[nsp-sec] anomalies?

[Chris Morrow]

On 12/28/10 2:38 PM, David Freedman wrote:
> ----------- nsp-security Confidential --------
> 
> Does anybody have graphs showing what the levels were like last year at this
> time? Although this looks quite low, have nothing to compare against.

Looking at 2 of my mailhosts (personal, not work):

<http://docs.as701.net/health/process.html>
<http://docs2.as701.net/health/process.html>

The graphs seem to show levels down a LOT from last year this
time-frame... note these graphs are essentially the output of:
   ps -ef | grep <something> | wc -l

and don't correlate very well to source-ip or even total volume, they
are a decent proxy I've found though for total volume.

-Chris