Requests to send data from a first host within a network of hosts are
monitored against a record of destination hosts who have been sent data
in accordance with a predetermined policy. Destination host identities
not the record are stored in a buffer. The buffer size is monitored to
establish whether requests from the first host are pursuant to viral
activity therein.