I want to see if someone sends a ton of packets that I DROP in a short time vs someone that, over time, ends up sending the same number (or more) DROPped packets (or DENY, etc). Technically, I'm looking at a time stamp and converting it to epoch, but the general theory holds up to what I presented.