Re: correlation between ingress and egress traffic in case of volume-based DDoS