Character

Each capture

• Has multiple ip:port <-> ip:port sets with in/out/total frames/bytes
• Represents one timestamped block
• Indicates bytes transferred in capture period
• Need to divide by period to get average
• Will represent average transfer at point-in-time

Map-Reduce