This week all the development boards and components arrived so I have been going over the schematics to help with the node design. I have also had a little play with the micro and made an LED flash.

In the load balancer analysis, I took the presence of load balanced paths containing the given LB into account. In particular the count of UDP LBs was reduced in the UDP LB not TCP LB case, where a common destination non LB TCP path containing a clump existed. This modified value was used to recalculate two statistics: TCP LB and UDP LB count over UDP LB count* and UDP LB and not TCP LB count over UDP LB count*.

In the LB path analysis the percentage of UDP TCP differences that could be explained by clumps was recalculated if there were cases of a TCP path containing a clump but also containing a corresponding UDP LB node that is not load balancing for TCP. The result reduced from 99% to 98%.

Case 9 from the LB path analysis was investigated by looking at warts files. This involves TCP LB paths which are not also UDP LB paths where corresp. UDP path does not contain a clump. Here we see a TCP path that has a load balancer and a UDP path where the node does not load balance. It was decided that improved data collection is required to validate these small numbers in this category. Steps are underway to confirm this type of result at the time of probing the Internet. It would appear that part of this is to give scamper MDA a mode that is better than 99% confidence for use on special occasions.

Another week of fairly full on assignments (OpenCL and Wireless Sensor Nodes) which prevented me making progress on my 520. Trying to make an effort to spend more time at uni next week.

Spent the week working through a number of possible techniques for finding a suitable threshold for reporting anomalies in my forecast residuals. This involved learning about Mahalanobis distances, chi-square distributions and Stahel-Donoho estimates. Currently, I'm playing with Shewhart control charts, which are mainly used for measuring industrial quality. Managed to get a good result with the Windows Messenger test data I have, although the results for the BitTorrent test data suggest that more tweaking may be required.

Had to quickly revise my IMC paper to pass the format checker on the submission site. This took a little longer than anticipated as the format checker was configured with the wrong page size!

Helped out with Open Day on Friday, mainly by talking to people and impressing them with the wonders of networking.

Carried out an experiment on 1000 addresses to vary IP option SI and port to give the same sequence of bytes. The key result was that about half of the port traces had LBs whereas none of the option SI cases had LBs. The experiment is being rerun on 30000 addresses obtained from previous but different IP option analysis where LBs were found.

Further analysis of TCP and UDP LBs has been carried out to investigate the differences that have been seen.

Wrote a short script to regularly report AMP data to stdout (anticipating
the sort of data that Nathan might produce) and updated my main anomaly
detection program to operate with multiple simultaneous time series
inputs. It will process a few days of historical data for each time series
before adjusting to real time and continuing to process data as it
arrives. Wrote a small event filter program to try to get a feel for what
might be required there - need to get an idea of how many events, of what
severity should be required to generate actual alerts of some level. Also
need to determine how best to aggregate events over time, as different
detectors may take different lengths of time to trigger for the same
event.

Spent Friday at a stall for open day trying to encourage students to study
computer science. Seemed to be fewer students than in previous years, but
many of the ones we did see were quite enthusiastic and seemed to be
leaning strongly towards doing computer science. Thanks to everyone who
helped get BSOD working on the display wall, carrying stuff around,
setting up equipment and evangelising to students. I've started to
document what I've learnt about the display wall so hopefully it's a bit
easier next time around.

This week I have been doing a bit of work on the schematic design and learning how to use Eagle CAD PCB designer. Also spent a bit of time going over opamp designs for the microphone. Tony and I have put placed orders for a couple of development boards, radio modules, and a range of sensors to help design the circuit and get some code developed to ease the burden down the line.

I read the whitepaper and specifications for openflow to start working on a new project to simulate the behaviour of switches. And spoke with Richard about it.

I also gave a talk at the open day about my graphs. Given that highschool kids are not notorious for their enthusiasm towards being lectured I think it went pretty well..

Didn't make any progress on Honours last week, ended up spending most of my time on an OpenCL assignment for COMP553.

Didn't really get anything done last week. I've been working flat out with assignments. Let's hope next week goes better.