The images published in the Symantec article on this topic used “raw” images that were exactly what analysts looking at the data would see. These are the slightly stylized versions that Ive hung in shows.  A lot of thanks goes to the people at NetSec at the time, a Tufte lecture, and the support of everyone who really loved these just for how they looked.

Destination Port Frequency on the Internet for a period of time

Protocol Analysis plot of 10,000 spam emails

Plot of security data used to test a massive security correlation tool.

Security logs of an unused website