[Forensics] KAU flow-graph (corrected)

This is a corrected version of what I posted 4 months ago in this forum here.

In the next post, I'll show what I ran to produce this result.

bash cource code is at github

here
and
here

All based on previous work I have documented on this forum over the last few weeks in particular.

I use the same bash script to work on KAG and KAU.
The subtlety is in the parameters you pass to the script files.
See photograph in next post (...).

The 2 output files as well. At github.
Please read the pic, bottom right to see exactly which output files I use to draw to draw the digraph enclosed.

 

[ZürichGnome]

I have now modified one of my workhorse bash scripts (tinkered on here in this forum) to read 3 files as input.

This allows me to use the same script for both KAG and KAU.
The subtlety is in the 3 files passed down.

I pipe out to some output file with a time stamp.

For me it is a little bizarre making photographs of linux command line sessions but I do this out of courtesy for other users of my VPN who will unfortunately get the following message:



The aggressive defensive protective measures behind this esteemed forum have blocked all the VPN IPs I have used so far.

This means all users using this VPN provider (a standard one in Switzerland) cannot even have read access to this forum.

Apparently posting source code in the raw presents a risk of buffer overflow.

I have no experience of sysadmin nor network admin. So I must of course comply.

 

[Derek]

Gnome:

We don't hate you. We don't mind that you're doing this.

But this is a forum that's essentially a series of web-requests to the server backend. And one of the things our software does is look for people trying to compromise the forum by finding buffer overflows - when they succeed they can convince the underlying operating system to run commands from the URL they submitted instead. That's possibly the most common web site attack.

So if the software sees URLs with bash or sh commands, it assumed you're trying to run a buffer overflow attack, because that's what those look like. You just happen to want to post a bunch of bash commands in forum posts like you are, but you're an edge case. That's not typical.

We see way more hack attempts than posts from you, and it's important to protect the site from those, so the software cuts you off.

Please don't be upset by it. It's actually a pretty normal defensive stance.

 

[ZürichGnome]

Looking to move away from amateurish manual methods to a more automated process.
Will github it all when i've cleaned it up more.

Output option #2:

 

[ZürichGnome]

Working in symmetry with KAG just posted in forum here

Latest for KAU:

 

[ZürichGnome]

Similar upload I did for KAG post just now.
github source code here

 

[ZürichGnome]

Full discussion of the simplified KAU digraph above posted under KAG thread just now.
Look for URL link to github discussion (code, notes and output for both KAG and KAU) at the end of that post.

 

[ZürichGnome]

H2U blue
a new arc

3 vertices
5 arcs

4 years of Kinesis system activity from which you can easily calculate coin in circulation for KAU

Full discussion with code and intermediary output files at github