Inter-Arrival Curves for Multi-Mode and Online Anomaly Detection