30 days seems not enough to retrospectively investigate some suspected nefarious traffic.