Date: Thu, 31 Jan 2002 16:34:21 -0600 From: Eric A. Hall <ehall@ehsco.com>
Then use six or eight or 20000 or whatever number is above the 90% false positive threshold
Which requires accurate correlation between number of sessions and shared connections. Still false positives, or false negatives galore... If one assumes a 10% duty cycle for someone casually browsing the Web using HTTP/1.1, many of those users could share a single physical connection with only a few open TCP connections. Eddy Brotsman & Dreger, Inc. - EverQuick Internet Division Phone: +1 (316) 794-8922 Wichita/(Inter)national Phone: +1 (785) 865-5885 Lawrence -- Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) From: A Trap <blacklist@brics.com> To: blacklist@brics.com Subject: Please ignore this portion of my mail signature. These last few lines are a trap for address-harvesting spambots. Do NOT send mail to <blacklist@brics.com>, or you are likely to be blocked.