All same size. Many each second. All different source IP. Same; destination IP, destination port (80), source port (1234) [![Is this a DDoS attack?][1]][1] [1]: https://i.sstatic.net/rl1GY.png