&gt;&gt; traffic analysis involves determining the location and identity of communicating hosts and could observe the frequency and length of messages being exchanged.
looks at the network traffic and distinguishes between normal activity and suspicious activity.
examines the flow of network traffic for patterns and exceptions to those patterns