Question

所以我有一个数据框，我正在尝试检查是否：

如果犯罪者和受害者在某个时间（时间戳）有关系，则在一定的时间范围内，是否发生相反的情况，受害者成为犯罪者，反之亦然。

E.g。 if X attacks Y at time Z然后在一个时间范围内Y攻击X时添加一个计数Z + 24hrs

        X       Perpetrator          Victim           Time Stamp
44      3              FvdP           Jmallios 2002-11-13 21:53:17   
45      2              FvdP               FvdP 2002-11-13 21:58:59   
46     28               Lir                Lir 2002-11-19 00:47:05   
47     16   194.117.133.118            Tinulim 2002-11-27 00:13:40   
48     15           Tinulim    194.117.133.118 2002-11-27 00:16:03   
49     14             Zocky            Tinulim 2002-11-27 00:23:28   
50     13   194.117.133.118              Zocky 2002-11-27 00:25:31

这是数据框的一部分。例如，当用户194.117.133.118攻击用户Tinulim时，用户会在3分钟后194.117.133.118进行攻击。 [时间戳条目是datetime.Timestamp]

形式的对象

我想将用户和计数添加到新数据框中。 e.g。

         Initiator          Retort           Time Stamp
1  194.117.133.118         Tinulim  2002-11-27 00:13:40

我目前正在使用带有iterrows的for循环，但无法使用此函数正确格式化：

def time_window_24(time1,time2):
    "Is time2 within 24 hours ahead of time1?"
    if (time2 - time1).days == 0 and time1!=time2:
        return True
    else:
        return False

Answer 1

以下是使用pd.merge_asof的解决方案，您可以在此处查看API：merge_asof docs

data = """
perpetrator,victim,date
FvdP,Jmallios,2002-11-13 21:53:17
FvdP,FvdP,2002-11-13 21:58:59 
Lir,Lir,2002-11-19 00:47:05 
194.117.133.118,Tinulim,2002-11-27 00:13:40 
Tinulim,194.117.133.118,2002-11-27 00:16:03 
Zocky,Tinulim,2002-11-27 00:23:28 
194.117.133.118,Zocky,2002-11-27 00:25:31 
"""
from io import StringIO
df = pd.read_csv(StringIO(data), parse_dates=[2])
df = df.query('perpetrator != victim')
merged = pd.merge_asof(df,
                       df,
                       on=['date'],
                       right_by=['perpetrator', 'victim'],
                       left_by=['victim', 'perpetrator'],
                       direction='forward',
                       tolerance=pd.tslib.Timedelta('1 day'),
                       suffixes=('', '_res'))
merged = merged.rename(columns={'victim_res': 'initiator',
                                'perpetrator_res': 'retort'})
print(merged[merged.retort.notnull()][['initiator', 'retort', 'date']].to_string())

initiator retort date 1 194.117.133.118 Tinulim 2002-11-27 00:13:40

在数据帧中检查时间段内的条件。 [Python] [熊猫]

1 个答案: