I have a category in my reports called “assessing”, what is this?

Assessing refers to a new connection that is unknown to us, should the connection remain connected for over 10 minutes, our web crawler will analyse it and categorise it.

If a new connection appears but only remains connected for a short period of time, i.e. 1 to 2 minutes then disconnects and connects to another host for a very short time, our web crawler does not attempt to classify the connection as it is most likely a port scanner, malware or even an over active torrent client.  

Only connections that remain connected to a host for 10 minutes or more are analysed and classified.

back to faqs