This is a revised version from that which appeared at PAM2001, fixing a pair of typos in the text about prevalence of reverse-order and in-order series. The table with the same data was correct.

Characteristics of fragmented IP traffic on Internet links

Colleen Shannon, David Moore, k claffy
Cooperative Association for Internet Data Analysis (CAIDA)
San Diego Supercomputer Center
University of California, San Diego

Fragmented IP traffic is a unique component of the overall mix of traffic on the Internet that has not been well studied. Many assertions about the nature and extent of fragmented traffic are based in folklore, rather than measurement and analysis. In this paper, we examine the behavior of measured fragment traffic and compare those results with commonly cited beliefs.

We analyze characteristics of fragmented traffic, and examine the causes of IP packet fragmentation. The effects of NFS, streaming media, networked video games, and tunneled traffic are quantified, as well as the prevalence of machines whose improper configurations were causing excessive amounts of fragmented traffic.

To understand the prevalence, causes, and effects of fragmented IP traffic, we have collected and analyzed seven multi-day traces taken from three sources. These sources include a university commodity access link, a highly aggregated commercial exchange point, and a local NAP.