[cobalt-users] Web Trends & Nimda

[Timothy Perkins <tperkins@xxxxxxxxx>]

Maybe this question is better directed at Web Trends, but I thought I'd try here, too.
This is a question I asked in a previous post.  The question got lost because of the
inadvertent length of the post.

The question is about entries for "dynamic forms pages" in my September Web
Trends report (ten lines copied below).

I'm aware that each of these files are searched for by Nimda, so these were all Nimda attacks.
Excuse the weird layout but I just copied text from chart.

On the first entry for cmd.exe, the 5153 is page views, the percent is percent of total page views
and the 1713 is user sessions.

My question is this.  Since Nimda searches for all these files, are the other nine sets of user
sessions and page views a subset of the largest or should I add up all the 10 user sessions for
dynamic pages to get a
total? I assumed that the nine were subsets because I hate to think we had almost 20,000 bogus user
sessions.

1   http://www.boone.org/scripts/..%5c../winnt/system32/cmd.exe   5,153   12.29%   1,713
2   http://www.boone.org/scripts/root.exe                                         2,713     6.47%
1,748
3   http://www.boone.org/MSADC/root.exe                                     2,675     6.38%    1,727


4
              http://www.boone.org/c/winnt/system32/cmd.exe

2,648

6.31%

1,709
          5
              http://www.boone.org/d/winnt/system32/cmd.exe

2,638

6.29%

1,701
          6
              http://www.boone.org/_mem_bin/..%5c../..%5c../..%5c../winnt/
              system32/cmd.exe

2,604

6.21%

1,681
          7
              http://www.boone.org/_vti_bin/..%5c../..%5c../..%5c../winnt/
              system32/cmd.exe

2,598

6.19%

1,678
          8
              http://www.boone.org/scripts/..¡;../winnt/system32/cmd.exe

2,591

6.18%

1,672
          9
              http://www.boone.org/scripts/..¿/../winnt/system32/cmd.exe

2,574

6.14%

1,667

          10
              http://www.boone.org/scripts/..¿Ø../winnt/system32/cmd.exe

2,570

6.13%

1,660