Efficient Extraction of Network Event Types from NetFlows

Figure 5

Depiction of the four different flow (star) to event (circle) conformations arising from comparison of the new method (red) with Camnep (blue). The diagrams are roughly proportional to the actual occurence of the cases.