So i first ran it dry by setting portdiff!=0 to write all the indicies.

Then I checked the log to see which came up the most. The portdiffs common ones were 2,3

So then I removed the log. Changed the server so that portdiff!=3
Which indicates that if its not = to 3, add this to the array since it might be the key.

Well when I run that, it still adds all the indicies into the array even though when I cross compare indexs from the array and the log.txt I can see that portdiff with value 3 are included. Where am I going wrong! GAH

And here is the if statement, this is the correct setup right?

    if (portdiff!=3): #the number here depends on the chunk
        MyHandler.suspicious.append(MyHandler.index);
        MyHandler.index+=1;
        MyHandler.lastport=port
    return