Telescope traces

TCP flags

• The two figures evaluate the number of packet with tcp flags in the telescope trace collected in a day in December 2009.
  The line representing the number of SYN packets in Figure 1 has the same trend of the number of total packets in the trace (including all protocols: tcp, udp, icmp). The lines related to the other flags don't show the same trend.
  
  
  
  
  Figure 1. Number of packets with tcp flags during a day in December 2009, evaluated in consecutive intervals of 5 minutes.
  
  
  

On average the 90% of packets in the telescope traces are SYN packets (Figure 2).




Figure 2. Percentages of packets with tcp flags during a day in December 2009.