INNER CODE UNIT · Python
select_fields
A3sal0n/CyberThreatHunting · tools/bro-dns-iforest.py:55
def select_fields(data):
output = []
selected = []
for i in range(len(data)):
try:
row = {}
if '.local' not in data[i]['query']:
row['id.resp_p'] = int(data[i]['id.resp_p'])
row['rtt'] = int(float(data[i]['rtt']) * 1000)
row['q_length'] = len(data[i]['query'])
row['q_entropy'] = entropy(data[i]['query'])
row['qclass'] = int(data[i]['qclass'])
row['qtype'] = int(data[i]['qtype'])
row['rcode'] = int(data[i]['rcode'])
ttls = data[i]['TTLs']
row['ttl_avg'] = ttl_avg(ttls)
output.append(row)
selected.append(i)