I've been having a really hard time to understand the logic behind NSM DoS Profile charts. For example, the tcp-control chart, which shows the distribuition rate (in %) for the common tcp flags, has some categories with long term % way above 100%. I don't understand how can these long term go over 100%, I was expecting them to sum-up to 100%, like the short term.
So my question is, why does the long term sums up way more than 100%?
Thanks in advance.