Capture grab packets from the network, timestamp, demux and classify them into ``flows'', compute metrics (1s timescale). Strong real time constraints (must keep up with device).