[65908] in North American Network Operators' Group
Re: Most up to date packet size distribution info
daemon@ATHENA.MIT.EDU (Petri Helenius)
Thu Dec 18 02:25:35 2003
Date: Thu, 18 Dec 2003 09:23:57 +0200
From: Petri Helenius <pete@he.iki.fi>
To: Hank Nussbacher <hank@att.net.il>
Cc: Jeff Kell <jeff-kell@utc.edu>, rhealey@onvoy.com, nanog@merit.edu
In-Reply-To: <Pine.A41.4.10_heb2.08.10312180714120.85806-100000@MaX.att.net.il>
Errors-To: owner-nanog-outgoing@merit.edu
Hank Nussbacher wrote:
>
>IP packet size distribution (46782M total packets):
> 1-32 64 96 128 160 192 224 256 288 320 352 384 416 448
>480
> .001 .395 .156 .032 .036 .010 .006 .004 .010 .004 .003 .003 .007 .008
>.004
>
> 512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
> .004 .003 .030 .025 .249 .000 .000 .000 .000 .000 .000
>
>
>Interesting to see such a wide spread on 64 octet pkts.
>
>
>
Infected machines send up to 300pps per machine of ICMP packets which
fall into
the 96 slot above. So in this example you probably have many of them.
Pete
