SELECT CASE WHEN ((t2.address IS NULL) OR (t2.address = ' ')) THEN '127.0.0.1' ELSE t2.address END, CASE WHEN ((t2.address IS NULL) OR (t2.address = ' ')) THEN '127.0.0.1' ELSE t2.address END AS "Source Addr", COUNT(tlast._ident) AS "Alerts" , ROUND((100.0*COUNT(tlast._ident))/126,5) , MIN(t0.time) AS "FTS" , MAX(t0.time) AS "LTS"
FROM Prelude_Alert AS top
LEFT JOIN Prelude_Address AS t2 ON ( top._ident = t2._message_ident AND t2._parent_type = 'S' AND t2._parent0_index = -1 AND t2._index = -1)
LEFT JOIN Prelude_Analyzer AS t6 ON ( (t6.name = 'PAM') AND top._ident = t6._message_ident AND t6._parent_type = 'A' AND t6._index = -1)
LEFT JOIN Prelude_CreateTime AS t0 ON ( t0._message_ident = top._ident AND t0._parent_type = 'A')
LEFT JOIN Prelude_Alert AS tlast ON ( (t6.name = 'PAM') AND tlast._ident = top._ident)
WHERE t0.time >= '2005-12-11 23:00:00.0' AND t0.time <= '2005-12-24 23:00:00.0' GROUP BY 1
EXCEPT SELECT CASE WHEN ((t2.address IS NULL) OR (t2.address = ' ')) THEN '127.0.0.1' ELSE t2.address END, CASE WHEN ((t2.address IS NULL) OR (t2.address = ' ')) THEN '127.0.0.1' ELSE t2.address END as "Source Addr",COUNT(tlast._ident) AS "Alerts" , ROUND((100.0*COUNT(tlast._ident))/126,5) , MIN(t0.time) AS "FTS" , MAX(t0.time) AS "LTS"
FROM Prelude_Alert AS top
LEFT JOIN Prelude_Address AS t2 ON ( top._ident = t2._message_ident AND t2._parent_type = 'S' AND t2._parent0_index = -1 AND t2._index = -1)
LEFT JOIN Prelude_Analyzer AS t6 ON ( (t6.name = 'PAM') AND top._ident = t6._message_ident AND t6._parent_type = 'A' AND t6._index = -1)
LEFT JOIN Prelude_CreateTime AS t0 ON ( t0._message_ident = top._ident AND t0._parent_type = 'A')
LEFT JOIN Prelude_Alert AS tlast ON ( (t6.name = 'PAM') AND t6._message_ident IS NULL AND tlast._ident = top._ident)
WHERE t0.time >= '2005-12-11 23:00:00.0' AND t0.time <= '2005-12-24 23:00:00.0' GROUP BY 1 ORDER BY 3 DESC
e-REdING. Biblioteca de la Escuela Superior de Ingenieros de Sevilla.
