{ "metadata": { "name": "", "signature": "sha256:594c3879ac0e386ec2d6a7212ce0c0c70a2fb144d017bf04855a41716f54060c" }, "nbformat": 3, "nbformat_minor": 0, "worksheets": [ { "cells": [ { "cell_type": "markdown", "metadata": {}, "source": [ "# Exploration of Live Network Tap\n", "Like most people I were wondering \"What is my laptop doing? Has it become a botnet? Should I stop downloading a bunch of weird stuff all the time? Will I ever move out of my Mom's basement?\" but I digress..\n", "\n", "This notebook is an exploration of my laptop's network usage using Workbench https://github.com/SuperCowPowers/workbench.git\n", "## Goals of the Exploration\n", "We wanted to get a 'gist' of the network activity happening from a particular capture point, for this case a laptop, but the cpature point could be anywhere. Obviously there are super great tools that already perform exploration and analysis of pcaps: WireShark, Chop Shop, Scapy, blah, foo, etc.. here we leveraging Bro IDS to generate our starting-point data and then hoping off in various directions from there. The work here should be viewed as complimentary to these other tools :)\n", "\n", "
\n", "## Lets start up the workbench server...\n", "Run the workbench server (from somewhere, for the demo we're just going to start a local one)\n", "\n", "$ workbench_server\n", "" ] }, { "cell_type": "code", "collapsed": false, "input": [ "# Lets start to interact with workbench, please note there is NO specific client to workbench,\n", "# Just use the ZeroRPC Python, Node.js, or CLI interfaces.\n", "import zerorpc\n", "c = zerorpc.Client(timeout=120)\n", "c.connect(\"tcp://127.0.0.1:4242\")" ], "language": "python", "metadata": {}, "outputs": [ { "metadata": {}, "output_type": "pyout", "prompt_number": 20, "text": [ "[None]" ] } ], "prompt_number": 20 }, { "cell_type": "markdown", "metadata": {}, "source": [ "\n", "\n", "## So I'm confused what am I suppose to do with workbench? \n", "\n", "- Start with c.help(), look at the commands\n", "- Now add stuff to workbench, PCAPs, PE Files, PDFs, SWFs, whatever..\n", "- Workbench stores it in a database (MongoDB now, maybe Vertica later)\n", "- Make a work request see c.help_workers() for all the options\n", "- See [Workbench Demo Notebook](http://nbviewer.ipython.org/github/SuperCowPowers/workbench/blob/master/workbench/notebooks/Workbench_Demo.ipynb) for a lot more info on using workbench." ] }, { "cell_type": "code", "collapsed": false, "input": [ "# I forgot what stuff I can do with workbench\n", "print c.help()" ], "language": "python", "metadata": {}, "outputs": [ { "output_type": "stream", "stream": "stdout", "text": [ "\n", "Welcome to Workbench: Here's a list of help commands:\n", "\t - Run c.help_basic() for beginner help\n", "\t - Run c.help_commands() for command help\n", "\t - Run c.help_workers() for a list of workers\n", "\t - Run c.help_advanced() for advanced help\n", "\n", "See https://github.com/SuperCowPowers/workbench for more information\n" ] } ], "prompt_number": 21 }, { "cell_type": "markdown", "metadata": {}, "source": [ "
\n", " | \n", " | \n", " | \n", " | response_body_len | \n", "
---|---|---|---|---|
id.orig_h | \n", "host | \n", "id.resp_h | \n", "resp_mime_types | \n", "\n", " |
192.168.1.104 | \n", "16518638.log.optimizely.com | \n", "174.129.203.102 | \n", "image/gif | \n", "35 | \n", "
text/plain | \n", "4 | \n", "|||
664902255.log.optimizely.com | \n", "107.22.231.18 | \n", "image/gif | \n", "35 | \n", "|
text/plain | \n", "2 | \n", "|||
773-gon-065.mktoresp.com | \n", "199.15.215.178 | \n", "image/gif | \n", "731 | \n", "|
ad.doubleclick.net | \n", "74.125.225.187 | \n", "text/plain | \n", "2195 | \n", "|
74.125.225.188 | \n", "text/plain | \n", "2270 | \n", "||
akamaicovers.oreilly.com | \n", "23.4.141.110 | \n", "image/jpeg | \n", "118472 | \n", "|
app-sjl.marketo.com | \n", "23.4.154.76 | \n", "- | \n", "0 | \n", "|
text/html | \n", "1657 | \n", "|||
text/plain | \n", "12905 | \n", "|||
assets.neo4j.org | \n", "54.230.4.132 | \n", "image/gif | \n", "214656 | \n", "|
image/png | \n", "1369054 | \n", "|||
54.230.4.169 | \n", "- | \n", "0 | \n", "||
image/gif | \n", "32454 | \n", "|||
image/png | \n", "245753 | \n", "|||
av.vimeo.com | \n", "96.17.111.57 | \n", "video/mp4 | \n", "4955490 | \n", "|
avpa.dzone.com | \n", "208.91.135.45 | \n", "text/html | \n", "506 | \n", "|
text/plain | \n", "117 | \n", "|||
b.scorecardresearch.com | \n", "184.84.180.43 | \n", "- | \n", "0 | \n", "|
23.3.12.195 | \n", "- | \n", "0 | \n", "||
23.3.12.201 | \n", "- | \n", "0 | \n", "||
96.17.111.121 | \n", "- | \n", "0 | \n", "||
b2c-mlm.marketo.com | \n", "173.203.143.212 | \n", "- | \n", "0 | \n", "|
image/gif | \n", "258 | \n", "|||
badge.stumbleupon.com | \n", "199.30.80.32 | \n", "text/html | \n", "1035 | \n", "|
beacon-1.newrelic.com | \n", "50.31.164.168 | \n", "text/plain | \n", "21 | \n", "|
beta.sylvadb.com | \n", "129.100.65.142 | \n", "image/png | \n", "9555 | \n", "|
book.py2neo.org | \n", "162.209.114.75 | \n", "- | \n", "0 | \n", "|
image/png | \n", "35626 | \n", "|||
text/html | \n", "174762 | \n", "|||
text/plain | \n", "55408 | \n", "|||
bs.serving-sys.com | \n", "12.129.210.71 | \n", "- | \n", "0 | \n", "|
text/plain | \n", "14003 | \n", "|||
c.betrad.com | \n", "23.4.150.212 | \n", "- | \n", "0 | \n", "|
c.statcounter.com | \n", "216.59.38.124 | \n", "image/gif | \n", "49 | \n", "|
careers.stackoverflow.com | \n", "198.252.206.17 | \n", "- | \n", "0 | \n", "|
text/html | \n", "28505 | \n", "|||
cdn.atdmt.com | \n", "23.3.68.179 | \n", "image/gif | \n", "16690 | \n", "|
93.184.215.201 | \n", "image/gif | \n", "8704 | \n", "||
cdn.dzone.com | \n", "108.161.188.128 | \n", "- | \n", "0 | \n", "|
binary | \n", "99280 | \n", "|||
image/gif | \n", "2359 | \n", "|||
image/jpeg | \n", "86344 | \n", "|||
image/png | \n", "338086 | \n", "|||
text/plain | \n", "688872 | \n", "|||
cdn.flashtalking.com | \n", "216.38.160.128 | \n", "image/gif | \n", "42739 | \n", "|
image/jpeg | \n", "147692 | \n", "|||
text/plain | \n", "29718 | \n", "|||
cdn.optimizely.com | \n", "72.21.91.19 | \n", "text/plain | \n", "327815 | \n", "|
cdn.slidesharecdn.com | \n", "23.4.155.216 | \n", "image/jpeg | \n", "138500 | \n", "|
cdn.softpedia.com | \n", "68.142.123.254 | \n", "image/png | \n", "1677 | \n", "|
cdn.sstatic.net | \n", "190.93.246.58 | \n", "text/plain | \n", "3725 | \n", "|
cdn.stumble-upon.com | \n", "199.30.80.32 | \n", "image/png | \n", "1985 | \n", "|
data.cmcore.com | \n", "204.77.31.254 | \n", "image/gif | \n", "86 | \n", "|
74.121.133.1 | \n", "image/gif | \n", "43 | \n", "||
doug1izaerwt3.cloudfront.net | \n", "54.230.6.114 | \n", "- | \n", "0 | \n", "|
54.230.7.29 | \n", "- | \n", "0 | \n", "||
ds.serving-sys.com | \n", "23.3.12.32 | \n", "- | \n", "0 | \n", "|
image/jpeg | \n", "55043 | \n", "|||
\n", " | \n", " | \n", " | \n", " | ... | \n", "
100 rows \u00d7 1 columns
\n", "\n", " | \n", " | \n", " | \n", " | response_body_len | \n", "
---|---|---|---|---|
host | \n", "id.resp_h | \n", "resp_mime_types | \n", "uri | \n", "\n", " |
0.gravatar.com | \n", "2606:2800:220:bf1:95:a65:51f:1a94 | \n", "- | \n", "/css/hovercard.css?ver=201422x | \n", "0 | \n", "
/css/services.css?ver=201422x | \n", "0 | \n", "|||
/js/gprofiles.js?ver=201422x | \n", "0 | \n", "|||
image/jpeg | \n", "/avatar/65dc2ca9ccb63a7004ff934f5501d576?s=32&d=identicon&r=G | \n", "988 | \n", "||
/avatar/65dc2ca9ccb63a7004ff934f5501d576?s=64&d=identicon&r=G | \n", "1477 | \n", "|||
image/png | \n", "/avatar/31c24d77a26eb5e3d35b537f19cbe360?s=32&d=identicon&r=G | \n", "2284 | \n", "||
/avatar/31c24d77a26eb5e3d35b537f19cbe360?s=64&d=identicon&r=G | \n", "7860 | \n", "|||
/avatar/335410d8b3c50577cf0ed33567a3862e?s=32&d=identicon&r=G | \n", "646 | \n", "|||
/avatar/335410d8b3c50577cf0ed33567a3862e?s=64&d=identicon&r=G | \n", "1300 | \n", "|||
/avatar/3dc0bab46bc3dfa2b7175d6d629abf3f?s=32&d=identicon&r=G | \n", "810 | \n", "|||
/avatar/3dc0bab46bc3dfa2b7175d6d629abf3f?s=64&d=identicon&r=G | \n", "1797 | \n", "|||
/avatar/60b0ef6e1bbdbac2049c933c7c4e7fdd?s=32&d=identicon&r=G | \n", "1279 | \n", "|||
/avatar/60b0ef6e1bbdbac2049c933c7c4e7fdd?s=64&d=identicon&r=G | \n", "2885 | \n", "|||
/avatar/9e32ff422dd2c6155bbb43800b98c4d3?s=32&d=identicon&r=G | \n", "645 | \n", "|||
/avatar/9e32ff422dd2c6155bbb43800b98c4d3?s=64&d=identicon&r=G | \n", "1207 | \n", "|||
/avatar/fd9c7194bbb73ea2f186928424b721f6?s=32&d=identicon&r=G | \n", "1017 | \n", "|||
/avatar/fd9c7194bbb73ea2f186928424b721f6?s=64&d=identicon&r=G | \n", "1887 | \n", "|||
1.bp.blogspot.com | \n", "2607:f8b0:400f:800::100b | \n", "image/png | \n", "/-TK4TVif-FGU/T0Gtlv4zk7I/AAAAAAAAAMw/F-OvNpHcByM/s320/neo4j_sample.png | \n", "36931 | \n", "
1.gravatar.com | \n", "2606:2800:220:bf1:95:a65:51f:1a94 | \n", "- | \n", "/avatar/ad516503a11cd5ca435acc9bb6523536?s=25&d=identicon&forcedefault=y&r=G | \n", "0 | \n", "
/avatar/ad516503a11cd5ca435acc9bb6523536?s=54&d=identicon&forcedefault=y&r=G | \n", "0 | \n", "|||
image/jpeg | \n", "/avatar/a805ec88c0754455cac9b5655dea230e?s=32&d=identicon&r=G | \n", "1294 | \n", "||
/avatar/a805ec88c0754455cac9b5655dea230e?s=64&d=identicon&r=G | \n", "2720 | \n", "|||
image/png | \n", "/avatar/11ec004db919032b93195fc5d2555fea?s=32&d=identicon&r=G | \n", "276 | \n", "||
/avatar/11ec004db919032b93195fc5d2555fea?s=64&d=identicon&r=G | \n", "391 | \n", "|||
/avatar/43618511463276f21c363c8079ad5a5b?s=32&d=identicon&r=G | \n", "622 | \n", "|||
/avatar/43618511463276f21c363c8079ad5a5b?s=64&d=identicon&r=G | \n", "1445 | \n", "|||
/avatar/a614ce207462e4f3fe33273c0deccde7?s=32&d=identicon&r=G | \n", "946 | \n", "|||
/avatar/a614ce207462e4f3fe33273c0deccde7?s=64&d=identicon&r=G | \n", "2105 | \n", "|||
/blavatar/babef735719ccc14fa9a281e6de2fe08?s=32 | \n", "2497 | \n", "|||
/blavatar/babef735719ccc14fa9a281e6de2fe08?s=64 | \n", "8650 | \n", "|||
image/x-icon | \n", "/blavatar/b8c1a3c32665c00621a27ee5fc4e51ce?s=16 | \n", "11078 | \n", "||
16518638.log.optimizely.com | \n", "174.129.203.102 | \n", "image/gif | \n", "/event?a=16518638&d=13765676&y=false&n=engagement&g=28357548&u=oeu1401383749478r0.00880544213578105&t=1401383754150&f=1026380119 | \n", "35 | \n", "
text/plain | \n", "/event?a=16518638&d=13765676&y=false&n=http://java.dzone.com/articles/storm-neo4j-and-python-real&u=oeu1401383749478r0.00880544213578105&wxhr=true&t=1401383749484&f= | \n", "2 | \n", "||
/event?a=16518638&d=13765676&y=false&n=http://java.dzone.com/articles/storm-neo4j-and-python-real&u=oeu1401383749478r0.00880544213578105&wxhr=true&t=1401383750032&f=1026380119 | \n", "2 | \n", "|||
2.bp.blogspot.com | \n", "2607:f8b0:400f:801::100b | \n", "image/png | \n", "/--ghj75EWkyc/UnjtpNV657I/AAAAAAAALiU/UYua5dc4fPk/s1600/Screenshot_11_5_13_2_07_PM.png | \n", "779602 | \n", "
/-yz4sG2of89Y/UG4TQ5QsgDI/AAAAAAAAAV8/apaI68-NH5U/s1600/ftd-banner.png | \n", "45874 | \n", "|||
2.gravatar.com | \n", "2606:2800:220:bf1:95:a65:51f:1a94 | \n", "image/jpeg | \n", "/avatar/86006d83b5bf07a88ef95dfd001609f8?s=32&d=identicon&r=G | \n", "1078 | \n", "
/avatar/86006d83b5bf07a88ef95dfd001609f8?s=64&d=identicon&r=G | \n", "1810 | \n", "|||
/avatar/e8dd547cc3ce614c9662b891791349d4?s=32&d=identicon&r=G | \n", "1266 | \n", "|||
/avatar/e8dd547cc3ce614c9662b891791349d4?s=64&d=identicon&r=G | \n", "2488 | \n", "|||
image/png | \n", "/avatar/58750f2179edbd650b471280aa66fee5?s=32&d=identicon&r=G | \n", "2501 | \n", "||
/avatar/58750f2179edbd650b471280aa66fee5?s=64&d=identicon&r=G | \n", "8411 | \n", "|||
/avatar/b6e56aafe01b6dfb69550be92e8db136?s=32&d=identicon&r=G | \n", "633 | \n", "|||
/avatar/b6e56aafe01b6dfb69550be92e8db136?s=64&d=identicon&r=G | \n", "1225 | \n", "|||
4.bp.blogspot.com | \n", "2607:f8b0:400f:801::100c | \n", "image/jpeg | \n", "/_NtoTtHZadHE/SZcxuOA6QmI/AAAAAAAAAAk/Y9hjo6lyCI4/S45/hendy-sitting_square.jpg | \n", "1619 | \n", "
664902255.log.optimizely.com | \n", "107.22.231.18 | \n", "image/gif | \n", "/event?a=664902255&d=13765676&y=false&n=engagement&g=634652246&u=oeu1401383749478r0.00880544213578105&t=1401383754146&f= | \n", "35 | \n", "
text/plain | \n", "/event?a=664902255&d=13765676&y=false&n=http://java.dzone.com/articles/storm-neo4j-and-python-real&u=oeu1401383749478r0.00880544213578105&wxhr=true&t=1401383749484&f= | \n", "2 | \n", "||
773-gon-065.mktoresp.com | \n", "199.15.215.178 | \n", "image/gif | \n", "/webevents/clickLink?_mchNc=1401381694487&_mchCn=&_mchHr=http://www.neo4j.org/learn/licensing&_mchId=773-GON-065&_mchTk=_mch-neo4j.org-1395320035524-69364&_mchHo=www.neo4j.org&_mchPo=&_mchRu=/develop/shell&_mchPc=http:&_mchVr=142 | \n", "43 | \n", "
/webevents/clickLink?_mchNc=1401381750537&_mchCn=&_mchHr=http://www.neo4j.org/learn/apps&_mchId=773-GON-065&_mchTk=_mch-neo4j.org-1395320035524-69364&_mchHo=www.neo4j.org&_mchPo=&_mchRu=/develop/shell&_mchPc=http:&_mchVr=142 | \n", "43 | \n", "|||
/webevents/clickLink?_mchNc=1401381765145&_mchCn=&_mchHr=http://maxdemarzi.com/2012/08/17/neosocial-connecting-to-facebook-with-neo4j/&_mchId=773-GON-065&_mchTk=_mch-neo4j.org-1395320035524-69364&_mchHo=www.neo4j.org&_mchPo=&_mchRu=/learn/apps&_mchPc=http:&_mchVr=142 | \n", "43 | \n", "
50 rows \u00d7 1 columns
\n", "\n", " | addl | \n", "id.orig_h | \n", "id.orig_p | \n", "id.resp_h | \n", "id.resp_p | \n", "name | \n", "notice | \n", "peer | \n", "ts | \n", "uid | \n", "
---|---|---|---|---|---|---|---|---|---|---|
0 | \n", "- | \n", "- | \n", "- | \n", "- | \n", "- | \n", "unknown_protocol_2 | \n", "F | \n", "bro | \n", "1.401381e+09 | \n", "- | \n", "
1 | \n", "- | \n", "192.168.1.104 | \n", "63522 | \n", "96.17.111.50 | \n", "80 | \n", "above_hole_data_without_any_acks | \n", "F | \n", "bro | \n", "1.401381e+09 | \n", "Cr8erB4kODWfLymHxg | \n", "
2 | \n", "- | \n", "192.168.1.104 | \n", "63553 | \n", "107.21.109.142 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CInmEQ2qPTLFUaUJgd | \n", "
3 | \n", "- | \n", "192.168.1.104 | \n", "63561 | \n", "69.172.216.56 | \n", "80 | \n", "unescaped_%_in_URI | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CsPWi63OSkkqS5bkT2 | \n", "
4 | \n", "- | \n", "192.168.1.104 | \n", "63565 | \n", "69.172.216.56 | \n", "80 | \n", "unescaped_%_in_URI | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CpUvD0416gnFEY3S27 | \n", "
5 | \n", "- | \n", "192.168.1.104 | \n", "63565 | \n", "69.172.216.56 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CpUvD0416gnFEY3S27 | \n", "
6 | \n", "- | \n", "192.168.1.104 | \n", "63567 | \n", "69.172.216.111 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CPz0bF1lYoQ8MMjdZc | \n", "
7 | \n", "- | \n", "192.168.1.104 | \n", "63570 | \n", "74.125.225.187 | \n", "80 | \n", "unescaped_%_in_URI | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CyPWtb4Btqfxo9Rbv7 | \n", "
8 | \n", "- | \n", "192.168.1.104 | \n", "63585 | \n", "69.172.216.111 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "Cfjf9F4oM1IXnypuo4 | \n", "
9 | \n", "- | \n", "192.168.1.104 | \n", "63586 | \n", "69.172.216.111 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "ChFsjm27dRTqQaHEH | \n", "
10 | \n", "- | \n", "192.168.1.104 | \n", "63588 | \n", "69.172.216.111 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "Ccdrtu3v0mZw804E81 | \n", "
11 | \n", "- | \n", "192.168.1.104 | \n", "63607 | \n", "69.172.216.111 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "C0vA5B35l8eojeAAQ | \n", "
12 | \n", "- | \n", "192.168.1.104 | \n", "63545 | \n", "190.104.31.170 | \n", "80 | \n", "bad_HTTP_request | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "Ch8tcl22l2EgiV7dwh | \n", "
13 | \n", "- | \n", "192.168.1.104 | \n", "63558 | \n", "107.21.109.142 | \n", "80 | \n", "unescaped_special_URI_char | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "C8gJEv1kMJhwG85Hmj | \n", "
14 | \n", "- | \n", "192.168.1.104 | \n", "63782 | \n", "192.0.80.175 | \n", "80 | \n", "above_hole_data_without_any_acks | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CsAIRmdNfA18AqWGi | \n", "
15 | \n", "- | \n", "192.168.1.104 | \n", "63780 | \n", "192.0.80.175 | \n", "80 | \n", "above_hole_data_without_any_acks | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CFkBvRNG5dNLudepe | \n", "
16 | \n", "- | \n", "- | \n", "- | \n", "- | \n", "- | \n", "unknown_protocol_2 | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "- | \n", "
17 | \n", "- | \n", "192.168.1.104 | \n", "63867 | \n", "179.24.226.184 | \n", "80 | \n", "bad_HTTP_request | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CSzfaoC9bkQ6q93je | \n", "
18 | \n", "- | \n", "192.168.1.104 | \n", "63925 | \n", "192.0.80.175 | \n", "80 | \n", "above_hole_data_without_any_acks | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "CHjPrEuxwlcImsYqk | \n", "
19 | \n", "- | \n", "192.168.1.104 | \n", "63922 | \n", "192.0.80.175 | \n", "80 | \n", "above_hole_data_without_any_acks | \n", "F | \n", "bro | \n", "1.401382e+09 | \n", "Cswz9T28tbPQ7kyBX3 | \n", "
20 rows \u00d7 10 columns
\n", "resp_mime_types | \n", "- | \n", "application/octet-stream | \n", "application/x-font-ttf | \n", "application/x-shockwave-flash | \n", "application/xml | \n", "binary | \n", "image/gif | \n", "image/jpeg | \n", "image/png | \n", "image/svg+xml | \n", "image/x-icon | \n", "text/html | \n", "text/plain | \n", "text/x-c | \n", "video/mp4 | \n", "
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
time | \n", "\n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " | \n", " |
2014-05-29 16:33:00 | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "21 | \n", "NaN | \n", "NaN | \n", "
2014-05-29 16:34:00 | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "21 | \n", "NaN | \n", "NaN | \n", "
2014-05-29 16:35:00 | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "21 | \n", "NaN | \n", "NaN | \n", "
2014-05-29 16:36:00 | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "21 | \n", "NaN | \n", "NaN | \n", "
2014-05-29 16:37:00 | \n", "0 | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "NaN | \n", "68841 | \n", "962 | \n", "23623 | \n", "NaN | \n", "3382 | \n", "55238 | \n", "417659 | \n", "NaN | \n", "NaN | \n", "
5 rows \u00d7 15 columns
\n", "