Elephant Detection
Compute a bandwidth threshold for each time interval in a systematic fashion, that separates elephants from mice
- cutoff point in the flow bandwidth distribution.
- a% of the traffic apportioned to the elephant class.
Allow for short-lived bursts or drops across the threshold that would lead to frequent changes in state.
- “latent heat” tracks the evolution of the flow bandwidth with respect to the classification threshold