An apparatus for predicting a network event flood comprises an event rate detector for detecting rates of event emissions from one or more devices; an aggregator for producing an aggregate rate and an aggregate rate trend of the rates of event emissions from a plurality of the devices; a level generator for generating a plurality of levels comprising maximum acceptable event rate values of a plurality of the aggregate rate trends over plural time periods; a storage component for storing the plurality of levels; a comparator for comparing a current aggregate rate trend with at least a selected one of the levels; and a signaller for signalling a predicted event flood responsive to the comparator detecting that the current aggregate rate trend will exceed the at least a selected one of the levels at a first point in time.
Please help me write a proper abstract based on the patent claims. CLAIM: 1. A method for predicting a network event flood, the method comprising the steps of: detecting, by an event rate detector, rates of event emissions from one or more devices; producing, by an aggregator, an aggregate rate and an aggregate rate trend of said rates of event emissions from a plurality of said devices; generating, by a level generator, a plurality of levels comprising maximum acceptable event rate values of a plurality of said aggregate rate trends over plural time periods; storing, by a storage component, said plurality of levels; comparing, by a comparator, a current aggregate rate trend with at least a selected one of said levels; and signalling, by a signaller, a predicted event flood responsive to said comparator detecting that said current aggregate rate trend will exceed said at least a selected one of said levels at a first point in time. 2. The method according to claim 1 wherein said step of aggregating comprises using an average for calculating an average event rate. 3. The method according to claim 1 wherein said step of aggregating comprises using a statistical calculator for calculating a statistically-normalized aggregate rate or rate trend. 4. The method according to claim 3 wherein said statistically-normalized aggregate rate or rate trend defines a normalized trend. 5. The method according to claim 4 wherein said normalized trend is calculated by a least-squares method. 6. The method according to claim 1 wherein said plural time periods are defined according to one or more of: times of day; days of week; days of month; or days of year. 7. The method according to claim 1, further comprising the step of: responsive to said signaller, ordering by an ordering component a list of identifiers of said devices in descending order from a device having at said first point in time a maximum rate of event emissions to a device having at said first point in time a minimum rate of event emissions. 8. The method according to claim 7, further comprising the step of selecting said device from said list having at said first point in time a maximum rate of event emissions and identifying said device as a candidate device for placing in a flood protection mode. 9. The method according to claim 8, wherein said flood protection mode causes a receiver to accept a reduced rate of event emissions from said device. 10. The method according to claim 9, wherein said receiver comprises a network monitor. 11. The method according to claim 10, wherein said network monitor comprises a probe. 12. The method according to claim 8, further comprising placing, by a flood protection control component, said candidate device in said flood protection mode as a flood protected device. 13. The method according to claim 12, further comprising the step of: selecting a flood protected device having at a second point in time a minimum rate of event emissions and identifying said device as a candidate device for removal from said flood protection mode.