Editting of Sections 2,3, and part of 4

TracingPaper.aux

@@ -29,51 +29,63 @@
 \citation{Anderson2004}
 \citation{Roselli2000}
 \citation{Vogels1999}
+\citation{Orosz2013}
+\citation{Dabir2008}
+\citation{Skopko2012}
+\citation{Orosz2013}
+\citation{PFRING}
+\citation{Ellard2003}
+\citation{Anderson2004}
 \citation{Leung2008}
 \@writefile{toc}{\contentsline {subsection}{\numberline {1.4}The Need for a New Study}{3}}
 \newlabel{The Need for a New Study}{{1.4}{3}}
 \@writefile{toc}{\contentsline {section}{\numberline {2}Methodology}{3}}
 \newlabel{Methodology}{{2}{3}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.1}Effects of System Setup on Tracing}{3}}
-\newlabel{Effects of System Setup on Tracing}{{2.1}{3}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.1}System Limitations}{3}}
+\newlabel{System Limitations}{{2.1}{3}}
 \@writefile{toc}{\contentsline {subsection}{\numberline {2.2}Main Challenges}{3}}
 \newlabel{Main Challenges}{{2.2}{3}}
 \@writefile{toc}{\contentsline {subsection}{\numberline {2.3}Interpretation of Data}{3}}
 \newlabel{Interpretation of Data}{{2.3}{3}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.4}Selective Importance of Information}{3}}
-\newlabel{Selective Importance of Information}{{2.4}{3}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.5}Arbitrary Distribution of Collected Information}{3}}
-\newlabel{Arbitrary Distribution of Collected Information}{{2.5}{3}}
+\citation{Ellard2003}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.4}Scope of Interpretation}{4}}
+\newlabel{Scope of Interpretation}{{2.4}{4}}
 \@writefile{toc}{\contentsline {section}{\numberline {3}Tracing System}{4}}
 \newlabel{Tracing System}{{3}{4}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.1}Different Stages of Trace}{4}}
-\newlabel{Different Stages of Trace}{{3.1}{4}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.2}About the Systems Being Traced}{4}}
-\newlabel{About the Systems Being Traced}{{3.2}{4}}
-\@writefile{toc}{\contentsline {section}{\numberline {4}Trace Analysis}{4}}
-\newlabel{Trace Analysis}{{4}{4}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.1}Stages of Trace}{4}}
+\newlabel{Stages of Trace}{{3.1}{4}}
+\@writefile{toc}{\contentsline {subsubsection}{\numberline {3.1.1}Capture}{4}}
+\newlabel{Capture}{{3.1.1}{4}}
+\@writefile{toc}{\contentsline {subsubsection}{\numberline {3.1.2}Collection}{4}}
+\newlabel{Collection}{{3.1.2}{4}}
+\@writefile{toc}{\contentsline {subsubsection}{\numberline {3.1.3}Dissection/Analysis}{4}}
+\newlabel{Dissection/Analysis}{{3.1.3}{4}}
 \citation{MS-CIFS}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.1}Request/Response Command Pairing}{5}}
-\newlabel{Request/Response Command Pairing}{{4.1}{5}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.2}IAT Calculation for Request/Response Pairs}{5}}
-\newlabel{IAT Calculation for Request/Response Pairs}{{4.2}{5}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.3}SMB}{5}}
-\newlabel{SMB}{{4.3}{5}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.4}Other (e.g. HTML)}{5}}
-\newlabel{Other (e.g. HTML)}{{4.4}{5}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.5}Process ID Tracking}{5}}
-\newlabel{Process ID Tracking}{{4.5}{5}}
-\@writefile{lof}{\contentsline {figure}{\numberline {1}{\ignorespaces \relax \fontsize  {9}{11}\selectfont  \abovedisplayskip 8.5\p@ plus3\p@ minus4\p@ \abovedisplayshortskip \z@ plus2\p@ \belowdisplayshortskip 4\p@ plus2\p@ minus2\p@ \def \leftmargin \leftmargini \topsep 4\p@ plus2\p@ minus2\p@ \parsep 2\p@ plus\p@ minus\p@ \itemsep \parsep {\leftmargin \leftmargini \topsep 4\p@ plus2\p@ minus2\p@ \parsep 2\p@ plus\p@ minus\p@ \itemsep \parsep }\belowdisplayskip \abovedisplayskip \itshape  Rough Sketch of Communication}}{5}}
-\newlabel{fig-communication}{{1}{5}}
+\@writefile{toc}{\contentsline {section}{\numberline {4}Trace Analysis}{5}}
+\newlabel{Trace Analysis}{{4}{5}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.1}SMB}{5}}
+\newlabel{SMB}{{4.1}{5}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.2}ID Tracking}{5}}
+\newlabel{ID Tracking}{{4.2}{5}}
 \citation{Anderson2004}
 \citation{Anderson2004}
 \citation{Anderson2004}
-\@writefile{toc}{\contentsline {subsubsection}{\numberline {4.5.1}event\_data Structure Tracking}{6}}
-\newlabel{event_data Structure Tracking}{{4.5.1}{6}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.6}Run Patterns}{6}}
-\newlabel{Run Patterns}{{4.6}{6}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.7}Locating Performance Bottlenecks}{6}}
-\newlabel{Locating Performance Bottlenecks}{{4.7}{6}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.3}Run Patterns}{6}}
+\newlabel{Run Patterns}{{4.3}{6}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.4}Locating Performance Bottlenecks}{6}}
+\newlabel{Locating Performance Bottlenecks}{{4.4}{6}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.5}Other (e.g. HTML)}{6}}
+\newlabel{Other (e.g. HTML)}{{4.5}{6}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.6}Process ID Tracking}{6}}
+\newlabel{Process ID Tracking}{{4.6}{6}}
+\@writefile{lof}{\contentsline {figure}{\numberline {1}{\ignorespaces \relax \fontsize  {9}{11}\selectfont  \abovedisplayskip 8.5\p@ plus3\p@ minus4\p@ \abovedisplayshortskip \z@ plus2\p@ \belowdisplayshortskip 4\p@ plus2\p@ minus2\p@ \def \leftmargin \leftmargini \topsep 4\p@ plus2\p@ minus2\p@ \parsep 2\p@ plus\p@ minus\p@ \itemsep \parsep {\leftmargin \leftmargini \topsep 4\p@ plus2\p@ minus2\p@ \parsep 2\p@ plus\p@ minus\p@ \itemsep \parsep }\belowdisplayskip \abovedisplayskip \itshape  Rough Sketch of Communication}}{6}}
+\newlabel{fig-communication}{{1}{6}}
+\@writefile{toc}{\contentsline {subsubsection}{\numberline {4.6.1}event\_data Structure Tracking}{6}}
+\newlabel{event_data Structure Tracking}{{4.6.1}{6}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.7}Run Patterns}{6}}
+\newlabel{Run Patterns}{{4.7}{6}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.8}Locating Performance Bottlenecks}{6}}
+\newlabel{Locating Performance Bottlenecks}{{4.8}{6}}
 \@writefile{toc}{\contentsline {section}{\numberline {5}Intuition Confirm/Change}{6}}
 \newlabel{Intuition Confirm/Change}{{5}{6}}
 \@writefile{toc}{\contentsline {subsection}{\numberline {5.1}Characterizations of Different Packet Types}{6}}
@@ -116,3 +128,4 @@
 \bibcite{Roselli2000}{12}
 \bibcite{Vogels1999}{13}
 \bibcite{Meyer2012}{14}
+\bibcite{PFRING}{15}

TracingPaper.log

@@ -1,4 +1,4 @@
-This is pdfTeX, Version 3.1415926-2.5-1.40.14 (MiKTeX 2.9 64-bit) (preloaded format=pdflatex 2014.12.20)  20 DEC 2014 16:52
+This is pdfTeX, Version 3.1415926-2.5-1.40.14 (MiKTeX 2.9 64-bit) (preloaded format=pdflatex 2014.12.20)  21 DEC 2014 17:53
 entering extended mode
 **TracingPaper.tex
 (C:\UConn\TracingPaper\TracingPaper.tex
@@ -85,8 +85,17 @@ LaTeX Warning: Unused global option(s):
 
 (C:\UConn\TracingPaper\TracingPaper.aux
 
+LaTeX Warning: Label `Run Patterns' multiply defined.
+
+
+LaTeX Warning: Label `Locating Performance Bottlenecks' multiply defined.
+
+
 LaTeX Warning: Label `Ellard Ledlie 2003' multiply defined.
 
+
+LaTeX Warning: Label `Ellard 2003' multiply defined.
+
 )
 LaTeX Font Info:    Checking defaults for OML/cmm/m/it on input line 54.
 LaTeX Font Info:    ... okay on input line 54.
@@ -165,31 +174,28 @@ File: omsptm.fd
 LaTeX Font Info:    Font shape `OMS/ptm/m/n' in size <10> not available
 (Font)              Font shape `OMS/cmsy/m/n' tried instead on input line 108.
  [2] [3]
-LaTeX Font Info:    Font shape `OT1/ptm/bx/it' in size <10> not available
-(Font)              Font shape `OT1/ptm/b/it' tried instead on input line 164.
-
-Underfull \hbox (badness 1117) in paragraph at lines 164--168
-\OT1/ptm/b/it/10 pcap2ds\OT1/ptm/m/n/10 : The pcap2ds pro-gram reads the con-te
-nts
- []
-
-
-Underfull \vbox (badness 2828) has occurred while \output is active []
+Underfull \vbox (badness 10000) has occurred while \output is active []
 
  [4]
-<communications_sketch.png, id=20, 1190.19656pt x 1191.7022pt>
+LaTeX Font Info:    Font shape `OT1/ptm/bx/it' in size <10> not available
+(Font)              Font shape `OT1/ptm/b/it' tried instead on input line 185.
+
+<communications_sketch.png, id=19, 1190.19656pt x 1191.7022pt>
 File: communications_sketch.png Graphic file (type png)
 
 <use communications_sketch.png>
-Package pdftex.def Info: communications_sketch.png used on input line 200.
+Package pdftex.def Info: communications_sketch.png used on input line 207.
 (pdftex.def)             Requested size: 180.67499pt x 180.89331pt.
+
+Underfull \vbox (badness 10000) has occurred while \output is active []
+
+ [5]
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
- [5 <C:/UConn/TracingPaper/communications_sketch.png>]
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
@@ -200,9 +206,7 @@ Missing character: There is no 
 Missing character: There is no � in font ptmr7t!
 Missing character: There is no � in font ptmr7t!
 
-Underfull \vbox (badness 10000) has occurred while \output is active []
-
- [6]
+[6 <C:/UConn/TracingPaper/communications_sketch.png>]
 Underfull \vbox (badness 10000) has occurred while \output is active []
 
 
@@ -229,28 +233,28 @@ Missing character: There is no 
 Missing character: There is no � in font ptmr7t!
 
 [8]
-Underfull \hbox (badness 1215) in paragraph at lines 364--365
+Underfull \hbox (badness 1215) in paragraph at lines 371--372
 []\OT1/ptm/m/n/10 4. Dump-cap has op-tion called \OT1/ptm/m/it/10 snaplength \O
 T1/ptm/m/n/10 to
  []
 
 [9]
-Underfull \hbox (badness 10000) in paragraph at lines 401--402
+Underfull \hbox (badness 10000) in paragraph at lines 408--409
 []\OT1/ptm/m/it/10 Common In-ter-net File Sys-tem (CIFS) Pro-
  []
 
 
-Underfull \hbox (badness 10000) in paragraph at lines 401--402
+Underfull \hbox (badness 10000) in paragraph at lines 408--409
 \OT1/ptm/m/it/10 to-col\OT1/ptm/m/n/10 , urlhttp://msdn.microsoft.com/en-
  []
 
 
-Underfull \hbox (badness 10000) in paragraph at lines 403--404
+Underfull \hbox (badness 10000) in paragraph at lines 410--411
 []\OT1/ptm/m/it/10 Server Mes-sage Block (SMB) Pro-to-
  []
 
 
-Underfull \hbox (badness 10000) in paragraph at lines 403--404
+Underfull \hbox (badness 10000) in paragraph at lines 410--411
 \OT1/ptm/m/it/10 col\OT1/ptm/m/n/10 , urlhttp://msdn.microsoft.com/en-
  []
 
@@ -262,20 +266,20 @@ LaTeX Warning: There were multiply-defined labels.
 
  ) 
 Here is how much of TeX's memory you used:
- 1492 strings out of 493705
- 20098 string characters out of 3144575
- 81963 words of memory out of 3000000
- 4816 multiletter control sequences out of 15000+200000
+ 1494 strings out of 493705
+ 19998 string characters out of 3144575
+ 81983 words of memory out of 3000000
+ 4818 multiletter control sequences out of 15000+200000
  22634 words of font info for 45 fonts, out of 3000000 for 9000
  1025 hyphenation exceptions out of 8191
- 34i,8n,21p,2810b,437s stack positions out of 5000i,500n,10000p,200000b,50000s
+ 34i,8n,21p,1884b,437s stack positions out of 5000i,500n,10000p,200000b,50000s
 {C:/Program Files/MiKTeX 2.9/fonts/enc/dvips/fontname/8r.enc}<C:/Program File
 s/MiKTeX 2.9/fonts/type1/public/amsfonts/cm/cmsy10.pfb><C:/Program Files/MiKTeX
  2.9/fonts/type1/urw/courier/ucrr8a.pfb><C:/Program Files/MiKTeX 2.9/fonts/type
 1/urw/times/utmb8a.pfb><C:/Program Files/MiKTeX 2.9/fonts/type1/urw/times/utmbi
 8a.pfb><C:/Program Files/MiKTeX 2.9/fonts/type1/urw/times/utmr8a.pfb><C:/Progra
 m Files/MiKTeX 2.9/fonts/type1/urw/times/utmri8a.pfb>
-Output written on TracingPaper.pdf (10 pages, 4043816 bytes).
+Output written on TracingPaper.pdf (10 pages, 4041247 bytes).
 PDF statistics:
  63 PDF objects out of 1000 (max. 8388607)
  0 named destinations out of 1000 (max. 500000)