gold-miner-trainer-aggregator: builds a complete training profile

The gold-miner-trainer-aggregator tool takes a number of single-file profiles created by gold-miner-trainer, along with labels for them, and combines them into a single profile that can be later fed to gold-miner.

Example Invocation

This example invokes gold-mine-trainer-aggregator to combine two profiles created from gold-mine-trainer_ that contains web traffic and email traffic. The output combined profile is stored in training-profile.fsdb.

gold-miner-trainer-aggregator -o training-profile.fsdb \
web web_traffic.fsdb \
mail mail_traffic.fsdb

Next Steps

Once an aggregate training profile has been constructed, the results can be passed to the gold-miner tool to attempt detection of unknown traffic types.

Command Line Arguments

introduction - CLI interface

introduction [-h] [-o OUTPUT] [--log-level LOG_LEVEL] input_data [input_data ...]

introduction positional arguments

  • input_data - pairs (label SPACE file …) to aggregate (default: None)

introduction optional arguments

  • -h, --help - show this help message and exit

  • -o OUTPUT, --output OUTPUT - Where to write the output file (else stdout) (default: <_io.TextIOWrapper name='<stdout>' mode='w' encoding='UTF-8'>)

  • --log-level LOG_LEVEL, --ll LOG_LEVEL - Define the logging verbosity level (debug, info, warning, error, fotal, critical). (default: info)