conclusions we infer applications using port mappings dominated by WWW, filesharing, and gaming applications flow duration relatively short timeouts (i.e. 4 seconds) may be adequate traffic destinations dominated by East Asia (KR, TW, CN, JP) and US significant traffic `anomalies' through San Jose western europe - western Europe eastern asia - eastern asia