All things related to multicast

[Bill Fenner <>]

[MSDP mailing list: people are reporting MSDP TCP connection resets and
large amounts of MSDP traffic; quick analysis of some data collected with
a hacked up msdpdump tool showed that thousands of SA's per second are
being flooded, all with an RP address of 195.83.118.16.  My guess is that
this is being caused by a drastic failure of the MSDP Peer-RPF-Flooding
algorithm.]

By the way, I did some further analysis on 114 seconds worth of SA's
from ohio-state.  In 114 seconds, you should see at most 2 SA's from
any given RP for a given (S,G) (section 4.0 of draft-ietf-msdp-spec-01.txt).
Besides the RP I identified earlier (195.83.118.16), there were several
from which I saw more than 2 messages.

This data is a little confusing, in that it's a histogram of a histogram:
the number of times a given number of repetitions was seen from an RP.
For example,

 36   26 128.223.253.7

means that there were 36 different (S,G) entries originally advertised
by 128.223.253.7 which were seen 26 times in the 114 seconds.

Since it's obviously most important to fix the problem involving
fmbone.serveurs-nationaux.jussieu.fr, I include the rest of the data
without further comment, but this is probably something that needs
to be looked into further after the crisis is over, since it points
to relatively widescale failure of the peer-RPF-flooding algorithm.

  Bill

#times seen
    #of copies of the same (S,G) seen in 114 seconds
         RP advertising
--- ---- --------------
  3    2 128.193.10.1
 36   26 128.223.253.7
  2   22 128.223.253.7
  1   20 128.223.253.7
  1   18 128.223.253.7
  1   16 128.223.253.7
  7    1 128.32.0.89
  3    2 129.89.7.8
  3    2 130.206.206.254
130    2 130.225.245.71
  2    6 130.59.32.4
  1    2 130.59.32.4
  2    6 134.129.107.1
  1    5 134.129.107.1
  3    3 134.129.107.1
 12    6 134.55.33.2
 15    2 134.68.4.100
  4    1 134.68.4.100
108   22 138.18.100.1
 22   20 138.18.100.1
 39   18 138.18.100.1
  2   16 138.18.100.1
  1   12 138.18.100.1
  1    2 152.61.212.49
  1    2 158.165.0.2
  1    2 164.107.2.49
 92    8 171.69.10.13
  2    6 171.69.10.13
  2    4 171.69.10.13
  1    2 171.69.10.13
  1    4 192.108.195.81
  3    4 192.108.196.1
  2    4 192.108.212.254
 17    1 192.5.170.2
825    4 193.166.5.252
196    3 193.166.5.252
 63    2 193.166.5.252
 46    1 193.166.5.252
  2   14 193.174.226.201
  1    4 193.174.226.211
  6    2 193.174.226.212
  1    2 193.190.196.253
 20    2 195.113.144.77
 88 1321 195.83.118.16
111 1320 195.83.118.16
  2 1319 195.83.118.16
  2 1318 195.83.118.16
  1 1316 195.83.118.16
  1 1315 195.83.118.16
  3 1087 195.83.118.16
  7 1086 195.83.118.16
  2 1081 195.83.118.16
  1 1080 195.83.118.16
112  778 195.83.118.16
  1  546 195.83.118.16
  1  544 195.83.118.16
  6  235 195.83.118.16
  1  171 195.83.118.16
  1   66 195.83.118.16
  1    8 198.10.80.1
 50    4 198.32.163.248
  6    5 198.32.249.241
 20    2 198.85.198.161
 22   22 198.9.200.65
  3    2 202.241.2.101
  1    1 202.241.2.101
 14    7 203.181.248.207
 94    6 203.255.248.1
 17    5 203.255.248.1
 56    4 203.255.248.1
 17    3 203.255.248.1
  9    2 203.255.248.1
 30   12 204.147.128.141
  1    8 204.147.128.141
 13    6 204.147.128.141
  1    2 204.147.128.141
  1    2 207.98.0.254
  8    4 207.98.64.240
  4    4 210.200.34.254
  1    8 212.1.192.229
  1    2 212.1.192.229
  6   18 212.1.195.1