140368.fig.006
Figure 6: State transition for detecting the port scanning.