Handler on Duty: Didier Stevens
Threat Level: green
Trend: This number is calculated by comparing the number of reports, source IPs, and target IPs for a particular port for the last 30 days to the last 3 days.
Protocol Ratio Change (PRC): Substracting the average TCP ratio for the last 30 days from the average over the last 3 days. The TCP ratio is calculated as how many of the reports for a specific port are using TCP compared to the total reports received for that port. If all reports are TCP, the ratio would be "100" (100% TCP).