Do you also happen to have a breakdown of what ports this raffic was going
to/from? The reason I ask iss that this seems to lead to a conclusion that
a lot of the data was for "interactive" services such as telnet and the like
as opposed to batch transfer type of connections such as ftp, and sendmail.