What was the overall makeup of the attack traffic? For example, 50% tcp syn, etc.