Most up to date packet size distribution info

Robert Boyle robert at tellurian.com
Thu Dec 18 02:38:45 UTC 2003


At 04:08 PM 12/17/2003, Jared wrote:
>         Close to what we see at one location:
>
>Router#sh ip ca flow
>IP packet size distribution (17137M total packets):
>    1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
>    .004 .621 .068 .029 .013 .007 .005 .006 .003 .005 .006 .006 .006 .004 .004
>
>     512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
>    .004 .003 .016 .018 .159 .000 .000 .000 .000 .000 .000

Here is what we see:

core1-jcnj>sh ip ca fl
IP packet size distribution (20372M total packets):
    1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
    .001 .411 .251 .018 .015 .006 .027 .004 .003 .003 .003 .004 .003 .002 .003

     512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
    .003 .002 .139 .012 .082 .000 .000 .000 .000 .000 .000

and

core1-nwtnj>sh ip ca fl
IP packet size distribution (22181M total packets):
    1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
    .001 .429 .158 .023 .021 .010 .011 .006 .005 .004 .004 .006 .004 .003 .003

     512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
    .003 .002 .054 .025 .219 .000 .000 .000 .000 .000 .000


I see an interesting variation in 1536 byte packets on our network anyway. 
core1-nwtnj is primarily a colo router and core1-jcnj is a backbone router 
connected to edge routers with lots of dialup, dsl, t1 and t3 customers. Of 
course traffic can pass through both routers en route, but it appears that 
most 1536 byte traffic does not.

-Robert


Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com | 888-TELLURIAN | 973-300-9211
"Good will, like a good name, is got by many actions, and lost by one." - 
Francis Jeffrey




More information about the NANOG mailing list