Table 5: Examples when the sensor-detected situations that required the Firewall rules to change.

Source address Date/time Operation Sensor xx.xx.200.35 2011-07-12 Add rule xx.xx.21.62 01:03:12 xx.xx.17.212 2011-07-12 Remove rule xx.xx.32.63 03:25:19 xx.xx.117.51 2011-07-13 Add rule xx.xx.21.62 01:23:17 xx.xx.94.139 2011-07-13 Add rule xx.xx.31.63 02:27:11 xx.xx.13.231 2011-07-14 Remove rule xx.xx.21.62 03:42:52