workload on OC48 backbone link: analysis use coralreef software suite http://www.caida.org/tools/measurement/coralreef/ public domain obtain quantitative parameters of captured traffic: packet and byte rates flows (src IP, src port, dest IP, dest port, protocol) use NetGeo tool to map src/dst IP addresses to ASes and countries http://www.caida.org/tools/utilities/netgeo/ consider various aggregations of traffic: applications ASes countries