For all switch ports,
such analysis over time is compactly stored in a number of
state variables. As time progresses, a rogue AP (or a number
of them) are detected as the difference in state variables
between ports crosses a threshold. The aim of this research is
to experiment and derive such state representation and its
derivation from the observed temporal characteristics of
traffic. In this paper, we present the observed differences in
inter-packet spacing in wired and rogue AP scenarios.