The web server answers requests sent by clients (e.g., web browsers) that run on various machines during the observation period. The main thing that a web server does is wait for a connection and then "accept" the connection to handle whatever request was sent. The name of the syscall to accept a connection is very intuitive. How many times does the web server accept a connection from a remote IP during the observation period? You'll see that a single process accepts all requests. How many seconds into the observation period was that process created and which process created it? What is the average request arrival rate during the observation period? (i.e., the average number of requests that arrive per second). How many different IPS contact the web server during the observation period?