Section #1 : clients % server * * % srv ------- - ------ - --- --- 740.0 100 irc.colorado.edu 1.0 0.1 2.0 290.0 100 irc.escape.com 1.0 0.3 1.0 284.0 100 irc-2.mit.edu 9.0 3.2 7.0 -1- -2- -3- -4- -5- -6- -1- = average number of clients on this server during this period. -2- = % of this period that this server was visible from dewey.cc.utexas.edu. -3- = the name of this server. -4- = average number of IRCops on this server during this period. -5- = % of this server's clients that are currently IRCops (a large number here typically screams 'vanity server') -6- = The average number of servers that this server links. Not calculated for servers behind hostmasks. Servers that are strictly leaves will have '1.0' here (they link only to their uplink.) Section #2 : Server hostmasks seen : *.aol.com *.arizona.edu *.au *.be *.bu.edu *.ca Ignore this part ... it's for debugging mostly. Section #3 : clients non-dup domain ------- ------- ------ 260.0 237.0 218.0 194.0 *.netcom.com 117.0 100.0 *.umn.edu 110.0 96.0 *.bgu.edu -1- -2- -3- -1- = average number of clients on IRC from this domain during this period. -2- = average number of unique user@host pairs from this domain during this period. This may require some clarification ... For example, suppose that there's 5 bots that match 'Ariela@*.texas.net' that are always on IRC. These five bots would add '5' to the average for -1-, but only '1' for -2- ... If -1- is much larger than -2-, it typically means a bot infested domain, or lots of shared accounts (or telnet servers such as irc@RED-DWARF.CIT.CORNELL.EDU, for example.) -3- = The domain itself. Section #4 : clients domain ------- ------ 3218.0 *.edu 1112.0 *.com 522.0 *.fi 459.0 *.net 402.0 *.ca -1- -2- -1- = average number of clients on IRC from this domain during this period. -2- = the toplevel domain.