measurements: analysis use CoralReef software suite http://www.caida.org/tools/measurement/coralreef/ obtain quantitative parameters of captured traffic: Byte rates and Packet rates Flows Flow = (src IP, src port, dest IP, dest port, protocol) use NetGeo tool to map src/dst IP addresses to ASes and countries http://www.caida.org/tools/utilities/netgeo/ consider various aggregations of traffic: applications ASes countries