[65904] in North American Network Operators' Group
Re: Most up to date packet size distribution info
daemon@ATHENA.MIT.EDU (Robert Boyle)
Wed Dec 17 21:39:28 2003
Date: Wed, 17 Dec 2003 21:38:45 -0500
To: Jared Mauch <jared@puck.nether.net>, nanog@merit.edu
From: Robert Boyle <robert@tellurian.com>
In-Reply-To: <20031217210859.GC91931@puck.nether.net>
Errors-To: owner-nanog-outgoing@merit.edu
At 04:08 PM 12/17/2003, Jared wrote:
> Close to what we see at one location:
>
>Router#sh ip ca flow
>IP packet size distribution (17137M total packets):
> 1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
> .004 .621 .068 .029 .013 .007 .005 .006 .003 .005 .006 .006 .006 .004 .004
>
> 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
> .004 .003 .016 .018 .159 .000 .000 .000 .000 .000 .000
Here is what we see:
core1-jcnj>sh ip ca fl
IP packet size distribution (20372M total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.001 .411 .251 .018 .015 .006 .027 .004 .003 .003 .003 .004 .003 .002 .003
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.003 .002 .139 .012 .082 .000 .000 .000 .000 .000 .000
and
core1-nwtnj>sh ip ca fl
IP packet size distribution (22181M total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.001 .429 .158 .023 .021 .010 .011 .006 .005 .004 .004 .006 .004 .003 .003
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
.003 .002 .054 .025 .219 .000 .000 .000 .000 .000 .000
I see an interesting variation in 1536 byte packets on our network anyway.
core1-nwtnj is primarily a colo router and core1-jcnj is a backbone router
connected to edge routers with lots of dialup, dsl, t1 and t3 customers. Of
course traffic can pass through both routers en route, but it appears that
most 1536 byte traffic does not.
-Robert
Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com | 888-TELLURIAN | 973-300-9211
"Good will, like a good name, is got by many actions, and lost by one." -
Francis Jeffrey