[brazzy]

If they wanted to flood the network at a particular time, why would they in advance create low-volume traffic that reveals the existence of the botnet?