All things related to multicast

[Jean-François Florence <>]

Hi,
Yes he did but he is not registered  yet, we ll correct that.
Best Regards
FF

--- Begin Message ---

• From: Michael Fortier <>
• To: Jean-François Florence <>, "Niels den Otter" <>, "Julian Y. Koh" <>, , "Taylor, Scott J." <>
• Subject: Re: [Fwd: Re: SAP storm from 145.19.1.183]
• Date: Fri, 20 Jun 2008 14:34:55 +0200

Hi,
Last week, I made a sap storm.
I apologize for it.
I tested the miniSapserver 0.3.4 found here :
http://download.videolan.org/pub/videolan/miniSAPserver/
This version has some bugs.
DO NOT USE IT
Problem was in the announcement interval.

I corrected and now the intervalley of dispatch is 30 seconds (fixed).
You can find sources here : http://exp-videos.univ-paris13.fr/src/minisapserver-0.3.4b.tar.gz

I'm under Linux. Commands to install :
#./configure (--prefix=...)
# make && make install
# ./minisapserver -d -c sap.cfg

sap.cfg exemple with 2 announces :
[global]
sap_delay=55
sap_ttl=255
[program]
name=Video SD 352x264 - 35 ans P13 - IPv4
user=videolan
machine=exp-videos.univ-paris13.fr
site=http://exp-videos.univ-paris13.fr
address=224.5.43.1
port=1234
playlist_group=University Paris 13
program_ttl=255
[program]
name=Video SD 352x264 - 35 ans P13 - IPv6
user=videolan
machine=exp-videos.univ-paris13.fr
site=http://exp-videos.univ-paris13.fr
address=ff0e::2:beeb
port=1234
playlist_group=University Paris 13
program_ttl=255

I created a blog which lists all information
I shall give you the url as soon as it will be made
Regards

Michael Fortier






Jean-François Florence a écrit :

Improve you English ! Hu!Hu!Hu!

------------------------------------------------------------------------

Sujet:
Re: SAP storm from 145.19.1.183
Expéditeur:
Zenon Mousmoulas
<>
Date:
Fri, 20 Jun 2008 13:08:26 +0300
Destinataire:
"Taylor, Scott J."
<>

Destinataire:
"Taylor, Scott J."
<>
Copie à:
"Niels den Otter" <>, "Julian Y. Koh" <>, <>


Could someone explain what that bug is, and how exactly it is reproduced? Perhaps someone who has experienced it previously?

It would also be nice to get feedback from Renater and Surfnet about the recent incidents, to see if it is indeed the exact same issue being repeated all over again.

Gathering this information and publishing it somewhere (even in the archives of this list) would be a good step towards an advisory for miniSAPserver maintainers and potential users...

Z.

On 19 Ιουν 2008, at 4:11 ΜΜ, Taylor, Scott J. wrote:

We now see a nice beach webcam being advertised with miniSAP server.

Group: 233.4.79.42, (?)
Source: 145.19.1.183 (mpeg4ip.HZeeland.nl)
Rate: 127 pps/1395 kbps(1sec), 1395 kbps(last 10 secs), 869
kbps(life avg)

I guess we still have people discovering the same bug over and over in
miniSAP server?

-Scott

-----Original Message-----
From: Niels den Otter
[mailto:]
Sent: Thursday, June 19, 2008 08:10
To: Julian Y. Koh
Cc:

Subject: Re: SAP storm from 145.19.1.183

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Julian,

Julian Y. Koh wrote:

We're seeing a SAP storm this morning from 145.19.1.183 in the

Netherlands

starting around 5:30am CDT (GMT-0500). Anyone else? We were able to

block

it pretty quickly at our border, so I'm not sure if it's still going

on.

Yes this traffic came from one of our customers. Our NOC has contacted
them when we found out and they stopped the SAP application immediately.

I'll try to find out what application they were using and why this went
so wrong.


Regards,

Niels den Otter
SURFnet
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkhaTIgACgkQDxUhWEap0R7+XwCcDpqAsbRnRPgSjqJz8tvYRVsN
A1UAmwUY+f1iZGx6ALXutvjtaqUXRNgN
=qw/3
-----END PGP SIGNATURE-----

--- End Message ---