In netwоrk intrusiоn detectiоn, dаtа pаckets are monitored. A sudden spike in packet volume coming from an internal IP address that usually sends very little data is detected. However, this spike is sustained over an hour. This anomaly suggests an attack, but what type of anomaly is it?