I am looking for some form of benchmark or model that will describe
the content (not header parts, ok I need the header parts too, but I
think I can find benchmarks for them) of typical ip traffic. I want
to model the performance of looking at the packet data, imagine
greping all the packets (header and content) that flow through a
specific router. I can get data from tcpdump, but I have no idea if
the network I am collecting the data on is representative of "typical"
data. I'd also like to know typical extremes also. The naive model
is to assume that the data is uniformly distributed over some
character set. However, that model may not be realistic enough and
lead one to false conclusions. I am hoping someone has investigated
a similar problem before and has some relevant data/statistics/whatever.

Thanks,
-Chris

i'd suggest ntop because it reports statistics based on addresses
accessed and port, instead of just bandwidth used in general, but you
probably already know this and it's probably not what you're looking
for since you're asking here.

--K-sPecial

root [<at>] xzziroz [<dot>] net
http://awarenetwork.org
http://xzziroz.net
irc://irc.xzziroz.net

Actually, I wasn't aware of ntop, so thank you.