workload myth: mice vs elephants


myth:
10% of flows cause 90% of traffic on a link (or pick x%,y%)
data:  
sometimes true for bytes 
especially if the link has KaZaa-type stuff
never true for packets 
in any traces we've studied
actual proportion of traffic (bytes or packets) covered by 90% of 
               streams can change rapidly
following changes in the applications/protocol mix
obviously depends on site as well
but also per site changes over course of day, week, month



need to measure proportions before making
assumptions need longer traces!