All things related to multicast

["Scott Robohn" <>]

I was thinking of July 17th and a spike back in Feb/March - I'll track
that date down.

Thanks for digging into it, whenever you get a chance.

Scott

> -----Original Message-----
> From: Marshall Eubanks 
> [mailto:]
>  
> Sent: Wednesday, September 03, 2003 12:28 AM
> To: Scott Robohn; Marshall Eubanks; 
> ;
>  Matthew Davy
> Cc: Bill Nickless; David Farmer; 
> 
> Subject: Re: BCP question
> 
> 
> On Tue, 2 Sep 2003 21:12:18 -0700
>  "Scott Robohn" 
> <>
>  wrote:
> > Marshall/all,
> > 
> > I assume this is under "normal" conditions.  Have you (or 
> anyone else)
> 
> It is for right now, midnight EDT, however normal that is. 
> This has been added
> to the status runs and so will be available in the future
> 
> > been able to digest the data from the worms earlier this 
> year and see
> > what the spread looks like under those conditions?  I've 
> been curious as
> > to what proportion of the worm traffic was destined for the 
> 224.0/16,
> > 224.1/16, 224.2/16, and 233/8 blocks.
> > 
> 
> I have to archive these data pretty rigorously or my disk 
> will fill up.
> The best I have on line is August 26 - a mini-worm day
> 
>  First Octet Histogram
>  
>  Octet 224 had    747 entries or  38.51 % 
>  Octet 225 had     25 entries or   1.29 % 
>  Octet 226 had     12 entries or   0.62 % 
>  Octet 227 had     24 entries or   1.24 % 
>  Octet 228 had    205 entries or  10.57 % 
>  Octet 229 had     21 entries or   1.08 % 
>  Octet 230 had      9 entries or   0.46 % 
>  Octet 231 had     12 entries or   0.62 % 
>  Octet 233 had    488 entries or  25.15 % 
>  Octet 234 had     19 entries or   0.98 % 
>  Octet 235 had      7 entries or   0.36 % 
>  Octet 236 had    335 entries or  17.27 % 
>  Octet 237 had     15 entries or   0.77 % 
>  Octet 238 had     21 entries or   1.08 % 
> 
> Tell me what day you really want to see and I can pull it off 
> the tar files and
> get the same info. But not tonight, as I have to get up early.
> 
> Regards
> Marshall
> 
> > Thanks,
> > Scott
> > 
> > > -----Original Message-----
> > > From: 
> > > 
> > >  
> > > [mailto:]
> > >  On Behalf Of 
> > > Marshall Eubanks
> > > Sent: Wednesday, September 03, 2003 12:01 AM
> > > To: 
> > > ;
> > >  Matthew Davy
> > > Cc: Bill Nickless; David Farmer; 
> > > 
> > > Subject: Re: BCP question
> > > 
> > > 
> > > On Tue, 02 Sep 2003 22:25:12 -0500
> > >  "David Farmer" 
> > > <>
> > >  wrote:
> > > > On 2 Sep 2003 Matthew Davy wrote:
> > > > 
> > > > > So what about applications that are hard-coded to use 
> > > this address space ?
> > > > > (*After* we flog the developers for doing something this 
> > > bone-headed ;-)
> > > > 
> > > > I'd suggest making them answer RIAA complaints for a couple 
> > > months. ;-)
> > > > 
> > > > > Should we block the addresses and then poke holes for the 
> > > ones that need it
> > > > ?
> > > > 
> > > > Don't know, that would seem logical unless their is a big 
> > > number of wholes.
> > > > That 
> > > > would be the killer for this idea. 
> > > > 
> > > > It probably wouldn't be a good idea to do this on 
> Abilene, any other
> > > > backbone, or 
> > > > even at GigaPOPs, but at a campus border I think it 
> might be very
> > > > appropriate.
> > > > 
> > > > > Does anyone have a feel for how common this is ?   
> > > >  
> > > > I'll spin this back to to you MSDP mister, how much MSDP 
> > > state do we see for 
> > > > these blocks over the next few weeks.  
> > > 
> > > Here is the current status 
> > > 
> > > First Octet Histogram
> > >  
> > >  Octet 224 had    529 entries or  39.21 % 
> > >  Octet 225 had     24 entries or   1.78 % 
> > >  Octet 226 had      7 entries or   0.52 % 
> > >  Octet 227 had     19 entries or   1.41 % 
> > >  Octet 228 had     72 entries or   5.34 % 
> > >  Octet 229 had     30 entries or   2.22 % 
> > >  Octet 230 had      9 entries or   0.67 % 
> > >  Octet 231 had     11 entries or   0.82 % 
> > >  Octet 233 had    499 entries or  36.99 % 
> > >  Octet 234 had     23 entries or   1.70 % 
> > >  Octet 235 had     14 entries or   1.04 % 
> > >  Octet 236 had     81 entries or   6.00 % 
> > >  Octet 237 had     16 entries or   1.19 % 
> > >  Octet 238 had     15 entries or   1.11 % 
> > >  
> > > So the reserved space is being used, at the few % level.
> > > 
> > > Marshall
> > > 
> > > 
> > > Marshall
> > > 
> > > 
> > > 
> > > > 
> > > > There shouldn't be anyone doing SSM on these blocks 
> should their?
> > > > 
> > > > Therefore, we should see MSDP state for any traffic, right?
> > > > 
> > > > Another way would be to look at Netflow, I think. 
> > > > 
> > > > > - Matt
> > > > 
> > > > =================================================
> > > > David Farmer                            Email:  
> > > > 
> > > > Office of Information Technology
> > > > University of Minnesota                 Phone:  612-626-0815
> > > > 2218 University Ave SE                  Cell:   612-812-9952
> > > > Minneapolis, MN 55414-3029              FAX:    612-624-4035
> > > > =================================================
> > > > 
> > > 
> > > 
> 
>