Avg. Packet Size - Again?

Wed Jul 16 20:17:31 UTC 2008

This is about what I would expect but as others haev noted does not
include jumbos.

This says that the majority of packets are session control and
open/close sequences on the one side and big, fat, WRED eligible data
packets on the other side.

This is consistant with the trends of youtube, "high resolution" video
streams, mp3 type traffic, and web pages that just can't seem to
understand that a 150k jpeg looks just as good on an index as a 2 meg
jpeg.

I don't think these figures are likely to change signifcantly in the
near future until we start seeing jumbo frames available from user to
server, not simply somewhere inbetween.

It might be interesting to see what of the other sizes are the final
packet in a data transfer before close vs other types of data.

-Wayne

On Tue, Jul 15, 2008 at 05:10:27PM -0700, Darryl Dunkin wrote:
> This is all from netflow. The results are from two different routers.
> 
> IP packet size distribution (43046M total packets):
>    1-32   64   96  128  160  192  224  256  288  320  352  384  416  448
> 480
>    .000 .382 .077 .043 .022 .012 .011 .006 .007 .004 .004 .005 .003 .003
> .003
> 
>     512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
>    .005 .002 .007 .021 .375 .000 .000 .000 .000 .000 .000
> 
> IP packet size distribution (54192M total packets):
>    1-32   64   96  128  160  192  224  256  288  320  352  384  416  448
> 480
>    .001 .418 .052 .034 .017 .008 .045 .006 .010 .004 .003 .005 .003 .004
> .005
> 
>     512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
>    .013 .003 .011 .036 .311 .000 .000 .000 .000 .000 .000
> 
> -----Original Message-----
> From: Sean Hafeez [mailto:sah.list at gmail.com] 
> Sent: Tuesday, July 15, 2008 16:45
> To: nanog
> Subject: Avg. Packet Size - Again?
> 
> Most of the data and studies I have found on this topic are a bit out  
> of date.
> 
> I would be interested in find out what the average packet size people  
> are seeing on their backbones is at this point and time? Also for  
> those in the DC space what is average packet size you are seeing for  
> web farm traffic (outbound)? Yes I know there are 1000's of answers  
> and different possibilities in setups so please no, "this is a dumb  
> question". I am well aware of all the variables involved in this. I am  
> just looking for some data points that come from a wide degree of  
> sources.
> 
> Is this data even something that you track and if so why?
> 
> Thanks!
> Sean
> 
> 
> 

---
Wayne Bouchard
web at typo.org
Network Dude
http://www.typo.org/~web/