From: jwjmdmroDate: 13 Dec 2005Time: 07:27:51 -0800Remote Name: 12.21.132.200
what is the detection period for a user of "mscontin"? 2000 and 300 cut-offs.