results: application characteristics 



 - well-known applications are determined from port numbers
 - plot distributions of bytes, packets, and flows by applications