analysis software flows based basic traffic characterization AS matrices country matrices traffic import and export routing/address space coverage non-flows based interarrival time behavior protocol-relevant (dups, packet sizes) security/vulnerability protection