{ "cells": [ { "cell_type": "markdown", "metadata": {}, "source": [ "# Split by IP.DF + DNS.AA\n", "\n", "The key observation here is IP.DF + DNS.AA can uniquely distinguish different processes of GFW:\n", "\n", "## Injector 1 (DF ==0, DNS_AA ==1)\n", "* In a snapshot experiment, only respond if the query packet has IPTTL >= 16\n", "* IP header length=20; IPID = range(457,65535), have a pattern; DF=0, TOS: Counter({'0x0000': 195111, '0x0010'(minimize delay): 20955, '0x0020': 168})\n", "* IPTTL in a snapshot experiment =(35,234), IPTTL across time = (27, 234), IPTTL global increment by 1;\n", "* UDPLength=68;\n", "* dns.flag.authoritative=1, dns.answer=copy what is in qname;DNSTTL=60\n", "* DNS Flags: Counter({'0x8580': 112894, '0x85a0': 47556, '0x85b0': 36310, '0x8590': 19474})\n", "* Uniq # IPs: 4\n", "* Uniq # domains: 88\n", "\n", "## Injector 2 (DF ==1, DNS_AA ==0)\n", "* In a snapshot experiment, only respond if the query packet has IPTTL >= 16\n", "* IP header length=20;IPID = range(0,65535), random; DF=1, TOS=Counter({'0x00000000': 61993489, '0x00000020': 46427, '0x00000048': 1}); IPTTL in a snapshot experiment =(35,114) across_time = (27,114), random;\n", "* UDPLength=55;\n", "* dns.flag.authoritative=0, dns.answer=set a pointer to qname; DNSTTL=(64,255), DNSTTL across time = (1, 86400)\n", "* DNS Flags: Counter({'0x8180': 62039917})\n", "* Unique # IPs: 1506\n", "* Unique # domains: 24729\n", "\n", "## Injector 3 (DF ==0, DNS_AA ==0)\n", "* In a snapshot experiment, only respond if the query packet has IPTTL >= 29\n", "* IP header length=20;IPID = 0, DF=0, TOS=Counter({'0x00000000': 57724548, '0x00000020': 43616}); IPTTL in a snapshot experiment =36, across_time (2,40)\n", "* UDPLength=55;\n", "* dns.flag.authoritative=0, dns.answer=set a pointer to qname; DNSTTL=(64,254)\n", "* DNS Flags: Counter({'0x8180': 57768164}) \n", "* Unique # IPs: 958\n", "* Unique # domains: 22948\n", "\n", "## TOS\n", "* TOS can sometimes be 0x00 (always seen), 0x10 (seen for some non-consecutive months) or 0x20 (seen just for 1 day). TOS value is independent from other features and thus cannot be used to distinguish injectors.\n" ] }, { "cell_type": "raw", "metadata": {}, "source": [ "%%bash\n", "\n", "bash extract_all_pcap_to_csv_more_fields.sh" ] }, { "cell_type": "code", "execution_count": 1, "metadata": {}, "outputs": [], "source": [ "%matplotlib inline\n", "\n", "import matplotlib.pyplot as plt\n", "plt.rcParams['figure.dpi'] = 150\n", "plt.style.use('seaborn-whitegrid')\n", "\n", "import numpy as np\n", "from numpy import genfromtxt\n", "import pandas as pd\n", "from collections import Counter" ] }, { "cell_type": "code", "execution_count": 2, "metadata": {}, "outputs": [ { "name": "stderr", "output_type": "stream", "text": [ "/usr/local/lib/python3.5/dist-packages/IPython/core/interactiveshell.py:3058: DtypeWarning: Columns (4) have mixed types. Specify dtype option on import or set low_memory=False.\n", " interactivity=interactivity, compiler=compiler, result=result)\n" ] } ], "source": [ "packets = pd.read_csv('../all_more_fields.csv', delimiter=';', header=0)\n", "# , nrows=1000000" ] }, { "cell_type": "markdown", "metadata": {}, "source": [ "do not consider 2019-09-16 forward (since we changed the test list at that time)\n", "\n", "we freeze the dataset by time between 1568692823.487619 and 1590094531.2941742." ] }, { "cell_type": "code", "execution_count": null, "metadata": {}, "outputs": [], "source": [ "packets = packets[(packets.ts >= 1568692823.487619) & (packets.ts <= 1590094531.2941742)]" ] }, { "cell_type": "code", "execution_count": 3, "metadata": {}, "outputs": [ { "data": { "text/html": [ "
\n", " | ts | \n", "qname | \n", "type | \n", "answer | \n", "cname | \n", "dns_ttl | \n", "dns_flags | \n", "dns_aa | \n", "ip_ttl | \n", "ip_id | \n", "ip_flags | \n", "df | \n", "tos | \n", "
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
0 | \n", "1.568693e+09 | \n", "www.youtube.com | \n", "1 | \n", "243.185.187.39 | \n", "NaN | \n", "230 | \n", "0x00008180 | \n", "0 | \n", "64 | \n", "0x0000c9d6 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
1 | \n", "1.568693e+09 | \n", "www.youtube.com | \n", "1 | \n", "243.185.187.39 | \n", "NaN | \n", "203 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
2 | \n", "1.568693e+09 | \n", "www.facebook.com | \n", "1 | \n", "69.63.186.31 | \n", "NaN | \n", "183 | \n", "0x00008180 | \n", "0 | \n", "113 | \n", "0x0000b0c4 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
3 | \n", "1.568693e+09 | \n", "www.facebook.com | \n", "1 | \n", "31.13.85.8 | \n", "NaN | \n", "209 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
4 | \n", "1.568693e+09 | \n", "www.google.com | \n", "1 | \n", "69.63.187.12 | \n", "NaN | \n", "102 | \n", "0x00008180 | \n", "0 | \n", "83 | \n", "0x000031cd | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
5 | \n", "1.568693e+09 | \n", "www.google.com | \n", "1 | \n", "31.13.86.1 | \n", "NaN | \n", "134 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
6 | \n", "1.568693e+09 | \n", "www.instagram.com | \n", "1 | \n", "243.185.187.39 | \n", "NaN | \n", "191 | \n", "0x00008180 | \n", "0 | \n", "58 | \n", "0x00008df6 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
7 | \n", "1.568693e+09 | \n", "www.instagram.com | \n", "1 | \n", "243.185.187.39 | \n", "NaN | \n", "178 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
8 | \n", "1.568693e+09 | \n", "www.wikipedia.org | \n", "1 | \n", "69.171.229.73 | \n", "NaN | \n", "184 | \n", "0x00008180 | \n", "0 | \n", "79 | \n", "0x0000d5ee | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
9 | \n", "1.568693e+09 | \n", "www.wikipedia.org | \n", "1 | \n", "31.13.86.8 | \n", "NaN | \n", "173 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
10 | \n", "1.568693e+09 | \n", "www.twitch.tv | \n", "1 | \n", "59.24.3.173 | \n", "NaN | \n", "210 | \n", "0x00008180 | \n", "0 | \n", "94 | \n", "0x0000a3f7 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
11 | \n", "1.568693e+09 | \n", "www.twitch.tv | \n", "1 | \n", "31.13.97.245 | \n", "NaN | \n", "138 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
12 | \n", "1.568693e+09 | \n", "www.google.com.hk | \n", "1 | \n", "69.63.176.15 | \n", "NaN | \n", "255 | \n", "0x00008180 | \n", "0 | \n", "44 | \n", "0x00005dc0 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
13 | \n", "1.568693e+09 | \n", "www.google.com.hk | \n", "1 | \n", "31.13.97.248 | \n", "NaN | \n", "152 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
14 | \n", "1.568693e+09 | \n", "www.blogspot.com | \n", "1 | \n", "199.16.158.190 | \n", "NaN | \n", "91 | \n", "0x00008180 | \n", "0 | \n", "110 | \n", "0x00006608 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
15 | \n", "1.568693e+09 | \n", "www.blogspot.com | \n", "1 | \n", "173.252.100.21 | \n", "NaN | \n", "183 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
16 | \n", "1.568693e+09 | \n", "www.reddit.com | \n", "1 | \n", "31.13.65.17 | \n", "NaN | \n", "186 | \n", "0x00008180 | \n", "0 | \n", "53 | \n", "0x0000b39b | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
17 | \n", "1.568693e+09 | \n", "www.twitter.com | \n", "1 | \n", "173.252.102.16 | \n", "NaN | \n", "108 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
18 | \n", "1.568693e+09 | \n", "www.porn555.com | \n", "1 | \n", "69.171.234.48 | \n", "NaN | \n", "172 | \n", "0x00008180 | \n", "0 | \n", "54 | \n", "0x00007782 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
19 | \n", "1.568693e+09 | \n", "www.pornhub.com | \n", "1 | \n", "74.86.235.236 | \n", "NaN | \n", "163 | \n", "0x00008180 | \n", "0 | \n", "78 | \n", "0x0000c513 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
20 | \n", "1.568693e+09 | \n", "www.pornhub.com | \n", "1 | \n", "173.252.102.241 | \n", "NaN | \n", "194 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
21 | \n", "1.568693e+09 | \n", "www.livejasmin.com | \n", "1 | \n", "31.13.85.16 | \n", "NaN | \n", "91 | \n", "0x00008180 | \n", "0 | \n", "80 | \n", "0x0000ea79 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
22 | \n", "1.568693e+09 | \n", "www.google.com.br | \n", "1 | \n", "69.63.180.173 | \n", "NaN | \n", "111 | \n", "0x00008180 | \n", "0 | \n", "49 | \n", "0x00002ed5 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
23 | \n", "1.568693e+09 | \n", "www.google.com.br | \n", "1 | \n", "173.252.103.64 | \n", "NaN | \n", "148 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
24 | \n", "1.568693e+09 | \n", "www.whatsapp.com | \n", "1 | \n", "69.171.237.16 | \n", "NaN | \n", "122 | \n", "0x00008180 | \n", "0 | \n", "60 | \n", "0x0000c34b | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
25 | \n", "1.568693e+09 | \n", "www.whatsapp.com | \n", "1 | \n", "173.252.110.21 | \n", "NaN | \n", "241 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
26 | \n", "1.568693e+09 | \n", "www.amazon.co.jp | \n", "1 | \n", "173.252.73.48 | \n", "NaN | \n", "104 | \n", "0x00008180 | \n", "0 | \n", "83 | \n", "0x0000d9a3 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
27 | \n", "1.568693e+09 | \n", "www.amazon.co.jp | \n", "1 | \n", "173.252.73.48 | \n", "NaN | \n", "66 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
28 | \n", "1.568693e+09 | \n", "www.google.fr | \n", "1 | \n", "69.171.233.24 | \n", "NaN | \n", "132 | \n", "0x00008180 | \n", "0 | \n", "42 | \n", "0x000068c9 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
29 | \n", "1.568693e+09 | \n", "www.google.fr | \n", "1 | \n", "66.220.146.94 | \n", "NaN | \n", "110 | \n", "0x00008180 | \n", "0 | \n", "39 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "... | \n", "
120024285 | \n", "1.590165e+09 | \n", "www.codigomaldito.blogspot.com | \n", "1 | \n", "69.63.184.30 | \n", "NaN | \n", "187 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024286 | \n", "1.590165e+09 | \n", "www.codigomaldito.blogspot.com | \n", "1 | \n", "74.86.3.208 | \n", "NaN | \n", "243 | \n", "0x00008180 | \n", "0 | \n", "90 | \n", "0x000080c5 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024287 | \n", "1.590165e+09 | \n", "www.19650517mgrp.blogspot.com | \n", "1 | \n", "59.24.3.173 | \n", "NaN | \n", "77 | \n", "0x00008180 | \n", "0 | \n", "68 | \n", "0x00001476 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024288 | \n", "1.590165e+09 | \n", "www.19650517mgrp.blogspot.com | \n", "1 | \n", "69.63.186.31 | \n", "NaN | \n", "246 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024289 | \n", "1.590165e+09 | \n", "www.algebralinealssm.blogspot.com | \n", "1 | \n", "199.59.148.97 | \n", "NaN | \n", "122 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024290 | \n", "1.590165e+09 | \n", "www.algebralinealssm.blogspot.com | \n", "1 | \n", "69.171.230.18 | \n", "NaN | \n", "234 | \n", "0x00008180 | \n", "0 | \n", "98 | \n", "0x0000463c | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024291 | \n", "1.590165e+09 | \n", "www.ancianolegritaaunanube.blogspot.com | \n", "1 | \n", "199.59.149.136 | \n", "NaN | \n", "232 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024292 | \n", "1.590165e+09 | \n", "www.ancianolegritaaunanube.blogspot.com | \n", "1 | \n", "69.171.239.11 | \n", "NaN | \n", "214 | \n", "0x00008180 | \n", "0 | \n", "64 | \n", "0x00008248 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024293 | \n", "1.590165e+09 | \n", "www.aprendedesexualidad.blogspot.com | \n", "1 | \n", "31.13.85.8 | \n", "NaN | \n", "171 | \n", "0x00008180 | \n", "0 | \n", "51 | \n", "0x000009d9 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024294 | \n", "1.590165e+09 | \n", "www.aprendedesexualidad.blogspot.com | \n", "1 | \n", "88.191.249.183 | \n", "NaN | \n", "99 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024295 | \n", "1.590165e+09 | \n", "www.apuntesyderecho.blogspot.com | \n", "1 | \n", "174.36.228.136 | \n", "NaN | \n", "247 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024296 | \n", "1.590165e+09 | \n", "www.apuntesyderecho.blogspot.com | \n", "1 | \n", "31.13.64.49 | \n", "NaN | \n", "100 | \n", "0x00008180 | \n", "0 | \n", "69 | \n", "0x0000b813 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024297 | \n", "1.590165e+09 | \n", "www.ardilladigital.blogspot.com | \n", "1 | \n", "174.37.154.236 | \n", "NaN | \n", "231 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024298 | \n", "1.590165e+09 | \n", "www.ardilladigital.blogspot.com | \n", "1 | \n", "66.220.149.99 | \n", "NaN | \n", "80 | \n", "0x00008180 | \n", "0 | \n", "112 | \n", "0x00008f95 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024299 | \n", "1.590165e+09 | \n", "www.befreakymyfriend.blogspot.com | \n", "1 | \n", "67.228.102.32 | \n", "NaN | \n", "187 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024300 | \n", "1.590165e+09 | \n", "www.befreakymyfriend.blogspot.com | \n", "1 | \n", "31.13.76.16 | \n", "NaN | \n", "222 | \n", "0x00008180 | \n", "0 | \n", "98 | \n", "0x0000b115 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024301 | \n", "1.590165e+09 | \n", "www.bibliotecasolidaria.blogspot.com | \n", "1 | \n", "67.228.126.62 | \n", "NaN | \n", "130 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024302 | \n", "1.590165e+09 | \n", "www.bibliotecasolidaria.blogspot.com | \n", "1 | \n", "31.13.73.23 | \n", "NaN | \n", "187 | \n", "0x00008180 | \n", "0 | \n", "91 | \n", "0x00008c43 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024303 | \n", "1.590165e+09 | \n", "www.buddhismforyouandme.blogspot.com | \n", "1 | \n", "31.13.97.245 | \n", "NaN | \n", "70 | \n", "0x00008180 | \n", "0 | \n", "96 | \n", "0x00007462 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024304 | \n", "1.590165e+09 | \n", "www.buddhismforyouandme.blogspot.com | \n", "1 | \n", "74.86.118.24 | \n", "NaN | \n", "72 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024305 | \n", "1.590165e+09 | \n", "www.cartasdecontrolestadisticogrupo13.blogspot... | \n", "1 | \n", "75.126.124.162 | \n", "NaN | \n", "134 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024306 | \n", "1.590165e+09 | \n", "www.cartasdecontrolestadisticogrupo13.blogspot... | \n", "1 | \n", "66.220.146.94 | \n", "NaN | \n", "226 | \n", "0x00008180 | \n", "0 | \n", "78 | \n", "0x0000e0ce | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024307 | \n", "1.590165e+09 | \n", "www.cibeleslogistics.blogspot.com | \n", "1 | \n", "69.171.245.53 | \n", "NaN | \n", "118 | \n", "0x00008180 | \n", "0 | \n", "52 | \n", "0x00009504 | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024308 | \n", "1.590165e+09 | \n", "www.cibeleslogistics.blogspot.com | \n", "1 | \n", "64.13.232.149 | \n", "NaN | \n", "93 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024309 | \n", "1.590165e+09 | \n", "www.civilizacionesnovatutorial.blogspot.com | \n", "1 | \n", "31.13.72.34 | \n", "NaN | \n", "144 | \n", "0x00008180 | \n", "0 | \n", "42 | \n", "0x0000d25d | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024310 | \n", "1.590165e+09 | \n", "www.civilizacionesnovatutorial.blogspot.com | \n", "1 | \n", "59.24.3.173 | \n", "NaN | \n", "207 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024311 | \n", "1.590165e+09 | \n", "www.cursosdecapacitacionjuridica.blogspot.com | \n", "1 | \n", "31.13.69.33 | \n", "NaN | \n", "70 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024312 | \n", "1.590165e+09 | \n", "www.cursosdecapacitacionjuridica.blogspot.com | \n", "1 | \n", "243.185.187.39 | \n", "NaN | \n", "244 | \n", "0x00008180 | \n", "0 | \n", "63 | \n", "0x0000768b | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024313 | \n", "1.590165e+09 | \n", "www.danieladazamarq.blogspot.com | \n", "1 | \n", "31.13.69.86 | \n", "NaN | \n", "191 | \n", "0x00008180 | \n", "0 | \n", "35 | \n", "0x00000000 | \n", "0x00000000 | \n", "0 | \n", "0x00000000 | \n", "
120024314 | \n", "1.590165e+09 | \n", "www.danieladazamarq.blogspot.com | \n", "1 | \n", "31.13.73.23 | \n", "NaN | \n", "168 | \n", "0x00008180 | \n", "0 | \n", "95 | \n", "0x0000837e | \n", "0x00004000 | \n", "1 | \n", "0x00000000 | \n", "
120024315 rows × 13 columns
\n", "