12. A system, comprising: a plurality of communicatively coupled computers configured to communicate via an internet protocol (IP) across a computer network; and a database containing a single instance of each unique packet header associated with a plurality of IP-to-IP packets, the IP-to-IP packets having been transmitted across the computer network over a predefined period of time, one of said computers programmed to: analyze the packet headers in said database to identify anomalous conversations based on at least one of a conversation uniqueness, a time of week uniqueness, and a data quantity uniqueness; and provide at least one alert to a network user, the at least one alert corresponding to detected anomalous conversations.
13. The system of claim 12 , wherein to analyze the packet headers in said database to identify anomalous conversations, the one of said computers is programmed to determine whether a particular conversation has been conducted on the IP network over a historical and statistically relevant period based on an IP-to-IP-on-Port conversation tuple.