. . "Traffic is determined to be unusual when it operates according to criteria programmed into the system such as excessive traffic such as from a DoS attack." . .