# Data Visualization

**URL:** <https://community.zeek.org/t/data-visualization/1498>\
**Category:** Zeek\
**Created:** [March 7, 2009, 10:15pm UTC](https://community.zeek.org/t/data-visualization/1498 "2009-03-07T22:15:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jean-philippe\_luiggi](https://avatars.discourse-cdn.com/v4/letter/j/8e7dd6/32.png) [@jean-philippe\_luiggi](https://community.zeek.org/u/jean-philippe_luiggi)\
**Post date:** [March 7, 2009, 10:15pm UTC](https://community.zeek.org/t/data-visualization/1498/1 "2009-03-07T22:15:29Z")

</div>

Hello Everybody,

I did a (simple) perl script in order to use Bro with "Picviz", this tool is a parallel coordinates  
plotter which helps to visualize your data using parallel coordinates plots  
([http://en.wikipedia.org/wiki/Parallel\_coordinates](http://en.wikipedia.org/wiki/Parallel_coordinates)).

Here are the parameters i plot : time, src\_ip, src\_port, src\_bytes,  
dst\_ip, dst\_port, receive\_bytes, duration, state.

The states are the same Bro is reporting about :  
"S0,S1,SF,REJ,S2,S3,RSTO,RSTR,RSTOS0,RSTRH,SH,SHR,OTH", I plot them using 3 groups of colors :

"S0,S1,S2,S3, REJ,RSTO,RSTR" as "blue"  
"SF" as "green"  
"RSTOS0,RSTRH,SH,SHR,OTH" as "red"  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}  
Using parallel coordinates plots is a very useful way to see what's  
happening so happy "Picvizing" 🙂

You'll find the files i use at [http://www.rootshell.be/~jpli/picviz](http://www.rootshell.be/~jpli/picviz)  
and "Picviz" is available at [http://www.wallinfire.net/picviz](http://www.wallinfire.net/picviz)

With regards,

Jean-Philippe.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/data-visualization/1498/2 "2022-05-06T15:38:52Z")

</div>

Closed on May 6, 2022, 3:38pm UTC


