gfwleak/galaxy-tsg-olap-generate-baseline
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add file

Browse Source
This commit is contained in:
yinjiangyi
2021-09-27 09:43:55 +08:00
parent fac25b6ae6
commit 251fefc061
3 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
README.md Normal file
View File

@@ -0,0 +1,4 @@
## Generate Baselines (for Dos Detection)
### 主要功能
根据功能端提供的一元组Top日志，对服务端IP会话数生成动态基线，并保存至Hbase。

8
src/main/resources/application.properties
View File

@@ -17,7 +17,7 @@ hbase.zookeeper.client.port=2181
#读取druid时间范围方式， #读取druid时间范围方式，
# 0：读取默认范围天数read.historical.days； # 0：读取默认范围天数read.historical.days；
# 1：指定时间范围 # 1：指定时间范围
read.druid.time.limit.type=1 read.druid.time.limit.type=0
read.druid.min.time=1627747200000 read.druid.min.time=1627747200000
read.druid.max.time=1630425600000 read.druid.max.time=1630425600000
@@ -25,7 +25,7 @@ read.druid.max.time=1630425600000
druid.attacktype.tcpsynflood=TCP SYN Flood druid.attacktype.tcpsynflood=TCP SYN Flood
druid.attacktype.udpflood=UDP Flood druid.attacktype.udpflood=UDP Flood
druid.attacktype.icmpflood=ICMP Flood druid.attacktype.icmpflood=ICMP Flood
druid.attacktype.dnsamplification=DNS Amplification druid.attacktype.dnsamplification=DNS Flood
druid.columnname.serverip=destination_ip druid.columnname.serverip=destination_ip
druid.columnname.attacktype=attack_type druid.columnname.attacktype=attack_type
druid.columnname.recvtime=__time druid.columnname.recvtime=__time
@@ -69,8 +69,8 @@ monitor.frequency.bin.num=100
################ 并发参数 ################# ################ 并发参数 #################
########################################## ##########################################
all.partition.num=100 all.partition.num=100
max.pool.size=1 core.pool.size=10
core.pool.size=3 max.pool.size=10
#druid分区字段partition_num的最大值为9999 #druid分区字段partition_num的最大值为9999
druid.statement.query.timeout=36000 druid.statement.query.timeout=36000
druid.partition.num.max=10000 druid.partition.num.max=10000

2
src/main/resources/log4j.properties
View File

@@ -5,7 +5,7 @@ log4j.logger.org.apache.http.wire=OFF
#Log4j #Log4j
log4j.rootLogger=debug,console,file log4j.rootLogger=debug,console,file
log4j.appender.console=org.apache.log4j.ConsoleAppender log4j.appender.console=org.apache.log4j.ConsoleAppender
log4j.appender.console.Threshold=info log4j.appender.console.Threshold=debug
log4j.appender.console.layout=org.apache.log4j.PatternLayout log4j.appender.console.layout=org.apache.log4j.PatternLayout
log4j.appender.console.layout.ConversionPattern=[%d{yyyy-MM-dd HH\:mm\:ss}] [%-5p] [Thread\:%t] %l %x - <%m>%n log4j.appender.console.layout.ConversionPattern=[%d{yyyy-MM-dd HH\:mm\:ss}] [%-5p] [Thread\:%t] %l %x - <%m>%n