• Trace1 - one attacker generates UDP flood of 1001B long packets, on the average of 10MB/s. Simultaneously there is legitimate SSH session between a client and the victim. Attack is aborted by the end of the trace and legitimate connection proceeds.
• Trace2 - two attackers generate UDP flood of 1001B long packets; on the average of 12MB/s goes through. Simultaneously there is legitimate SSH session between a client and the victim. Attack is aborted by the end of the trace and legitimate connection proceeds.