Traffic summary

At Nimda's peak, over 2000 TCP SYN pps
Concurrent with CodeRedII
Current CodeRed peak, about 30 TCP SYN pps
Appears to compete with Nimda
Uniform random distribution of addresses across /8
Anderson-Darling test