network traffic anomaly detection based on packet bytes .
Experience with EMERALD to Date