> Obviously this has been seen in the wild. Can you provide an actual example? I see it come up a lot in these conversations, but I'm really skeptical that any

> Obviously this has been seen in the wild. Can you provide an actual example? I see it come up a lot in these conversations, but I'm really skeptical that anyone actually does this analysis. It seems like rate analysis (either requests or bandwidth) would achieve the same result in a far simpler manner, so I suspect that is what actually happens.