traffic analysis by protocol