ICANN ICANN Email List Archives

[gnso-ff-pdp-may08]


<<< Chronological Index >>>    <<< Thread Index >>>

Re: [gnso-ff-pdp-may08] Data Annex for Report - First Draft

  • To: Rod Rasmussen <rod.rasmussen@xxxxxxxxxxxxxxxxxxxx>, Greg Aaron <gaaron@xxxxxxxxxxxx>
  • Subject: Re: [gnso-ff-pdp-may08] Data Annex for Report - First Draft
  • From: Martin Hall <martinh@xxxxxxxxxxxxxxx>
  • Date: Fri, 5 Dec 2008 07:00:14 -0800


Rod and Greg,

Thanks for the quick and very useful responses. Definitely helps me improve this with narrative and supporting tables. Your APWG paper is a big help in guiding what we do here.

Re additional data inclusion such as mean and average fluxing domain lifetimes, we could incorporate lots more data and views but I'm somewhat conscious of us wanting to get this report to the next stage. Perhaps we can discuss this trade off in today's call?

Martin

On Dec 4, 2008, at 10:13 PM, Rod Rasmussen wrote:


Martin,

Great stuff!

I concur with Greg's comments and would also wonder if you had any qualitative comments that could be added for the big "spikes" in domains on the first chart. I'm sure that there will be questions about those, and if you can include that info now, it would be useful. In particular, the 11/1, 11/11, 10/7, and perhaps 9/25 escalations (assuming I have those dates right). Don't remember off the top of my head - were there interactions here with the McColo or InterCage shut-downs?

Rod

On Dec 4, 2008, at 8:45 PM, Greg Aaron wrote:


Dear Martin:

This is great material, and thanks.

Definitely add the data table (listing the numbers of fluxers by TLD, number
of total registration in each TLD, and flux scores).

As you add narrative, I think it could help to include a definition of "Total Number of Fluxing Domains by Date." Does this metric tell how many
domain names you saw fluxing on a given day?

Related: do you have stats for the average and mean lifetime (in days) of the fluxing domains you detected? (I wonder if Jose has stats for that
too.)

The pie chart on the left would benefit from labels for .COM, .CN, and .NET.


All best,
--Greg




-----Original Message-----
From: owner-gnso-ff-pdp-may08@xxxxxxxxx
[mailto:owner-gnso-ff-pdp-may08@xxxxxxxxx] On Behalf Of Martin Hall
Sent: Thursday, December 04, 2008 11:14 PM
To: Fast Flux Workgroup
Subject: [gnso-ff-pdp-may08] Data Annex for Report - First Draft

My apologies for this being so close to our call tomorrow. The amount
of data our analytics had to run over was gigantic and took longer
than anticipated.

Based on conversations and suggestions to date, I've included 4 data
visualizations for the 8/23 - 11/23 period:
New Fluxing Domains Detected by Date
Total Number of Fluxing Domains Detected by Date
Total Number of Fluxing Domains by TLD
Number of Fluxing Domains per 10,000 Registered Domains by TLD

I'm happy to do the work to turn Jose's numbers into similar charts.
But I'd like the group to tell me that the visualizations I've chosen
look OK or discuss alternatives before I take the time to produce them
for Arbor's data.

I will also enhance this with additional narrative based on the input
I get from the list and on tomorrow's call.

In line with the APWG report, perhaps I should also include the raw #
registered domains/TLD in here as well?

Comments?

Martin


--
Martin Hall
skype: martin-hall
+1-408-838-2890






--
Martin Hall
skype: martin-hall
+1-408-838-2890







<<< Chronological Index >>>    <<< Thread Index >>>

Privacy Policy | Terms of Service | Cookies Policy