results: application characteristics - Well-known applications are determined from port numbers - Plot distributions of bytes, packets, and flows by applications