This study is undertaking an analysis of the behavior of sequences of packets as specific packet sizes. The example is using an OC3mon trace from the FIX-West network interconnection point.
To investigate the subject behavior for all packet sizes the oc32plenrunlength.pl conversion program can be used. A sample output is included.
Eventually looking at all packet sizes becomes a bit unwieldy, as exemplified in the previous example, and, unless information for very specific packet sizes is sought, it may make more sense to cluster ranges of sizes into size clusters. For this example we use a class notion for thise ranges, starting at a 40 byte maximum and essentially doubling for subsequent classes:
Class Range in bytes ======= ================= 0 0-40 1 41-80 2 81-160 3 161-320 4 321-640 5 641-1500 6 1500+
The oc32plenrunlengthc.pl conversion program does such a conversion from a raw OC3mon dump, and is a sample output for this application.
A graph of this data includes histograms of the classes 0 to 5 mentioned above, plus the run length of not having any class run length. Class 6 did not appear in the trace.
oc32plenrunlengthc2.pl is a similar program, but creates a matrix output instead, which can then be used in a spreadsheet iprogram, or converted to a VRML object with the vsurf.pl converter.