I want to find pairs of source/destination IPs, that have very high and unnormal communication in specific period.
let say if average daily communication between IP-A and IP-B is X event, i want to find day with 25X events.
That mean all pairs have to be checked and to show pairs with the biggest different between monthly average/median
and specific day (or other time unit)
... View more