Statistics for A System to detect suspicious activities in network traffic