Arbor Networks DoS defense product

Only tcp connections with full handshake would be counted.

-Dan