Improve the anomaly detection time for flow exporters that send flows with zero duration