Parameters for matching recently seen sources Source addresses seen more than N times u32:1-255 Source addresses seen more than N times Source addresses seen in the last second/minute/hour second minute hour second Source addresses seen COUNT times in the last second minute Source addresses seen COUNT times in the last minute hour Source addresses seen COUNT times in the last hour (second|minute|hour)