The input-response correlation involves estimating which
part of traffic is in response to which impulse (or input).
Thus, for every response quanta of traffic from an end point
in the segment, temporal characteristics may be analyzed by
classifying mean, variance, and other frequency response
characteristics of inter-packet spacing. For all switch ports,
such analysis over time is compactly stored in a number of
state variables. As time progresses, a rogue AP (or a number
of them) are detected as the difference in state variables
between ports crosses a threshold. The aim of this research is
to experiment and derive such state representation and its
derivation from the observed temporal characteristics of
traffic. In this paper, we present the observed differences in
inter-packet spacing in wired and rogue AP scenarios.