Netflix traffic patterns are definitely unlike almost every other large network, but I do wonder how much they're missing by sampling TCP only. TFA mentions tr

Netflix traffic patterns are definitely unlike almost every other large network, but I do wonder how much they're missing by sampling TCP only. TFA mentions transport of (aggregated) flow data back to base over a choice of protocols, including UDP, which makes sense -- you don't want your monitoring data affecting your business data when you get close to redlining. (You'd expect you'd have enough forensic data leading up to that point to make some informed decisions.) QUIC runs over UDP, and I can imagine that growing rapidly for most corporate & public-facing networks.