I am trying to start a series of brief diaries about “what’s normal.” Analysts often only look at the network when they suspect something is wrong. But to find the anomaly, someone must first know what’s normal. So, I am trying to collect data from my home network to show what to consider. The values I am presenting here are normal for my home network and will likely differ for your network. So, instead of just copying/pasting, run the experiment yourself 
Article Link: https://isc.sans.edu/diary/rss/30234