All things related to multicast

[Zenon Mousmoulas <>]

Earlier today, certainly between 12:00-12:30 EEST (09:00-09:30 UTC), a 
traffic spike was noticed here on the SAP ipv4 multicast group, just 
like the good old times ;)

What follows is a partial view from GRNET's border router, showing three 
sources in University Twente in the Netherlands sending an aggregate of 
52 Mbps on average during this time (but probably peaking much higher 
during shorter spikes).

Top-talkers Src IP Addr ordered by packets:
2012-09-18 11:37:02.110  3317.910 UDP      130.89.191.173       16( 
0.0)  249.8 M( 6.9)    6.2 G( 0.3)    75299   14.8 M    24
2012-09-18 11:54:32.980  2390.780 UDP      130.89.191.172       12( 
0.0)  203.7 M( 5.6)   12.4 G( 0.5)    85202   41.6 M    61
2012-09-18 11:54:04.860  2342.120 UDP      130.89.191.174       11( 
0.0)   96.4 M( 2.6)    5.1 G( 0.2)    41155   17.5 M    53

Top-talkers Dst IP Addr ordered by packets:
Date first seen          Duration Proto       Dst IP Addr Flows(%)     
Packets(%)       Bytes(%)         pps      bps   bpp
2012-09-18 11:33:50.660  3633.100 UDP       224.2.127.254      194( 
0.0)  550.0 M(15.1)   23.7 G( 1.0)   151376   52.2 M    43

Top-talkers Dst Port ordered by packets:
Date first seen Duration Proto Dst Port Flows(%) Packets(%) Bytes(%) pps 
bps bpp
2012-09-18 11:33:50.660 3633.100 UDP 9875 195( 0.0) 550.0 M(15.1) 23.7 
G( 1.0) 151376 52.2 M 43

I wonder if anyone else saw this -- it would just be good to know (for 
our Ops at least).

Kind regards,
Z.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature