Patent attributes
Examples include detection of unclassified traffic in a network. Some examples use an unsupervised machine learning mechanism for generating a first set of clusters of a first set of samples associated with a first set of time intervals, based at least in part on network traffic over a network, in a first predetermined period of time. Each sample associated with the respective time interval includes distribution of packets based on their packet lengths. In response to retrieving a second set of samples associated with a second set of time intervals, based at least in part on network traffic, a second set of clusters of the second set of samples is generated. It is determined whether one or more features of the second set of clusters vary as compared to one or more features of the first set of clusters of the first set of samples to detect unclassified traffic in the second set of samples.
