Trend: This number is calculated by comparing the number of reports, source IPs and target IPs for a particular port for the last 30 days to the last 3 days.
Protocol Ratio Change: Substracting the average TCP ratio for the last 30 days from the average over the last 3 days. The TCP ratio is how many of the reports indicate TCP as protcol compared to the number of total reports. If all reports are TCP, then the ratio would be "100" (100% TCP).
|Port||Service||Name||Trend||Protocol Ratio Change|