A2 III.B Further clairification

William Cowan

2010-02-09 00:07:25 UTC

Post by Benjamin Mahler
Hi,
I have a question regarding some possible ambiguity in III.B of assignment
2.
...
109.93.223.43 Jan-29-10 17:22:54 rejected
109.93.223.43 Jan-29-10 17:22:55 rejected
109.93.223.43 Jan-29-10 17:22:55 MaxErrors
109.93.223.43 Jan-29-10 17:22:56 rejected
109.93.223.43 Jan-29-10 17:22:57 rejected
109.93.223.43 Jan-29-10 17:22:57 MaxErrors
...
109.93.223.43 Jan-29-10 17:22:54 rejected
109.93.223.43 Jan-29-10 17:22:55 rejected
109.93.223.43 Jan-29-10 17:22:55 MaxErrors
109.93.223.43 Jan-29-10 20:22:56 rejected *suppose time is 3hrs later*
109.93.223.43 Jan-29-10 20:22:57 rejected
109.93.223.43 Jan-29-10 20:22:57 MaxErrors
Now, should the second burst leading up to the second MaxErrors be ignored
in both of these cases? Or should they be included as seperate bursts?
To make it more clear, should we only consider the first burst for each IP
(regardless of how much time passes between any further bursts)?
Thanks,
Ben

How can I respond without giving things away?

How many times does Case 2 occur in the data?

Does it make much of a difference if you treat Case 2 in a special way?

Regard the three questions above as hints.

Hope this helps,
Bill

P.S. I expect there to be small differences in the answers, because the
overall task, analysing logs, requires judgments which different
students can make differently. While there is not a unique right answer,
there are definitely wrong answers.