RE: traffic analysis by protocol