1. A computer implemented method, comprising: receiving a data packet from a network source; extracting source and destination data from the received data packet; determining a user from the extracted source and destination data from the received data packet; creating a label for the data packet, in response to a determination that the label does not exist for the extracted source and destination data from the received data packet, the label including the extracted source data and historic source data for the determined user; calling a chaotic function with the label for the received data packet; calling an alternative function for an output with the label for the received data packet, in response to the chaotic function being returned false; capturing the output of the chaotic function, in response to the chaotic function being returned true; and updating the label with the output of the chaotic function or with the output of the alternative function.