tcp 
	tcp syn list picture - a 445 scanner.  attack 1.
		topn_tcp_syn1.png
	tcp bpf control - large "distributed" zombie attack?
		tcpcontrola1.png.  attack 2

udp slammer pics
	icmp top N - udp slammer,  attack 3
		madness.png
	icmp errors - udp slammer
		bpf.icmpunreach.daily-png
	udp or pkts count - udp slammer
		ipproto.daily-png
	udp syn - another udp attack   attack 4
		high-speed walk of remote udp ports 1026/1027 with
			somewhat random ips.
		topn_udperror1.png

metadata
	flow count - large distributed zombie attack? attack 2	
		flowcounta1.png
	worm graph - large distributed zombie attack. attack 2
		twormcounta1.png