Network Domain

Packets, Protocols
& Data Flow

The invisible rivers of data connecting billions of devices — how packets travel across the internet, how routers make decisions, and why latency matters more than bandwidth.

7 OSI LayersExplained visually
15 min readTechnical deep-dive
UpdatedMarch 2026
At a Glance
5.4 ZB
global internet traffic per year and growing 26% annually
~400ms
average global round-trip latency across all networks
75,000+
autonomous systems (AS) exchanging BGP routing tables
60%
of all internet traffic is now video streaming

What is Network Traffic?

Network traffic is the flow of data packets across computer networks — from local area networks (LANs) in offices and homes to the global internet. Every action online generates network traffic: loading a webpage, sending an email, streaming a video, or making a video call.

Unlike physical traffic which moves in continuous streams, network traffic is packet-switched — data is broken into small discrete units (packets), each routed independently across the network and reassembled at the destination. This architecture makes the internet extraordinarily resilient: if one route fails, packets find another.

Key insight: The internet was designed to survive nuclear attack. Its packet-switched, decentralised architecture means there is no single point of failure — traffic routes around damage automatically. This design decision from the 1960s still governs how every packet travels today.

Live Packet Flow Visualizer

The visualizer below simulates how different types of network traffic behave. Switch between protocols to see how packet size, frequency, and routing patterns differ across use cases.

Packet flow simulation
Packets/sec
120
Avg packet size
1,460 B
Throughput
1.4 Mbps
Protocol
TCP

The OSI Model — 7 Layers of Network Traffic

The Open Systems Interconnection model divides network communication into seven abstraction layers. Each layer handles a specific aspect of data transmission — from the physical electrical signals in cables to the application protocols users interact with.

Understanding the OSI model is fundamental to diagnosing network problems: a packet loss issue lives at Layer 3, a TLS certificate error at Layer 6, a slow database query at Layer 7. Traffic engineers diagnose by layer.

7
Application
End-user protocols and data formats. Where network traffic becomes meaningful to applications.
HTTP · DNS · SMTP · FTP
6
Presentation
Data translation, encryption, and compression. Converts between application and network formats.
TLS · SSL · JPEG · ASCII
5
Session
Manages connections between applications — establishing, maintaining, and terminating sessions.
NetBIOS · RPC · SIP
4
Transport
End-to-end communication, reliability, flow control and error recovery between hosts.
TCP · UDP · QUIC · SCTP
3
Network
Logical addressing and packet routing across multiple networks. The core of internet traffic.
IPv4 · IPv6 · ICMP · BGP
2
Data Link
Node-to-node data transfer, MAC addressing, error detection on a single network segment.
Ethernet · WiFi · PPP
1
Physical
Raw transmission of bits over a physical medium — electrical signals, light pulses, or radio waves.
Fibre · Copper · Radio

How TCP Establishes Traffic Flow

Before any data flows between two hosts over TCP, they must complete a three-way handshake — a choreographed exchange that establishes a reliable, ordered connection. Every webpage load, file download, and API call begins with this ritual.

TCP three-way handshake — click to animate

BGP — The Internet's Traffic Router

Border Gateway Protocol (BGP) is the routing protocol that makes the internet work. It enables the 75,000+ autonomous systems (AS) — networks operated by ISPs, cloud providers, enterprises, and universities — to exchange reachability information and route traffic between them.

BGP is a path vector protocol: each AS advertises the paths it knows to reach every IP prefix, and routers select the best path based on a complex set of attributes including path length, origin, and local preference. When a major BGP misconfiguration occurs, large portions of internet traffic can be misdirected — as happened with the Facebook outage of 2021.

Autonomous system topology — live routing simulation
Each node is an autonomous system. Highlighted paths show active BGP routes. Click a node to see its routing table.

Latency vs Bandwidth

The two most commonly confused network metrics are latency and bandwidth — and confusing them leads to misdiagnosed problems and wasted investment. They measure fundamentally different things.

Bandwidth is the maximum volume of data that can flow per second — the width of the pipe. Latency is the time delay for a packet to travel from source to destination — how quickly the pipe responds. A high-bandwidth link with high latency feels slow for interactive use. A low-bandwidth link with low latency feels responsive.

Typical latency by connection type (round-trip)
5G mmWave
1–5 ms
Fibre (local)
5–15 ms
Cable broadband
15–40 ms
4G LTE
30–70 ms
Transatlantic fibre
70–90 ms
LEO satellite
20–40 ms
GEO satellite
550–650 ms

Core Network Protocols

Network traffic is governed by protocols — agreed standards that define how packets are formatted, addressed, transmitted, and received. The internet runs on a layered stack of protocols, each handling a specific aspect of communication.

ProtocolLayerPurposeTraffic type
TCPTransportReliable, ordered delivery with error recovery and flow controlConnection
UDPTransportFast, connectionless delivery — no guarantees, low overheadStreaming
QUICTransportModern replacement for TCP+TLS, used by HTTP/3 for lower latencyModern web
IPv4/IPv6NetworkLogical addressing and routing of packets across networksAll traffic
BGPNetworkInter-autonomous system routing — the internet's backbone protocolRouting
DNSApplicationTranslates domain names to IP addresses — every web request begins hereResolution
HTTP/3ApplicationLatest web protocol running over QUIC, dramatically faster than HTTP/1.1Web
TLS 1.3PresentationEncryption and authentication for secure traffic — HTTPS, SMTPS, FTPSSecure
OSPFNetworkInterior gateway protocol for routing within a single autonomous systemRouting
ICMPNetworkDiagnostic protocol — ping, traceroute, and error messages live hereDiagnostic

The Global Traffic Mix

Not all internet traffic is equal. Video streaming now dominates global bandwidth consumption, having grown from negligible in 2005 to over 60% of all internet traffic today. Understanding the composition of network traffic shapes everything from ISP infrastructure investment to CDN architecture.

Video streaming
60%
Social media
13%
Web browsing
10%
Gaming
7%
File transfer
5%
VoIP / Video calls
3%
Other
2%

Global internet traffic composition by bandwidth consumption. Source: Sandvine Global Internet Phenomena Report 2024.

Essential Glossary

Packet
A unit of data formatted for transmission across a network, containing a header (routing info) and payload (actual content). Typically 20–1,500 bytes.
RTT
Round-Trip Time — the time for a packet to travel from source to destination and back. The primary latency metric used in network diagnostics.
Jitter
Variation in packet arrival times. Tolerable for file transfers but destructive for real-time traffic like VoIP and video calls.
Autonomous System
A network or collection of networks under a single administrative domain, identified by an ASN and exchanging routing info with peers via BGP.
CDN
Content Delivery Network — a distributed system of servers that caches content close to users, reducing latency and origin server load for ~70% of web traffic.
QoS
Quality of Service — mechanisms that prioritise certain traffic types (e.g. VoIP over bulk file transfer) to guarantee performance for latency-sensitive flows.
Packet Loss
The percentage of transmitted packets that fail to reach their destination. Above 1%, TCP performance degrades severely as retransmissions consume capacity.
Peering
A reciprocal arrangement between autonomous systems to exchange traffic directly without paying a transit provider — reducing cost and latency at internet exchange points.