Large scientific data transfers often occur at high rates causing increased burstiness in Internet tra c. To limit the adverse e↵ects of these high-rate large-sized flows, which are referred to as ↵ flows, on delay-sensitive audio/video flows, a network management system called Alpha Flow Tra c Engineering System (AFTES) is proposed for intra-domain tra c engineering. An o✏ine approach is used in which AFTES analyzes NetFlow records collected by routers, extracts source-destination address prefixes of ↵ flows, and uses these prefixes to configure firewall filters at ingress routers of a provider's network to redirect future ↵ flows to tra c-engineered paths and isolated queues. The e↵ectiveness of this scheme was evaluated through an analysis of The UVA portion was Manuscript Click here to download Manuscript: paper.pdf Click here to view linked References 2 Y a n , T r a c y , V e e r a r a g h a v a n , J i n , L i u 7 months of NetFlow data obtained from an ESnet router. For this data set, 91% of bytes generated by ↵ flows during high-rate intervals would have been directed had AFTES been deployed. The negative aspect of using address prefixes in firewall filters, i.e., the redirection of flows to ↵-flow paths/queues, was also quantified.