Re: [gnso-ff-pdp-may08] Data Annex for Report - First Draft

[Martin Hall <martinh@xxxxxxxxxxxxxxx>]

Rod and Greg,

Thanks for the quick and very useful responses. Definitely helps me  
improve this with narrative and supporting tables. Your APWG paper is  
a big help in guiding what we do here.
Re additional data inclusion such as mean and average fluxing domain  
lifetimes, we could incorporate lots more data and views but I'm  
somewhat conscious of us wanting to get this report to the next stage.  
Perhaps we can discuss this trade off in today's call?
Martin

On Dec 4, 2008, at 10:13 PM, Rod Rasmussen wrote:

> Martin,
>
> Great stuff!
>
> I concur with Greg's comments and would also wonder if you had any  
> qualitative comments that could be added for the big "spikes" in  
> domains on the first chart.  I'm sure that there will be questions  
> about those, and if you can include that info now, it would be  
> useful.  In particular, the 11/1, 11/11, 10/7, and perhaps 9/25  
> escalations (assuming I have those dates right).  Don't remember off  
> the top of my head - were there interactions here with the McColo or  
> InterCage shut-downs?
> Rod
>
> On Dec 4, 2008, at 8:45 PM, Greg Aaron wrote:
>
> > Dear Martin:
> >
> > This is great material, and thanks.
> >
> > Definitely add the data table (listing the numbers of fluxers by  
> > TLD, number
> > of total registration in each TLD, and flux scores).
> >
> > As you add narrative, I think it could help to include a definition  
> > of
> > "Total Number of Fluxing Domains by Date."  Does this metric tell  
> > how many
> > domain names you saw fluxing on a given day?
> >
> > Related: do you have stats for the average and mean lifetime (in  
> > days) of
> > the fluxing domains you detected?  (I wonder if Jose has stats for  
> > that
> > too.)
> >
> > The pie chart on the left would benefit from labels for .COM, .CN,  
> > and .NET.
> >
> > All best,
> > --Greg
> >
> >
> >
> >
> > -----Original Message-----
> > From: owner-gnso-ff-pdp-may08@xxxxxxxxx
> > [mailto:owner-gnso-ff-pdp-may08@xxxxxxxxx] On Behalf Of Martin Hall
> > Sent: Thursday, December 04, 2008 11:14 PM
> > To: Fast Flux Workgroup
> > Subject: [gnso-ff-pdp-may08] Data Annex for Report - First Draft
> >
> > My apologies for this being so close to our call tomorrow. The amount
> > of data our analytics had to run over was gigantic and took longer
> > than anticipated.
> >
> > Based on conversations and suggestions to date, I've included 4 data
> > visualizations for the 8/23 - 11/23 period:
> > New Fluxing Domains Detected by Date
> > Total Number of Fluxing Domains Detected by Date
> > Total Number of Fluxing Domains by TLD
> > Number of Fluxing Domains per 10,000 Registered Domains by TLD
> >
> > I'm happy to do the work to turn Jose's numbers into similar charts.
> > But I'd like the group to tell me that the visualizations I've chosen
> > look OK or discuss alternatives before I take the time to produce  
> > them
> > for Arbor's data.
> >
> > I will also enhance this with additional narrative based on the input
> > I get from the list and on tomorrow's call.
> >
> > In line with the APWG report, perhaps I should also include the raw #
> > registered domains/TLD in here as well?
> >
> > Comments?
> >
> > Martin
> >
> >
> > --
> > Martin Hall
> > skype: martin-hall
> > +1-408-838-2890
--
Martin Hall
skype: martin-hall
+1-408-838-2890