Anyone know of any studies documenting this? A know that IP packets
over the Internet tend to be smaller rather than larger, but I wondered
if anyone has published something.
Bill Goldstein
Senior Internet Specialist
AT&T
wgoldstein@att.com
TEL:(412)642-7288
no publised, but from my real-world router:
nyc6>sho ip cach flo
IP packet size distribution (448264806 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .577 .079 .040 .025 .012 .008 .007 .007 .010 .006 .006 .004 .004 .003
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.002 .004 .075 .015 .106 .000 .000 .000 .000 .000 .000
57.7% are 64 bytes. Sampling of over 448 million (1/2 billion) packets. 1
day, 3 hour sample. Interesting/neat spike at 576 and 1536.
IP Flow Switching Cache, 4456448 bytes
10093 active, 55443 inactive, 20096291 added
99408180 ager polls, 0 flow alloc failures
Exporting flows to 207.99.5.189 (2055)
Exporting using source interface Loopback0
Version 5 flow records, origin-as
20093196 flows exported in 716895 udp datagrams, 0 failed
last clearing of statistics 1d03h
Anyone know of any studies documenting this? A know that IP packets
over the Internet tend to be smaller rather than larger, but I wondered
if anyone has published something.Bill Goldstein
Senior Internet Specialist
AT&T
wgoldstein@att.com
TEL:(412)642-7288
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Atheism is a non-prophet organization.
I route, therefore I am.
Alex Rubenstein, alex@nac.net, KC2BUO, ISP/C Charter Member
Father of the Network and Head Bottle-Washer
Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834
Don't choose a spineless ISP! We have more backbone! http://www.nac.net
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
You are likely to find that sort of thing here http://www.caida.org/
right now it's at
http://www.nlanr.net/NA/Learn/packetsizes.html
(pointed to from
http://www.nlanr.net/NA/tutorial.html
specifically
http://www.nlanr.net/NA/Learn/plen.970625.gif
from 1997
note difference if you look at in terms of packets vs bytes
(sorry to those who have heard this a million times;
am trying to only say it once a week whether need to or not):
more than half the *packets* are mice,
more than half the *payload* are elephants
[note that CAIDA hopes to update this whole tutorial thing
by summer (some data quite old),
willing hands/brains cooperating
so don't holler at me for archaic questions/answers,
but now is the time to provide suggestions on things you'd like
included/extended/cut, don't wait till you're disappointed]
but packet sizes aren't changing that fast anyway;
am as we speak am submitting an Inet'98 paper with mcifolk
that has stats not far off from above
i.e., packets getting a little larger,
but not enough to buy/sell any stock over
also, fwiw (have beat this URL into the ground by now,
re-sorry broken record-ness):
http://www.vbns.net/presentations/papers/MCItraffic.ps
has mucho cool, surprisingly hard to come by WAN backbone stats
by amazingly dedicated angels of MCI/NSF's vBNS project
(US tax dollars + MCI karma at yummy work...
tho warning TEST the postscript before you print it
(<<i speak for the trees!>>);
and it craves a color printer)
and as already demonstrated by Al Reuben
and many others@nanog could show you,
real world routers (well, on planet Cisco anyway,
which seems to support life)
can give you this very distribution at your whim
(k learns: it's possible that all customers
have to do is ask for stat collection louder and longer
than they ask for other stuff
and some of it gets implemented mmmm..
just like everything else in life)
k
