Efficient Extraction of Network Event Types from NetFlows

Figure 1

A snapshot of a 5-minute window of traffic within the university network. Flows are displayed as directed arrows between two endpoints displayed as dots. Individual flows are grouped into events of particular types as distinguished by colors.