Extracting inter-arrival time based behaviour from honeypot traffic using cliques