BOTNET question....

[JingYou]

[01:17] <online-op> Online-OP
[01:17] <online-op> |-+Support
[01:17] <online-op> | |--XA
[01:17] <online-op> | |--CR
[01:17] <online-op> | |--CX
[01:17] <online-op> | `--NX
[01:17] <online-op> `--altobelli
[01:17] <online-op> |--UT-0
[01:17] <online-op> | |--UT-1
[01:17] <online-op> | |--UT-2
[01:17] <online-op> | |--UT-3
[01:17] <online-op> | |--UT-4
[01:17] <online-op> | |--UT-5
[01:17] <online-op> | |--UT-6
[01:17] <online-op> | |--UT-7
[01:17] <online-op> | |--UT-8
[01:17] <online-op> | |--UT-9
[01:17] <online-op> | |--UT-10
[01:17] <online-op> | |--UT-11
[01:17] <online-op> | |--UT-12
[01:17] <online-op> | |--UT-13
[01:17] <online-op> | `--UT-14
[01:17] <online-op> |--NetSphere
[01:17] <online-op> |--IntelBot
[01:17] <online-op> |--Melysa
[01:17] <online-op> |--I-N-T-E-L
[01:17] <online-op> |--Tardelli
[01:17] <online-op> |--Mert
[01:17] <online-op> |--Kingston
[01:17] <online-op> |--wIRCD
[01:17] <online-op> |--MostarBoT
[01:17] <online-op> | |--BosanciBo
[01:17] <online-op> | |--ThunderBi
[01:17] <online-op> | `--_athl0n_
[01:17] <online-op> |--Sn0wQueen
[01:17] <online-op> | |--UrServ
[01:17] <online-op> | `--kombatgal
[01:17] <online-op> |--FoxHUB
[01:17] <online-op> | |--FoxShells
[01:17] <online-op> | |--WebFox
[01:17] <online-op> | |--FoxAdv
[01:17] <online-op> | |--bopomofo
[01:17] <online-op> | | `--DontMsgMe
[01:17] <online-op> | |--LinuxServ
[01:17] <online-op> | `--SlakLinux
[01:17] <online-op> |--Sparky
[01:17] <online-op> | |--Puhbert
[01:17] <online-op> | |--Xony
[01:17] <online-op> | |--Looney
[01:17] <online-op> | |--Xyon
[01:17] <online-op> | |--di|c|ital
[01:17] <online-op> | |--Roomer
[01:17] <online-op> | `--Ionic
[01:17] <online-op> |--Level
[01:17] <online-op> | |--Virt-Host
[01:17] <online-op> | |--BinaryH8
[01:17] <online-op> | |--KaoticIRC
[01:17] <online-op> | |--DragonLin
[01:17] <online-op> | |--Level1
[01:17] <online-op> | |--Level4
[01:17] <online-op> | |--Level6
[01:17] <online-op> | |--Level9
[01:17] <online-op> | |--m33bot
[01:17] <online-op> | |--SlackBot
[01:17] <online-op> | |--Level7
[01:17] <online-op> | |--BotShop
[01:17] <online-op> | |--Section
[01:17] <online-op> | |--EF-Share
[01:17] <online-op> | | |-+Level5
[01:17] <online-op> | | |-+Level10
[01:17] <online-op> | | |-+Level0
[01:17] <online-op> | | `-+Level3
[01:17] <online-op> | |--Au-Share
[01:17] <online-op> | | |-+Section2
[01:17] <online-op> | | |-+Level2
[01:17] <online-op> | | `-+Level8
[01:17] <online-op> | |--Nerd
[01:17] <online-op> | `--IC`blue
[01:17] <online-op> |--Pisyo
[01:17] <online-op> |--Agnes
[01:17] <online-op> |--MadmiX
[01:17] <online-op> |--mIRCnet
[01:17] <online-op> `--lab01
[01:17] <online-op> |--Julia
[01:17] <online-op> |--lab02
[01:17] <online-op> |--Dangle
[01:17] <online-op> |--Caboose
[01:17] <online-op> |--Nebulous
[01:17] <online-op> |--Renegade
[01:17] <online-op> |--Phlegm
[01:17] <online-op> |--Tarantula
[01:17] <online-op> |--Tantrum
[01:17] <online-op> |--TriviaBot
[01:17] <online-op> |--Servant
[01:17] <online-op> |--Drunk
[01:17] <online-op> |--Bamboozle
[01:17] <online-op> |--Turnip
[01:17] <online-op> |--BB
[01:17] <online-op> | |--tohazzip
[01:17] <online-op> | |--paultdog
[01:17] <online-op> | |--Blast^BOT
[01:17] <online-op> | |--Taka_Bot
[01:17] <online-op> | |--CG
[01:17] <online-op> | |--SC
[01:17] <online-op> | `--Yokel
[01:17] <online-op> `--Cadaver
[01:17] <online-op> Average hops: 2.9, total bots: 106

Whats the meaning of 'Average hops: 2.9' ?

[Kuulest]

Hops are the number of links a bot is away from another bot. For example, consider the following:

There are four bots (bot1, bot2, bot3, and bot4)
bot2 is connected to bot1, bot3 is connected to bot2, and bot4 is connected to bot3.

The hopcount between bot2 and bot1 is 0, because bot2 is directly linked to bot1.

The hopcount between bot3 and bot1 is 1, because bot3 is one link away from bot1. In order for bot3 to send a message to bot1, bot3 must first send a message to bot2. bot2 then sends the message to bot1.

The hopcount between bot4 and bot1 is 2, because bot4 is two links away from bot1. In order for bot4 to send a message to bot1, bot4 must first send a message to bot3. bot3 sends it to bot2, and then bot2 sends it to bot1.

The average hop count is (I beleive) summing up all the hopcounts (in the case above, 3) and dividing it by the number of bots on the entire botnet. The average hopcount for my example above would be 3/4, or 0.75. Someone correct me on this if i'm wrong.

As a sidenote, IRC networks work the exact same way.

[ppslim]

Consider the following

Bot1
|--Bot2
| `--Bot3
`--Bot4
|--Bot5
`--Bot6

There are one hops from Bot1 to Bot2, as data as data has to hop accross 1 connection to reach the target.

It takes 2 hops for Bot1 to talk to Bot6, 1 hop to Bot4, then a Hop from Bot4 to Bot6.

To work out the average hops, you have to get the amount of hops, it take for Bot1 to talk to each other bots

EG

Bot1 -> Bot2 = 1
Bot1 -> Bot3 = 2
Bot1 -> Bot4 = 1
Bot1 -> Bot5 = 2
Bot1 -> Bot6 = 2

This gives you a total hops count of 8. You now devide this by how many bot there are on the net, minus 1.

So there are 6 bots in this botnet, take 1 away, you have 5. Devide the 8 by 5 and you get an average of 1.6 hops.

The reason you have to take the 1 away, is you don't include the bot you are on, as it takes 0 (zero) hops to talk to itself.

The previous example was wrong, as you started counting the connections a 0 hops, rather than 1. Rule of thumb, if the average is below 1, then it is wrong, coz by rights, it takes at least 1 hop, no matter what, it is impossible to have a 3/4 hop. The average for the previous post is actualy an average of 2 hops.

[JingYou]

Thanks:P