All things related to multicast

["Marshall Eubanks" <>]

On Tue, 2 Sep 2003 21:12:18 -0700
 "Scott Robohn" 
<>
 wrote:
> Marshall/all,
> 
> I assume this is under "normal" conditions.  Have you (or anyone else)

It is for right now, midnight EDT, however normal that is. This has been added
to the status runs and so will be available in the future

> been able to digest the data from the worms earlier this year and see
> what the spread looks like under those conditions?  I've been curious as
> to what proportion of the worm traffic was destined for the 224.0/16,
> 224.1/16, 224.2/16, and 233/8 blocks.
> 

I have to archive these data pretty rigorously or my disk will fill up.
The best I have on line is August 26 - a mini-worm day

 First Octet Histogram
 
 Octet 224 had    747 entries or  38.51 % 
 Octet 225 had     25 entries or   1.29 % 
 Octet 226 had     12 entries or   0.62 % 
 Octet 227 had     24 entries or   1.24 % 
 Octet 228 had    205 entries or  10.57 % 
 Octet 229 had     21 entries or   1.08 % 
 Octet 230 had      9 entries or   0.46 % 
 Octet 231 had     12 entries or   0.62 % 
 Octet 233 had    488 entries or  25.15 % 
 Octet 234 had     19 entries or   0.98 % 
 Octet 235 had      7 entries or   0.36 % 
 Octet 236 had    335 entries or  17.27 % 
 Octet 237 had     15 entries or   0.77 % 
 Octet 238 had     21 entries or   1.08 % 

Tell me what day you really want to see and I can pull it off the tar files 
and
get the same info. But not tonight, as I have to get up early.

Regards
Marshall

> Thanks,
> Scott
> 
> > -----Original Message-----
> > From: 
> > 
> >  
> > [mailto:]
> >  On Behalf Of 
> > Marshall Eubanks
> > Sent: Wednesday, September 03, 2003 12:01 AM
> > To: 
> > ;
> >  Matthew Davy
> > Cc: Bill Nickless; David Farmer; 
> > 
> > Subject: Re: BCP question
> > 
> > 
> > On Tue, 02 Sep 2003 22:25:12 -0500
> >  "David Farmer" 
> > <>
> >  wrote:
> > > On 2 Sep 2003 Matthew Davy wrote:
> > > 
> > > > So what about applications that are hard-coded to use 
> > this address space ?
> > > > (*After* we flog the developers for doing something this 
> > bone-headed ;-)
> > > 
> > > I'd suggest making them answer RIAA complaints for a couple 
> > months. ;-)
> > > 
> > > > Should we block the addresses and then poke holes for the 
> > ones that need it
> > > ?
> > > 
> > > Don't know, that would seem logical unless their is a big 
> > number of wholes.
> > > That 
> > > would be the killer for this idea. 
> > > 
> > > It probably wouldn't be a good idea to do this on Abilene, any other
> > > backbone, or 
> > > even at GigaPOPs, but at a campus border I think it might be very
> > > appropriate.
> > > 
> > > > Does anyone have a feel for how common this is ?   
> > >  
> > > I'll spin this back to to you MSDP mister, how much MSDP 
> > state do we see for 
> > > these blocks over the next few weeks.  
> > 
> > Here is the current status 
> > 
> > First Octet Histogram
> >  
> >  Octet 224 had    529 entries or  39.21 % 
> >  Octet 225 had     24 entries or   1.78 % 
> >  Octet 226 had      7 entries or   0.52 % 
> >  Octet 227 had     19 entries or   1.41 % 
> >  Octet 228 had     72 entries or   5.34 % 
> >  Octet 229 had     30 entries or   2.22 % 
> >  Octet 230 had      9 entries or   0.67 % 
> >  Octet 231 had     11 entries or   0.82 % 
> >  Octet 233 had    499 entries or  36.99 % 
> >  Octet 234 had     23 entries or   1.70 % 
> >  Octet 235 had     14 entries or   1.04 % 
> >  Octet 236 had     81 entries or   6.00 % 
> >  Octet 237 had     16 entries or   1.19 % 
> >  Octet 238 had     15 entries or   1.11 % 
> >  
> > So the reserved space is being used, at the few % level.
> > 
> > Marshall
> > 
> > 
> > Marshall
> > 
> > 
> > 
> > > 
> > > There shouldn't be anyone doing SSM on these blocks should their?
> > > 
> > > Therefore, we should see MSDP state for any traffic, right?
> > > 
> > > Another way would be to look at Netflow, I think. 
> > > 
> > > > - Matt
> > > 
> > > =================================================
> > > David Farmer                              Email:  
> > > 
> > > Office of Information Technology
> > > University of Minnesota                   Phone:  612-626-0815
> > > 2218 University Ave SE                    Cell:   612-812-9952
> > > Minneapolis, MN 55414-3029                FAX:    612-624-4035
> > > =================================================
> > > 
> > 
> >