We're working our way through some of our favourite Datascape1 visualisations as a way of testing out Datascape 2. This one shows some cyber data from an NSA CDX exercise. Each line is a data packet going between two computers. The home network is the bottom "layer", and foreign networks are stacked above. Each node is a computer terminating a packet at a particular time, and is shaped by source/destination, and coloured by port. Lines are sized to data packet size and coloured by protocol.
There are lots of very obvious activity patterns which belie certain types of network behaviour, and anything moving from the home network to another network (any line with a vertical component) is immediately of interest.
As the video clip on Twitter shows if you hover over any node or edge you can see its details.