 0:2 is 0.071479669

1246.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20072.387

1246.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 6301.0957

IP cpu delay at 0:2 is 0.073528991

IP cpu delay at 0:2 is 0.065766857

IP cpu delay at 0:2 is 0.077838853

IP cpu delay at 0:2 is 0.080100148

IP cpu delay at 0:2 is 0.08243682

IP cpu delay at 0:2 is 0.08485138

IP cpu delay at 0:2 is 0.077656672

IP cpu delay at 0:2 is 0.089934982

IP cpu delay at 0:2 is 0.092599482

IP cpu delay at 0:2 is 0.085573385

IP cpu delay at 0:2 is 0.098205244

IP cpu delay at 0:2 is 0.101145419

IP cpu delay at 0:2 is 0.104183599

IP cpu delay at 0:2 is 0.107323052

IP cpu delay at 0:2 is 0.100888668

IP cpu delay at 0:2 is 0.11393011

IP cpu delay at 0:2 is 0.117394447

IP cpu delay at 0:2 is 0.111162048

IP cpu delay at 0:2 is 0.124679663

IP cpu delay at 0:2 is 0.128502319

IP cpu delay at 0:2 is 0.132452396

IP cpu delay at 0:2 is 0.136534143

IP cpu delay at 0:2 is 0.130949459

IP cpu delay at 0:2 is 0.145116929

IP cpu delay at 0:2 is 0.149620827

IP cpu delay at 0:2 is 0.144290061

IP cpu delay at 0:2 is 0.159084523

IP cpu delay at 0:2 is 0.164054007

IP cpu delay at 0:2 is 0.169189141

IP cpu delay at 0:2 is 0.174495446

IP cpu delay at 0:2 is 0.179978627

IP cpu delay at 0:2 is 0.175902787

IP cpu delay at 0:2 is 0.191508008

IP cpu delay at 0:2 is 0.197558275

IP cpu delay at 0:2 is 0.193832585

IP cpu delay at 0:2 is 0.210271303

IP cpu delay at 0:2 is 0.216947013

IP cpu delay at 0:2 is 0.223845247

IP cpu delay at 0:2 is 0.230973422

IP cpu delay at 0:2 is 0.238339203

IP cpu delay at 0:2 is 0.236098958

IP cpu delay at 0:2 is 0.253820475

IP cpu delay at 0:2 is 0.261947824

IP cpu delay at 0:2 is 0.270346085

IP cpu delay at 0:2 is 0.269211018

IP cpu delay at 0:2 is 0.287997988

IP cpu delay at 0:2 is 0.297264588

IP cpu delay at 0:2 is 0.306840074

IP cpu delay at 0:2 is 0.316734743

IP cpu delay at 0:2 is 0.326959235

IP cpu delay at 0:2 is 0.327716464

IP cpu delay at 0:2 is 0.348448425

IP cpu delay at 0:2 is 0.359730039

IP cpu delay at 0:2 is 0.371387707

IP cpu delay at 0:2 is 0.383433964

IP cpu delay at 0:2 is 0.395881762

IP cpu delay at 0:2 is 0.398859358

IP cpu delay at 0:2 is 0.4220398

IP cpu delay at 0:2 is 0.43577446

IP cpu delay at 0:2 is 0.449966942

IP cpu delay at 0:2 is 0.454673428

IP cpu delay at 0:2 is 0.479788287

IP cpu delay at 0:2 is 0.495447897

IP cpu delay at 0:2 is 0.511629493

IP cpu delay at 0:2 is 0.528350477

IP cpu delay at 0:2 is 0.535904445

IP cpu delay at 0:2 is 0.563492307

IP cpu delay at 0:2 is 0.581942051

IP cpu delay at 0:2 is 0.601006786

IP cpu delay at 0:2 is 0.620707012

IP cpu delay at 0:2 is 0.641063913

IP cpu delay at 0:2 is 0.662099376

IP cpu delay at 0:2 is 0.674163966

IP cpu delay at 0:2 is 0.706308154

IP cpu delay at 0:2 is 0.729518426

IP cpu delay at 0:2 is 0.753502374

1247.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4743.6875

1247.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 5618.8506

1247.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 22677.707

1247.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 8956.407

1247.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4580.5576

1247.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 6097.0977

1247.0 masrr5 - Create "error" index for ipForwDatagrams = 73.704956

1247.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19738.682

1247.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8253.549

IP cpu delay at 0:2 is 0.768435773

IP cpu delay at 0:2 is 0.803900312

IP cpu delay at 0:2 is 0.830363656

IP cpu delay at 0:2 is 0.857709111

IP cpu delay at 0:2 is 0.885966081

IP cpu delay at 0:2 is 0.915164951

IP cpu delay at 0:2 is 0.945337116

IP cpu delay at 0:2 is 0.966556835

IP cpu delay at 0:2 is 1.008733581

IP cpu delay at 0:2 is 1.0420247

IP cpu delay at 0:2 is 1.076425523

IP cpu delay at 0:2 is 1.111973041

IP cpu delay at 0:2 is 1.138815352

IP cpu delay at 0:2 is 1.186665987

IP cpu delay at 0:2 is 1.225888187

IP cpu delay at 0:2 is 1.266417793

IP cpu delay at 0:2 is 1.308298386

IP cpu delay at 0:2 is 1.351574999

IP cpu delay at 0:2 is 1.396294166

IP cpu delay at 0:2 is 1.442503971

IP cpu delay at 0:2 is 1.480403381

IP cpu delay at 0:2 is 1.539600883

IP cpu delay at 0:2 is 1.590587579

IP cpu delay at 0:2 is 1.643273832

IP cpu delay at 0:2 is 1.687930166

IP cpu delay at 0:2 is 1.744190878

IP cpu delay at 0:2 is 1.812120327

IP cpu delay at 0:2 is 1.862311925

IP cpu delay at 0:2 is 1.934268069

IP cpu delay at 0:2 is 1.998410338

IP cpu delay at 0:2 is 2.064690683

IP cpu delay at 0:2 is 2.133180372

IP cpu delay at 0:2 is 2.194011335

IP cpu delay at 0:2 is 2.277086762

IP cpu delay at 0:2 is 2.352656321

IP cpu delay at 0:2 is 2.430744865

IP cpu delay at 0:2 is 2.511436361

IP cpu delay at 0:2 is 2.594817573

IP cpu delay at 0:2 is 2.680978159

IP cpu delay at 0:2 is 2.770010764

IP cpu delay at 0:2 is 2.862011123

IP cpu delay at 0:2 is 2.947231149

IP cpu delay at 0:2 is 3.055319198

IP cpu delay at 0:2 is 3.156829838

IP cpu delay at 0:2 is 3.261724166

IP cpu delay at 0:2 is 3.370114972

IP cpu delay at 0:2 is 3.482118804

IP cpu delay at 0:2 is 3.588169742

IP cpu delay at 0:2 is 3.717461756

IP cpu delay at 0:2 is 3.841043814

IP cpu delay at 0:2 is 3.968745275

IP cpu delay at 0:2 is 4.100703451

IP cpu delay at 0:2 is 4.237060232

IP cpu delay at 0:2 is 4.37796224

IP cpu delay at 0:2 is 4.523560981

IP cpu delay at 0:2 is 4.674013014

IP cpu delay at 0:2 is 4.819655909

IP cpu delay at 0:2 is 4.990135311

IP cpu delay at 0:2 is 5.156139822

IP cpu delay at 0:2 is 5.327677816

IP cpu delay at 0:2 is 5.504933743

IP cpu delay at 0:2 is 5.688098201

IP cpu delay at 0:2 is 5.867583129

IP cpu delay at 0:2 is 6.072954245

IP cpu delay at 0:2 is 6.27505272

IP cpu delay at 0:2 is 6.483887811

IP cpu delay at 0:2 is 6.699684071

IP cpu delay at 0:2 is 6.92267354

IP cpu delay at 0:2 is 7.143307034

IP cpu delay at 0:2 is 7.391206226

IP cpu delay at 0:2 is 7.637246434

IP cpu delay at 0:2 is 7.891487982

IP cpu delay at 0:2 is 8.154204248

IP cpu delay at 0:2 is 8.425677723

IP cpu delay at 0:2 is 8.706200313

IP cpu delay at 0:2 is 8.996073657

IP cpu delay at 0:2 is 9.295609446

IP cpu delay at 0:2 is 9.60512976

IP cpu delay at 0:2 is 9.915026754

IP cpu delay at 0:2 is 10.255468311

IP cpu delay at 0:2 is 10.596983921

IP cpu delay at 0:2 is 10.949883385

IP cpu delay at 0:2 is 11.314546165

IP cpu delay at 0:2 is 11.69136437

IP cpu delay at 0:2 is 12.080743183

IP cpu delay at 0:2 is 12.47335149

IP cpu delay at 0:2 is 12.898879672

IP cpu delay at 0:2 is 13.328508994

IP cpu delay at 0:2 is 13.772459294

IP cpu delay at 0:2 is 14.231207937

IP cpu delay at 0:2 is 14.705248202

IP cpu delay at 0:2 is 15.18514835

IP cpu delay at 0:2 is 15.70126142

IP cpu delay at 0:2 is 16.224303467

IP cpu delay at 0:2 is 16.76478025

IP cpu delay at 0:2 is 17.323272925

IP cpu delay at 0:2 is 17.900382022

IP cpu delay at 0:2 is 18.49672809

IP cpu delay at 0:2 is 19.112952359

IP cpu delay at 0:2 is 19.749717438

IP cpu delay at 0:2 is 20.407708019

IP cpu delay at 0:2 is 21.08763162

IP cpu delay at 0:2 is 21.79021934

IP cpu delay at 0:2 is 22.506405684

IP cpu delay at 0:2 is 23.266440175

IP cpu delay at 0:2 is 24.041654847

IP cpu delay at 0:2 is 24.842710009

IP cpu delay at 0:2 is 25.670467009

IP cpu delay at 0:2 is 26.525815909

IP cpu delay at 0:2 is 27.40967644

IP cpu delay at 0:2 is 28.313161765

IP cpu delay at 0:2 is 29.266771046

IP cpu delay at 0:2 is 30.241996748

IP cpu delay at 0:2 is 31.249729973

IP cpu delay at 0:2 is 32.291054305

IP cpu delay at 0:2 is 33.367089449

IP cpu delay at 0:2 is 34.47899243

IP cpu delay at 0:2 is 35.627958845

IP cpu delay at 0:2 is 36.81522414

IP cpu delay at 0:2 is 38.042064944

IP cpu delay at 0:2 is 39.309800442

IP cpu delay at 0:2 is 40.61979379

IP cpu delay at 0:2 is 41.973453583

IP cpu delay at 0:2 is 43.362520624

IP cpu delay at 0:2 is 44.817652724

IP cpu delay at 0:2 is 46.311241148

IP cpu delay at 0:2 is 47.854615853

IP cpu delay at 0:2 is 49.449436381

IP cpu delay at 0:2 is 51.097417594

IP cpu delay at 0:2 is 52.800331514

IP cpu delay at 0:2 is 54.550103994

IP cpu delay at 0:2 is 56.378346031

IP cpu delay at 0:2 is 58.257290898

IP cpu delay at 0:2 is 60.198867262

IP cpu delay at 0:2 is 62.205162837

IP cpu delay at 0:2 is 64.278334932

IP cpu delay at 0:2 is 66.420612763

IP cpu delay at 0:2 is 68.634299855

IP cpu delay at 0:2 is 70.911952216

IP cpu delay at 0:2 is 73.285508257

IP cpu delay at 0:2 is 75.728025199

IP cpu delay at 0:2 is 78.251959372

IP cpu delay at 0:2 is 80.860024685

IP cpu delay at 0:2 is 83.555025507

IP cpu delay at 0:2 is 86.339859691

IP cpu delay at 0:2 is 89.217521681

IP cpu delay at 0:2 is 92.191105737

IP cpu delay at 0:2 is 95.263809261

IP cpu delay at 0:2 is 98.438936237

IP cpu delay at 0:2 is 101.719900778

IP cpu delay at 0:2 is 105.110230804

IP cpu delay at 0:2 is 108.613571831

IP cpu delay at 0:2 is 112.223828566

IP cpu delay at 0:2 is 115.974485177

IP cpu delay at 0:2 is 119.839968016

IP cpu delay at 0:2 is 123.834300284

IP cpu delay at 0:2 is 127.96177696

IP cpu delay at 0:2 is 132.226836192

IP cpu delay at 0:2 is 136.634064065

IP cpu delay at 0:2 is 141.188199534

IP cpu delay at 0:2 is 145.88415956

IP cpu delay at 0:2 is 150.756944837

IP cpu delay at 0:2 is 155.781842998

IP cpu delay at 0:2 is 160.974237765

IP cpu delay at 0:2 is 166.339712357

IP cpu delay at 0:2 is 171.884036102

IP cpu delay at 0:2 is 177.613170639

IP cpu delay at 0:2 is 183.533276327

IP cpu delay at 0:2 is 189.650718871

IP cpu delay at 0:2 is 195.972076167

IP cpu delay at 0:2 is 202.504145372

IP cpu delay at 0:2 is 209.253950218

IP cpu delay at 0:2 is 216.228748559

IP cpu delay at 0:2 is 223.436040177

IP cpu delay at 0:2 is 230.88357485

IP cpu delay at 0:2 is 238.579360678

IP cpu delay at 0:2 is 246.521905885

IP cpu delay at 0:2 is 254.749069564

IP cpu delay at 0:2 is 263.240371882

IP cpu delay at 0:2 is 272.014717612

IP cpu delay at 0:2 is 281.081541532

IP cpu delay at 0:2 is 290.450592917

IP cpu delay at 0:2 is 300.131946014

IP cpu delay at 0:2 is 310.136010881

IP cpu delay at 0:2 is 320.473544577

IP cpu delay at 0:2 is 331.145892576

IP cpu delay at 0:2 is 342.193859149

IP cpu delay at 0:2 is 353.599987787

IP cpu delay at 0:2 is 365.386320713

IP cpu delay at 0:2 is 377.565531404

IP cpu delay at 0:2 is 390.150715784

IP cpu delay at 0:2 is 403.15540631

IP cpu delay at 0:2 is 416.59358652

IP cpu delay at 0:2 is 430.479706071

IP cpu delay at 0:2 is 444.818844892

IP cpu delay at 0:2 is 459.655991103

IP cpu delay at 0:2 is 474.97752414

IP cpu delay at 0:2 is 490.809774945

IP cpu delay at 0:2 is 507.169767443

IP cpu delay at 0:2 is 524.075093024

IP cpu delay at 0:2 is 541.543929458

IP cpu delay at 0:2 is 559.59506044

IP cpu delay at 0:2 is 578.247895788

IP cpu delay at 0:2 is 597.522492314

IP cpu delay at 0:2 is 617.429895631

IP cpu delay at 0:2 is 638.020571913

IP cpu delay at 0:2 is 659.287590976

IP cpu delay at 0:2 is 681.263510676

IP cpu delay at 0:2 is 703.971961031

IP cpu delay at 0:2 is 727.437359732

IP cpu delay at 0:2 is 751.68493839

IP cpu delay at 0:2 is 776.74076967

IP cpu delay at 0:2 is 802.631795326

IP cpu delay at 0:2 is 829.38585517

IP cpu delay at 0:2 is 857.031717009

IP cpu delay at 0:2 is 885.599107576

IP cpu delay at 0:2 is 915.118744495

IP cpu delay at 0:2 is 945.622369311

IP cpu delay at 0:2 is 977.142781622

IP cpu delay at 0:2 is 1009.713874343

IP cpu delay at 0:2 is 1043.370670154

IP cpu delay at 0:2 is 1078.139426344

IP cpu delay at 0:2 is 1114.087340037

IP cpu delay at 0:2 is 1151.223251372

IP cpu delay at 0:2 is 1189.597026418

IP cpu delay at 0:2 is 1229.249927298

IP cpu delay at 0:2 is 1270.224591541

IP cpu delay at 0:2 is 1312.565077926

IP cpu delay at 0:2 is 1356.316913857

IP cpu delay at 0:2 is 1401.527144319

IP cpu delay at 0:2 is 1448.244382463

IP cpu delay at 0:2 is 1496.518861878

IP cpu delay at 0:2 is 1546.392804476

IP cpu delay at 0:2 is 1597.948917423

IP cpu delay at 0:2 is 1651.213548004

IP cpu delay at 0:2 is 1706.253666271

IP cpu delay at 0:2 is 1763.128455147

IP cpu delay at 0:2 is 1821.899070318

IP cpu delay at 0:2 is 1882.628705995

IP cpu delay at 0:2 is 1945.382662862

IP cpu delay at 0:2 is 2010.228418291

IP cpu delay at 0:2 is 2077.2356989

IP cpu delay at 0:2 is 2146.47655553

IP cpu delay at 0:2 is 2218.025440715

IP cpu delay at 0:2 is 2291.959288739

IP cpu delay at 0:2 is 2368.357598363

IP cpu delay at 0:2 is 2447.302518309

IP cpu delay at 0:2 is 2528.878935586

IP cpu delay at 0:2 is 2613.174566772

IP cpu delay at 0:2 is 2700.280052331

IP cpu delay at 0:2 is 2790.289054075

IP cpu delay at 0:2 is 2883.288543792

IP cpu delay at 0:2 is 2979.407974004

IP cpu delay at 0:2 is 3078.721239804

IP cpu delay at 0:2 is 3181.344947798

IP cpu delay at 0:2 is 3287.389446058

IP cpu delay at 0:2 is 3396.968760926

IP cpu delay at 0:2 is 3510.200719624

IP cpu delay at 0:2 is 3627.207076945

IP cpu delay at 0:2 is 3748.113646176

IP cpu delay at 0:2 is 3873.050434382

IP cpu delay at 0:2 is 4002.151782195

IP cpu delay at 0:2 is 4135.546658002

IP cpu delay at 0:2 is 4273.408063535

IP cpu delay at 0:2 is 4415.854665652

IP cpu delay at 0:2 is 4563.049487841

IP cpu delay at 0:2 is 4715.150804102

IP cpu delay at 0:2 is 4872.322164239

IP cpu delay at 0:2 is 5034.732569714

IP cpu delay at 0:2 is 5202.556655371

IP cpu delay at 0:2 is 5375.974877216

IP cpu delay at 0:2 is 5555.173706457

IP cpu delay at 0:2 is 5740.345830006

IP cpu delay at 0:2 is 5931.680367953

IP cpu delay at 0:2 is 6129.413036604

IP cpu delay at 0:2 is 6333.726471158

IP cpu delay at 0:2 is 6544.85035353

IP cpu delay at 0:2 is 6763.011698647

IP cpu delay at 0:2 is 6988.445088602

IP cpu delay at 0:2 is 7221.392924889

IP cpu delay at 0:2 is 7462.105689052

IP cpu delay at 0:2 is 7710.84221202

IP cpu delay at 0:2 is 7967.869952421

IP cpu delay at 0:2 is 8233.465284168

IP cpu delay at 0:2 is 8507.913793641

IP cpu delay at 0:2 is 8791.500686274

IP cpu delay at 0:2 is 9084.560609638

IP cpu delay at 0:2 is 9387.378963292

IP cpu delay at 0:2 is 9700.291262069

IP cpu delay at 0:2 is 10023.633970804

IP cpu delay at 0:2 is 10357.754769831

IP cpu delay at 0:2 is 10703.012928825

IP cpu delay at 0:2 is 11059.77969312

IP cpu delay at 0:2 is 11428.43868289

IP cpu delay at 0:2 is 11809.386305653

IP cpu delay at 0:2 is 12203.032182508

IP cpu delay at 0:2 is 12609.799588592

IP cpu delay at 0:2 is 13030.125908212

IP cpu delay at 0:2 is 13464.463105152

IP cpu delay at 0:2 is 13913.278208657

IP cpu delay at 0:2 is 14377.053815612

IP cpu delay at 0:2 is 14856.288609466

IP cpu delay at 0:2 is 15351.497896448

IP cpu delay at 0:2 is 15863.204373537

IP cpu delay at 0:2 is 16391.977849028

IP cpu delay at 0:2 is 16938.386900415

IP cpu delay at 0:2 is 17502.999463763

IP cpu delay at 0:2 is 18086.432445888

IP cpu delay at 0:2 is 18689.313194084

IP cpu delay at 0:2 is 19312.28996722

IP cpu delay at 0:2 is 19956.022905014

IP cpu delay at 0:2 is 20621.233396295

IP cpu delay at 0:2 is 21308.607509505

IP cpu delay at 0:2 is 22018.894093155

IP cpu delay at 0:2 is 22752.85689626

IP cpu delay at 0:2 is 23511.285126135

IP cpu delay at 0:2 is 24294.994297007

IP cpu delay at 0:2 is 25104.827106907

IP cpu delay at 0:2 is 25941.654343804

IP cpu delay at 0:2 is 26806.375821931

IP cpu delay at 0:2 is 27699.921349328

IP cpu delay at 0:2 is 28623.251727639

IP cpu delay at 0:2 is 29577.349810965

IP cpu delay at 0:2 is 30563.271445593

IP cpu delay at 0:2 is 31582.046827112

IP cpu delay at 0:2 is 32634.781388016

IP cpu delay at 0:2 is 33722.60710095

IP cpu delay at 0:2 is 34846.693670982

IP cpu delay at 0:2 is 36008.249793348

IP cpu delay at 0:2 is 37208.524453126

IP cpu delay at 0:2 is 38448.80826823

IP cpu delay at 0:2 is 39730.434877171

IP cpu delay at 0:2 is 41054.782373077

IP cpu delay at 0:2 is 42423.274785513

IP cpu delay at 0:2 is 43837.383611697

IP cpu delay at 0:2 is 45298.629398753

IP cpu delay at 0:2 is 46808.583378712

IP cpu delay at 0:2 is 48368.869158002

IP cpu delay at 0:2 is 49981.164463269

IP cpu delay at 0:2 is 51647.202945378

IP cpu delay at 0:2 is 53368.776043557

IP cpu delay at 0:2 is 55147.734911676

IP cpu delay at 0:2 is 56985.992408731

IP cpu delay at 0:2 is 58885.525155689

IP cpu delay at 0:2 is 60848.375660879

IP cpu delay at 0:2 is 62876.654516241

IP cpu delay at 0:2 is 64972.542666783

IP cpu delay at 0:2 is 67138.283920023

IP cpu delay at 0:2 is 69376.23655301

IP cpu delay at 0:2 is 71688.77743811

IP cpu delay at 0:2 is 74078.40301938

IP cpu delay at 0:2 is 76547.682786693

IP cpu delay at 0:2 is 79099.271879583

IP cpu delay at 0:2 is 81735.913942235

IP cpu delay at 0:2 is 84460.444073643

IP cpu delay at 0:2 is 87275.791876098

IP cpu delay at 0:2 is 90184.984605301

IP cpu delay at 0:2 is 93191.150425478

<<agent 6, monitoring the victim, was unable to get its snmp data; checks its monitored host.>>

1250.2 masrr6 - Create "nullsnmp" index

1250.2 masrr6 Exec: 19063 AtomicAction: "ping machine X" bindings: <peer 0:2(0), type ping, >

IP cpu delay at 0:2 is 96297.521772994

IP cpu delay at 0:2 is 99507.438832094

IP cpu delay at 0:2 is 102824.353126497

IP cpu delay at 0:2 is 106251.821444984

IP cpu delay at 0:2 is 109793.558612213

IP cpu delay at 0:2 is 113453.343565953

IP cpu delay at 0:2 is 117235.121351485

IP cpu delay at 0:2 is 121142.958396535

IP cpu delay at 0:2 is 125181.056676419

IP cpu delay at 0:2 is 129353.7582323

IP cpu delay at 0:2 is 133665.549840043

IP cpu delay at 0:2 is 138121.067834711

IP cpu delay at 0:2 is 142725.103095868

IP cpu delay at 0:2 is 147482.606199064

IP cpu delay at 0:2 is 152398.692739033

IP cpu delay at 0:2 is 157478.648830334

IP cpu delay at 0:2 is 162727.936791345

IP cpu delay at 0:2 is 168152.191150247

IP cpu delay at 0:2 is 173757.274056065

IP cpu delay at 0:2 is 179549.182857933

IP cpu delay at 0:2 is 185534.155286531

IP cpu delay at 0:2 is 191718.626796082

IP cpu delay at 0:2 is 198109.247355952

IP cpu delay at 0:2 is 204712.88860115

IP cpu delay at 0:2 is 211536.651221188

IP cpu delay at 0:2 is 218587.872595228

IP cpu delay at 0:2 is 225874.134681736

IP cpu delay at 0:2 is 233403.272171127

IP cpu delay at 0:2 is 241183.380910164

IP cpu delay at 0:2 is 249222.82660717

IP cpu delay at 0:2 is 257530.253827409

IP cpu delay at 0:2 is 266114.595288322

IP cpu delay at 0:2 is 274985.071712652

IP cpu delay at 0:2 is 284151.250521688

IP cpu delay at 0:2 is 293622.958539078

IP cpu delay at 0:2 is 303410.390157047

IP cpu delay at 0:2 is 313524.069495615

IP cpu delay at 0:2 is 323974.871478802

IP cpu delay at 0:2 is 334774.033528096

IP cpu delay at 0:2 is 345933.167645699

IP cpu delay at 0:2 is 357464.272900556

IP cpu delay at 0:2 is 369379.748330574

IP cpu delay at 0:2 is 381692.406274927

IP cpu delay at 0:2 is 394415.486150758

IP cpu delay at 0:2 is 407562.668689116

IP cpu delay at 0:2 is 421148.09064542

IP cpu delay at 0:2 is 435186.360000267

IP cpu delay at 0:2 is 449692.571666943

IP cpu delay at 0:2 is 464682.323722508

IP cpu delay at 0:2 is 480171.734179925

IP cpu delay at 0:2 is 496177.458319256

IP cpu delay at 0:2 is 512716.706596564

IP cpu delay at 0:2 is 529807.263149783

IP cpu delay at 0:2 is 547467.504921442

IP cpu delay at 0:2 is 565716.421418824

IP cpu delay at 0:2 is 584573.635132784

IP cpu delay at 0:2 is 604059.422637211

IP cpu delay at 0:2 is 624194.736391784

IP cpu delay at 0:2 is 645001.22727151

IP cpu delay at 0:2 is 666501.267847227

IP cpu delay at 0:2 is 688717.966487974

IP cpu delay at 0:2 is 711675.241991734

IP cpu delay at 0:2 is 735397.749724792

IP cpu delay at 0:2 is 759911.007715618

IP cpu delay at 0:2 is 785241.374306139

IP cpu delay at 0:2 is 811416.086449677

IP cpu delay at 0:2 is 838463.288997999

IP cpu delay at 0:2 is 866412.064964599

IP cpu delay at 0:2 is 895292.466796753

IP cpu delay at 0:2 is 925135.548689978

IP cpu delay at 0:2 is 955973.399979644

IP cpu delay at 0:2 is 987839.179645632

IP cpu delay at 0:2 is 1020767.151967153

IP cpu delay at 0:2 is 1054792.723366058

IP cpu delay at 0:2 is 1089952.48047826

IP cpu delay at 0:2 is 1126284.229494202

IP cpu delay at 0:2 is 1163827.026869154

IP cpu delay at 0:2 is 1202621.271039647

IP cpu delay at 0:2 is 1242708.646407635

IP cpu delay at 0:2 is 1284132.267621223

IP cpu delay at 0:2 is 1326936.676208597

IP cpu delay at 0:2 is 1371167.898415551

IP cpu delay at 0:2 is 1416873.494696069

IP cpu delay at 0:2 is 1464102.610852605

IP cpu delay at 0:2 is 1512906.030881025

1251.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

IP cpu delay at 0:2 is 1563336.231577059

IP cpu delay at 0:2 is 1615447.438962961

IP cpu delay at 0:2 is 1669295.68659506

IP cpu delay at 0:2 is 1724938.875814895

IP cpu delay at 0:2 is 1782436.838008725

IP cpu delay at 0:2 is 1841851.398942349

IP cpu delay at 0:2 is 1903246.445240427

IP cpu delay at 0:2 is 1966687.993081775

IP cpu delay at 0:2 is 2032244.259184501

IP cpu delay at 0:2 is 2099985.734157317

IP cpu delay at 0:2 is 2169985.258295895

IP cpu delay at 0:2 is 2242318.099905758

IP cpu delay at 0:2 is 2317062.03623595

IP cpu delay at 0:2 is 2394297.437110481

IP cpu delay at 0:2 is 2474107.351347497

IP cpu delay at 0:2 is 2556577.596059081

IP cpu delay at 0:2 is 2641796.848927717

IP cpu delay at 0:2 is 2729856.743558641

IP cpu delay at 0:2 is 2820851.968010595

IP cpu delay at 0:2 is 2914880.366610948

1251.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

IP cpu delay at 0:2 is 3012043.035379373

IP cpu delay at 0:2 is 3112444.479677292

IP cpu delay at 0:2 is 3216192.628666536

IP cpu delay at 0:2 is 3323399.049288753

IP cpu delay at 0:2 is 3434179.007544371

IP cpu delay at 0:2 is 3548651.650849858

IP cpu delay at 0:2 is 3666940.038878186

IP cpu delay at 0:2 is 3789171.373174126

IP cpu delay at 0:2 is 3915477.08527993

IP cpu delay at 0:2 is 4045992.987789261

IP cpu delay at 0:2 is 4180859.420382236

IP cpu delay at 0:2 is 4320221.400728311

IP cpu delay at 0:2 is 4464228.780419254

IP cpu delay at 0:2 is 4613036.406099896

IP cpu delay at 0:2 is 4766804.285969893

IP cpu delay at 0:2 is 4925697.761835556

IP cpu delay at 0:2 is 5089887.686896741

IP cpu delay at 0:2 is 5259550.609459966

IP cpu delay at 0:2 is 5434868.962775298

IP cpu delay at 0:2 is 5616031.261201141

IP cpu delay at 0:2 is 5803232.302907846

IP cpu delay at 0:2 is 5996673.369482299

IP cpu delay at 0:2 is 6196562.491654184

1251.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

IP cpu delay at 0:2 is 6403114.57437599

IP cpu delay at 0:2 is 6616551.726521857

IP cpu delay at 0:2 is 6837103.450405918

IP cpu delay at 0:2 is 7065006.898419449

IP cpu delay at 0:2 is 7300507.128033431

IP cpu delay at 0:2 is 7543857.365301212

IP cpu delay at 0:2 is 7795319.277144585

IP cpu delay at 0:2 is 8055163.252716072

IP cpu delay at 0:2 is 8323668.694139941

IP cpu delay at 0:2 is 8601124.316944605

IP cpu delay at 0:2 is 8887828.460509427

IP cpu delay at 0:2 is 9184089.40885974

IP cpu delay at 0:2 is 9490225.722155064

IP cpu delay at 0:2 is 9806566.5792269

IP cpu delay at 0:2 is 1.0133452131534465E7

IP cpu delay at 0:2 is 1.0471233868918944E7

IP cpu delay at 0:2 is 1.0820274987720797E7

IP cpu delay at 0:2 is 1.1180950830473604E7

IP cpu delay at 0:2 is 1.1553649191156056E7

IP cpu delay at 0:2 is 1.1938770830527924E7

IP cpu delay at 0:2 is 1.2336729857878856E7

IP cpu delay at 0:2 is 1.2747954186141483E7

IP cpu delay at 0:2 is 1.3172885992012868E7

IP cpu delay at 0:2 is 1.3611982191413296E7

IP cpu delay at 0:2 is 1.406571493079374E7

IP cpu delay at 0:2 is 1.4534572094820198E7

IP cpu delay at 0:2 is 1.5019057830980873E7

IP cpu delay at 0:2 is 1.5519693091680232E7

IP cpu delay at 0:2 is 1.6037016194402909E7

IP cpu delay at 0:2 is 1.6571583400549673E7

IP cpu delay at 0:2 is 1.7123969513567995E7

IP cpu delay at 0:2 is 1.769476849702026E7

IP cpu delay at 0:2 is 1.8284594113254268E7

IP cpu delay at 0:2 is 1.8894080583362743E7

IP cpu delay at 0:2 is 1.9523883259162877E7

IP cpu delay at 0:2 is 2.0174679377780262E7

IP cpu delay at 0:2 is 2.084716869003961E7

IP cpu delay at 0:2 is 2.154207431270759E7

IP cpu delay at 0:2 is 2.226014345613118E7

IP cpu delay at 0:2 is 2.3002148237668887E7

IP cpu delay at 0:2 is 2.3768886511924516E7

IP cpu delay at 0:2 is 2.4561182728655335E7

IP cpu delay at 0:2 is 2.5379888819277175E7

IP cpu delay at 0:2 is 2.622588511291975E7

IP cpu delay at 0:2 is 2.7100081283017077E7

IP cpu delay at 0:2 is 2.8003417325450975E7

IP cpu delay at 0:2 is 2.8936864569299344E7

IP cpu delay at 0:2 is 2.990142672127599E7

IP cpu delay at 0:2 is 3.089814094498519E7

IP cpu delay at 0:2 is 3.192807897615136E7

IP cpu delay at 0:2 is 3.2992348275023073E7

IP cpu delay at 0:2 is 3.409209321719051E7

IP cpu delay at 0:2 is 3.522849632409686E7

IP cpu delay at 0:2 is 3.640277952458884E7

IP cpu delay at 0:2 is 3.761620551871971E7

IP cpu delay at 0:2 is 3.887007903567704E7

IP cpu delay at 0:2 is 4.016574833653294E7

IP cpu delay at 0:2 is 4.150460661408404E7

IP cpu delay at 0:2 is 4.288809350088684E7

IP cpu delay at 0:2 is 4.4317696617249735E7

IP cpu delay at 0:2 is 4.579495317082473E7

IP cpu delay at 0:2 is 4.732145160951888E7

IP cpu delay at 0:2 is 4.889883332950285E7

1252.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4045 3 9

IP cpu delay at 0:2 is 5.052879444015294E7

IP cpu delay at 0:2 is 5.22130875878247E7

IP cpu delay at 0:2 is 5.395352384041886E7

IP cpu delay at 0:2 is 5.575197463476616E7

IP cpu delay at 0:2 is 5.761037378892503E7

IP cpu delay at 0:2 is 5.9530719581555866E7

IP cpu delay at 0:2 is 6.151507690060773E7

IP cpu delay at 0:2 is 6.356557946362799E7

IP cpu delay at 0:2 is 6.568443211208226E7

IP cpu delay at 0:2 is 6.787391318215166E7

IP cpu delay at 0:2 is 7.013637695455672E7

IP cpu delay at 0:2 is 7.247425618604194E7

IP cpu delay at 0:2 is 7.489006472524334E7

IP cpu delay at 0:2 is 7.738640021575145E7

IP cpu delay at 0:2 is 7.996594688927649E7

IP cpu delay at 0:2 is 8.263147845191903E7

IP cpu delay at 0:2 is 8.538586106664968E7

IP cpu delay at 0:2 is 8.823205643520467E7

IP cpu delay at 0:2 is 9.11731249827115E7

IP cpu delay at 0:2 is 9.421222914846854E7

<<ChAD’s last cycle, on data gathered after attack begins but before cpu is delayed, sees a change in icmp traffic, as well as the http traffic and number of connections (the change in "valid" traffic, however, is not yet outside of normal fluctuations). Again, the agent is not yet using this information, but we show potential for early detection.>>

1252.2 masrr6 EVENT LOG received =

E ipOutRequests 4043 0 301

E tcpCurrEstab 4043 10 5

E wwwSummaryOutBytesLow 4043 0 301

E tcpCurrEstab 4044 15 7

E wwwSummaryOutBytesLow 4044 0 301

E icmpInEchos 4044 0 301

E icmpOutMsgs 4044 0 301

IP cpu delay at 0:2 is 9.735263677663136E7

IP cpu delay at 0:2 is 1.0059772466915993E8

IP cpu delay at 0:2 is 1.0395098215812947E8

IP cpu delay at 0:2 is 1.0741601489673015E8

IP cpu delay at 0:2 is 1.109965487364392E8

IP cpu delay at 0:2 is 1.1469643369398716E8

IP cpu delay at 0:2 is 1.1851964815012006E8

IP cpu delay at 0:2 is 1.2247030308812408E8

IP cpu delay at 0:2 is 1.2655264652406153E8

IP cpu delay at 0:2 is 1.3077106807453026E8

IP cpu delay at 0:2 is 1.3513010367668125E8

IP cpu delay at 0:2 is 1.3963444046557063E8

IP cpu delay at 0:2 is 1.4428892180419806E8

IP cpu delay at 0:2 is 1.4909855254089627E8

IP cpu delay at 0:2 is 1.5406850429192615E8

IP cpu delay at 0:2 is 1.592041211013237E8

IP cpu delay at 0:2 is 1.6451092513770115E8

IP cpu delay at 0:2 is 1.6999462264195785E8

IP cpu delay at 0:2 is 1.756611100630231E8

IP cpu delay at 0:2 is 1.8151648039812386E8

IP cpu delay at 0:2 is 1.8756702974439466E8

IP cpu delay at 0:2 is 1.938192640688745E8

IP cpu delay at 0:2 is 2.0027990620417032E8

IP cpu delay at 0:2 is 2.069559030773093E8

IP cpu delay at 0:2 is 2.1385443317955297E8

1252.4 masrr7 EVENT LOG received =

IP cpu delay at 0:2 is 2.2098291428520474E8

IP cpu delay at 0:2 is 2.2834901142771155E8

IP cpu delay at 0:2 is 2.3596064514163527E8

IP cpu delay at 0:2 is 2.4382599997935644E8

IP cpu delay at 0:2 is 2.519535333116683E8

IP cpu delay at 0:2 is 2.6035198442172393E8

IP cpu delay at 0:2 is 2.6903038390211475E8

IP cpu delay at 0:2 is 2.779980633651852E8

IP cpu delay at 0:2 is 2.872646654672145E8

IP cpu delay at 0:2 is 2.968401543259319E8

1253.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4741.6006

1253.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3932.793

1253.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 20993.734

1253.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 8176.5234

1253.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 4549.833

1253.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 7009.561

1253.0 masrr5 - Create "error" index for ipForwDatagrams = 89.35713

1253.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19707.957

1253.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8386.128

<<agent 6’s ping timed out. If the machine had responded, the agent would have implemented filtering at the host, to see if the machine recovered. This step is not taken here, but other actions are performed.>>

masrr6:

1253.2 wm AtomicAction "19063 ping machine X" got response: "not responding"

1253.2 masrr6 Exec: 19433 AtomicAction: "inform peer of problem" bindings: <evaluation my host is down, peer [masrr5], target 0:2(0), type peer, >

1253.2 masrr6 Exec: 19434 AtomicAction: "alert system administrator" bindings: <message 0:2(0) not responding, recipient sysadmin, type email, >

1253.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20072.387

1253.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 6301.0957

<<the "upstream" peer receives a notice from the victim’s agent; responds by filtering all traffic to the victim.>>

1254.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <command status, evaluation my host is down, peer masrr6, target 0:2(0), type peer, >

1256.0 masrr5 Exec: 19763 AtomicAction: "respond to status request from peer" bindings: <commandId 263, peer masrr6, returnAddress masrr6, type response, >

1256.0 masrr5 Exec: 19764 AtomicAction: "install filter" bindings: <fromFilter null, system filter, toFilter 0:2(0), type status, >

masrr6:

1256.2 wm AtomicAction "19433 inform peer of problem" got response: "timed out"

1256.2 masrr6 Exec: 19837 AtomicAction: "install filter" bindings: <fromFilter null, system filter, toFilter 0:2(0), type status, >

<<attack traffic (from 1:100) is filtered.>>

1257.017385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.027385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.037385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.047385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.057385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.067385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.077385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.087385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.097385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.107385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.117385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.127385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.137385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.147385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.157385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.167385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.177385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.187385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.197385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.2 masrr6 rec'd message from masrr6 message type: 2, bindings = <command alive, commandId 263, peer masrr5, returnAddress masrr6, type response, >

1257.207385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.217385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.227385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.237385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.247385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.257385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.267385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.277385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.287385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.297385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.307385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

1257.317385003 Message to 0:2(0) from 1:100(0) gets filtered at 1

<<some valid traffic is dropped as well>>

1257.356225499 Message to 0:2(0) from 1:24(0) gets filtered at 1

masrr5:

1258.0 wm AtomicAction "19764 install filter" got response: "started"

1258.0 masrr5 Exec: 19765 AtomicAction: "record packets for machine X" bindings: <peer 0:2(0), system packet capture, type status, >

masrr6:

1258.2 wm AtomicAction "19837 install filter" got response: "started"

<<agent 5, the peer, records traffic, for more information. We did not actually implement tcpDump in our simulation (although SSF supports it), so the analysis step below simply retrieves the attacker’s identity from a configuration variable.>>

1258.2 masrr6 Exec: 19838 AtomicAction: "record packets for machine X" bindings: <peer 0:2(0), system packet capture, type status, >

1259.0 masrr5 Start tcpdump at peer 0:2(0)

1259.012016 Message to 0:2(0) from 0:5(0) gets filtered at 1

1259.2 masrr6 Start tcpdump at peer 0:2(0)

1259.41039806 Message to 0:2(0) from 0:28(0) gets filtered at 1

masrr5:

1260.0 wm AtomicAction "19765 record packets for machine X" got response: "started"

1260.0 masrr5 Exec: 20318 AtomicAction: "analyze packets" bindings: <peer 0:2(0), type traffic, >

masrr6:

1260.2 wm AtomicAction "19838 record packets for machine X" got response: "started"

1260.2 masrr6 Exec: 20392 AtomicAction: "analyze packets" bindings: <peer 0:2(0), type traffic, >

1260.642585579 Message to 0:2(0) from 0:23(0) gets filtered at 1

masrr5:

1261.0 wm AtomicAction "19763 respond to status request from peer" got response: "timed out"

1261.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1261.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1261.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1261.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1261.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 19965.72

1261.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 3610.9478

1261.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1261.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

masrr5:

1262.0 wm AtomicAction "20318 analyze packets" got response: "2:100(0)"

1262.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 4694.306

1262.0 masrr5 - Create "increasing" index for ipInReceives = 100.81647

1262.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3498.9087

1262.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 20471.234

1262.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 7969.6772

1262.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1994.4939

1262.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 4992.199

1262.0 masrr5 - Create "increasing" index for ipForwDatagrams = 95.43979

1262.0 masrr5 - Create "error" index for ipForwDatagrams = 95.43979

1262.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19707.611

1262.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8996.028

<<Based on analysis of the packet capture, a more specific filter is added, and the general filter is removed (unfortunately, this particular attack has succeeded, and we do not encounter any more traffic from the attacker).>>

1262.0 masrr5 Exec: 20599 AtomicAction: "inform peer of action" bindings: <action addfilter, peer [masrr6, masrr7], type peer, >

1262.0 masrr5 Exec: 20600 AtomicAction: "install filter" bindings: <fromFilter 2:100(0), system filter, toFilter null, type status, >

1262.0 masrr5 Exec: 20601 AtomicAction: "remove filter" bindings: <fromFilter null, system filter, toFilter 0:2(0), type status, >

1262.042386002 Message to 0:2(0) from 1:48(0) gets filtered at 1

masrr6:

1262.2 wm AtomicAction "20392 analyze packets" got response: "2:100(0)"

1262.2 masrr6 Exec: 20676 AtomicAction: "inform peer of action" bindings: <action addfilter, peer [masrr5], type peer, >

1262.2 masrr6 Exec: 20677 AtomicAction: "install filter" bindings: <fromFilter 2:100(0), system filter, toFilter null, type status, >

1262.2 masrr6 Exec: 20678 AtomicAction: "remove filter" bindings: <fromFilter null, system filter, toFilter 0:2(0), type status, >

1262.4 masrr5 EVENT LOG received =

E ipInDiscards 4047 0 301

1262.4 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1262.4 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1262.4 masrr6 EVENT LOG received =

1262.4 masrr7 EVENT LOG received =

1262.9684976 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1263.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <action addfilter, command action, peer masrr6, type peer, >

1263.4 masrr7 rec'd message from masrr5 message type: 2, bindings = <action addfilter, command action, peer masrr5, type peer, >

1263.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20170.857

1263.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 7399.663

1263.4 masrr6 rec'd message from masrr5 message type: 2, bindings = <action addfilter, command action, peer masrr5, type peer, >

masrr5:

1264.0 wm AtomicAction "20600 install filter" got response: "started"

<<agent 5 generates a warning about the dropped packets (ipInDiscards), but the agent has knowledge of the reason and does not need to act on it.>>

masrr5:

1264.0 wm AtomicAction "20601 remove filter" got response: "removed"

1264.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 9744.331

1264.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3504.1262

1264.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 20676.203

1264.0 masrr5 - Create "warning" index for ipInDiscards = 1.012384

1264.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 8136.1377

1264.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1997.9723

1264.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 10169.43

1264.0 masrr5 - Create "increasing" index for ipForwDatagrams = 95.58886

1264.0 masrr5 - Create "error" index for ipForwDatagrams = 95.58886

1264.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 19707.611

1264.0 masrr5 - Create "increasing" index for ifInOctets0:1(1) = 9086.463

1264.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 9086.463

masrr6:

1264.2 wm AtomicAction "20677 install filter" got response: "started"

masrr6:

1264.2 wm AtomicAction "20678 remove filter" got response: "removed"

1271.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1271.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1271.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1272.0 masrr5 EVENT LOG received =

E ipForwDatagrams 4048 45 2

E udpInDatagrams 4048 6 2

E udpOutDatagrams 4048 6 2

C ifOutOctets0:1(2) 4048 37 1 CveryLow --> CyellowLow

C ifOutOctets0:1(2) 4048 98 1 CveryLow --> CyellowLow

1272.4 masrr6 EVENT LOG received =

1272.4 masrr7 EVENT LOG received =

C ipInReceives 4048 6 1 CMAX --> C2.000000 - 2.500000

C ipInDelivers 4048 6 1 CMAX --> C2.000000 - 2.500000

C ipOutRequests 4048 6 1 CMAX --> C2.000000 - 2.500000

C udpInDatagrams 4048 5 1 C0.000000 - 0.500000 --> C2.000000 - 2.500000

C udpOutDatagrams 4048 5 1 C0.000000 - 0.500000 --> C2.000000 - 2.500000

1273.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20009.006

1273.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 6352.6025

1274.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 8247.252

1274.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3532.8762

1274.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 20687.895

1274.0 masrr5 - Create "warning" index for ipInDiscards = 1.012384

1274.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6037.5474

1274.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 2129.7222

1274.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 8841.737

1274.0 masrr5 - Create "increasing" index for ipForwDatagrams = 95.73555

1274.0 masrr5 - Create "error" index for ipForwDatagrams = 95.73555

1274.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 21889.715

1274.0 masrr5 - Create "increasing" index for ifInOctets0:1(1) = 9248.838

1274.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 9248.838

1276.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 20009.006

1276.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 6352.6025

1277.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 8247.252

1277.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3188.2954

1277.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 20579.506

1277.0 masrr5 - Create "warning" index for ipInDiscards = 1.012384

1277.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 6037.5474

1277.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1889.7223

1277.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 8769.4795

1277.0 masrr5 - Create "error" index for ipForwDatagrams = 93.67103

1277.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 21010.168

1277.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 8411.869

1281.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1281.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1281.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

<<agent 5’s ChAD sees an important change in ipInDiscards and ipInDelivers (we need more research to determine exactly how changes should be interpreted).>>

1282.0 masrr5 EVENT LOG received =

E ipInDelivers 4049 1 137

E ipOutRequests 4049 2 20

E ipInReceives 4050 1 32

S ipInDiscards 4050 0 0 ipOutRequests

S ipInDelivers 4050 1 1 ifInOctets0:1(0)

E ipForwDatagrams 4050 3 10

1282.2 masrr6 EVENT LOG received =

1282.4 masrr7 EVENT LOG received =

1283.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 24123.557

1283.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 6520.95

1284.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 8335.367

1284.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3017.6577

1284.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 24605.363

1284.0 masrr5 - Create "warning" index for ipInDiscards = 1.012384

1284.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9611.258

1284.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1950.5918

1284.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 7769.132

1284.0 masrr5 - Create "error" index for ipForwDatagrams = 79.35219

1284.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 21040.895

1284.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6671.0283

1291.0 masrr5 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr6, masrr7], period 30, type peer, >

1291.0 masrr5 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1291.2 masrr6 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1291.2 masrr6 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1291.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 24123.557

1291.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 6520.95

1291.4 masrr7 Exec: <> AtomicAction: "hello neighbors" bindings: <peer [masrr5], period 30, type peer, >

1291.4 masrr7 Exec: <> AtomicAction: "SNMP polling" bindings: <period 10, type polling, >

1292.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 8385.625

1292.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3109.2212

1292.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 24584.258

1292.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9930.721

1292.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1908.4244

1292.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(0) = 7028.1978

1292.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 7028.1978

1292.0 masrr5 - Create "error" index for ipForwDatagrams = 67.88681

1292.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 21216.424

1292.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6386.4614

1292.2 masrr7 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1292.2 masrr5 EVENT LOG received =

E ipForwDatagrams 4052 2 22

1292.2 masrr6 rec'd message from masrr5 message type: 2, bindings = <command hello, peer masrr5, type peer, >

1292.2 masrr6 EVENT LOG received =

1292.4 masrr5 rec'd message from masrr6 message type: 2, bindings = <command hello, peer masrr6, type peer, >

1293.0 masrr5 rec'd message from masrr7 message type: 2, bindings = <command hello, peer masrr7, type peer, >

1293.0 masrr7 EVENT LOG received =

1294.0 masrr5 - Create "warning" index for ifInOctets0:1(3) = 3335.6003

1294.0 masrr5 - Create "warning" index for ifOutOctets0:1(1) = 3104.0037

1294.0 masrr5 - Create "warning" index for ifInOctets0:1(0) = 24379.29

1294.0 masrr5 - Create "warning" index for ifOutOctets0:1(3) = 9764.26

1294.0 masrr5 - Create "warning" index for ifInOctets0:1(2) = 1904.946

1294.0 masrr5 - Create "decreasing" index for ifOutOctets0:1(0) = 1850.9678

1294.0 masrr5 - Create "warning" index for ifOutOctets0:1(0) = 1850.9678

1294.0 masrr5 - Create "decreasing" index for ipForwDatagrams = 67.73774

1294.0 masrr5 - Create "error" index for ipForwDatagrams = 67.73774

1294.0 masrr5 - Create "warning" index for ifOutOctets0:1(2) = 21216.424

1294.0 masrr5 - Create "decreasing" index for ifInOctets0:1(1) = 6296.0264

1294.0 masrr5 - Create "warning" index for ifInOctets0:1(1) = 6296.0264

1294.4 masrr7 - Create "warning" index for ifOutOctets0:3(0) = 23918.418

1294.4 masrr7 - Create "warning" index for ifInOctets0:3(0) = 2732.2344

----------------------------------------------------------------------

<<I did not really know what the outcome of this simulation would be, in advance, but I think now that had I run it longer, agent 5’s ChAD model would have changed again to adapt to the lack of traffic generated by the web server.>>