looks at the network traffic and distinguishes between normal activity and suspicious activity.
&gt;&gt; traffic analysis involves determining the location and identity of communicating hosts and could observe the frequency and length of messages being exchanged.
the attempt to gather information about somebody's internet connections by analyzing the timing, length, and destinations of their packets