<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE rss [<!ENTITY % HTMLlat1 PUBLIC "-//W3C//ENTITIES Latin 1 for XHTML//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml-lat1.ent">]>
<rss version="2.0" xml:base="http://lopsa.org">
<channel>
 <title>stuartf&#039;s blog</title>
 <link>http://lopsa.org/blog/463</link>
 <description></description>
 <language>en</language>
<item>
 <title>Graphing with R</title>
 <link>http://lopsa.org/node/814</link>
 <description>&lt;p&gt;I wanted to know who was using our DNS servers for recursive lookups from off campus.  Getting all the data together for this wasn&#039;t hard, but once I had it it was difficult to read, so I made a graph of it.  Here&#039;s how:&lt;/p&gt;
&lt;p&gt;First I got all the data into a csv file one datapoint per line and a header line, it looks like:&lt;/p&gt;
&lt;p&gt;&lt;code &gt;&lt;br /&gt;
asn, queries, hosts, name&lt;br /&gt;
11888, 0.031, 0.006, Television Internacional S.A. de C.V.&lt;br /&gt;
5552, 0.006, 0.006, DIALNET-UK DIALnet PLC&lt;br /&gt;
&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;The asns and names are pulled from &lt;a href=&quot;http://www.cymru.com/&quot;&gt;Cymru&lt;/a&gt;, queries is the average number of queries from that netblock per day since we started monitoring, and hosts is the average number of unique IPs querying per day since we started monitoring.  Getting the data into this format is left as an exercise for the reader (you probably want to graph something completely different anyway.&lt;/p&gt;

&lt;!--
&lt;rdf:RDF xmlns:rdf=&quot;http://www.w3.org/1999/02/22-rdf-syntax-ns#&quot; xmlns:dc=&quot;http://purl.org/dc/elements/1.1/&quot; xmlns:trackback=&quot;http://madskills.com/public/xml/rss/module/trackback/&quot;&gt;
&lt;rdf:Description rdf:about=&quot;http://lopsa.org/node/814&quot; dc:identifier=&quot;http://lopsa.org/node/814&quot; dc:title=&quot;Graphing with R&quot; trackback:ping=&quot;http://lopsa.org/trackback/814&quot; /&gt;
&lt;/rdf:RDF&gt;
--&gt;

</description>
 <category domain="http://lopsa.org/taxonomy/term/24">Operating System</category>
 <pubDate>Tue, 03 Oct 2006 07:15:49 -0700</pubDate>
 <author>stuartf</author>
</item>
</channel>
</rss>
