From owner-Big-Internet@munnari.OZ.AU Mon Feb 5 06:54:37 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id TA31071; Mon, 5 Feb 1996 06:54:37 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id GAA13588; Mon, 5 Feb 1996 06:54:12 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id GAA13571; Mon, 5 Feb 1996 06:39:36 +1100 Received: from [205.164.206.1] by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id TA04957; Mon, 5 Feb 1996 06:39:34 +1100 (from jemmett@goodnet.com) Received: from ntserver (good22.goodnet.com [205.164.206.23]) by goodguy.goodnet.com (8.6.10/8.6.9) with SMTP id MAA22822; Sun, 4 Feb 1996 12:30:16 -0700 Message-Id: <199602041930.MAA22822@goodguy.goodnet.com> X-Sender: jemmett@goodnet.com X-Mailer: Windows Eudora Version 2.1.1 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Sun, 04 Feb 1996 12:36:52 -0700 To: com-priv@psi.com, portmaster-users@livingston.com, cidrd@iepg.org, tucsonlink@rtd.com, tucson-nap@rtd.com, mae-la@isi.edu, nix@structured.net, agisusers@interstice.com, ietf@ietf.reston.va.us, bind-users@vix.com, bsdi-users@bsdi.com, big-internet@munnari.OZ.AU, rs-talk@internic.net, rs-info@internic.net, peir@isi.edu, cisco@spot.colorado.edu From: David Jemmett Subject: Please put me on lists Precedence: bulk Thanks for the time Thanks _______________________ GoodNet, LLC David Jemmett 602-303-9500 ext 224 602-303-0550 Fax _______________________ From owner-Big-Internet@munnari.OZ.AU Thu Feb 8 23:56:35 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id MA24605; Thu, 8 Feb 1996 23:56:35 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id XAA18242; Thu, 8 Feb 1996 23:55:20 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id XAA18225; Thu, 8 Feb 1996 23:49:08 +1100 Received: from nic.hq.cic.net by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id MA27251; Thu, 8 Feb 1996 23:49:06 +1100 (from dorian@CIC.Net) Received: (from dorian@localhost) by nic.hq.cic.net (8.7.3/8.6.12) id HAA09113; Thu, 8 Feb 1996 07:48:59 -0500 (EST) Date: Thu, 8 Feb 1996 07:48:57 -0500 (EST) From: Dorian Kim X-Sender: dorian@nic.hq.cic.net To: Sean Doran Cc: big-internet@munnari.OZ.AU Subject: Re: relative traffic snapshots In-Reply-To: <95Dec22.033649-0000_est.20608+15@chops.icp.net> Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Precedence: bulk For those who are interested, here's some comparison data from CICNet. I turned on flow switching on our 7513s, for much the same reasons Sean did. This is from dgc.cic.net, one of our Chicago hub routers. It has moderate amount of traffic passing through it, about 20mbps over its FDDI at peak time. Hope this helps, -dorian IP Flow Switching Cache, 16384 active flows, 0 inactive 132159644 added, 124468367 replaced, 4892577 timed out, 2782316 invalidated statistics cleared 270640 seconds ago Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec) -------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow TCP-Telnet 5222464 19.2 40 89 785.3 32.9 17.3 TCP-FTP 2087345 7.7 6 87 47.9 7.3 22.7 TCP-FTPD 1275958 4.7 95 390 449.5 21.9 23.6 TCP-WWW 83916123 310.0 9 304 2944.5 5.4 20.9 TCP-SMTP 14106833 52.1 8 173 448.9 6.4 21.6 TCP-X 94849 0.3 81 176 28.6 24.1 17.8 TCP-other 16095661 59.4 38 274 2290.8 20.9 21.5 UDP-TFTP 339 0.0 1 207 0.0 2.3 21.0 UDP-other 5059444 18.6 11 217 208.4 9.4 26.0 ICMP 4201689 15.5 2 83 46.0 5.2 26.8 IGMP 39809 0.1 30 398 4.4 48.2 29.4 IPINIP 9431 0.0 1808 254 63.0 147.1 18.6 GRE 32811 0.1 594 204 72.0 62.1 18.8 IP-other 909 0.0 3 223 0.0 1.2 31.8 Total: 132143665 488.2 15 260 7389.7 0.0 0.0 From owner-Big-Internet@munnari.OZ.AU Fri Feb 9 01:35:33 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id OA15096; Fri, 9 Feb 1996 01:35:33 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id BAA18430; Fri, 9 Feb 1996 01:35:20 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id BAA18424; Fri, 9 Feb 1996 01:29:55 +1100 Received: from nsco.network.com by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id OA01649; Fri, 9 Feb 1996 01:29:49 +1100 (from amolitor@anubis.network.com) Received: from anubis.network.com by nsco.network.com (4.1/1.34) id AA29476; Thu, 8 Feb 96 08:32:35 CST Received: from blefscu.network.com by anubis.network.com (4.1/SMI-4.1) id AA29838; Thu, 8 Feb 96 08:31:20 CST Date: Thu, 8 Feb 96 08:31:20 CST From: amolitor@anubis.network.com (Andrew Molitor) Message-Id: <9602081431.AA29838@anubis.network.com> To: big-internet@munnari.OZ.AU Subject: Re: relative traffic snapshots Precedence: bulk Could someone please interpret? 'Flows/Sec'? Is that flows set up per second? Over what averaging interval? Or perhaps it's flows seen to be active over the most recent second? 'Packets/Flow'? I have a hard time imagining that the average telnet session takes 40 packets, so perhaps it's some kind of average? Since Packets/Sec seems to equal Flows/Sec * Packets/Flow, I suppose we could deduce something or other, but it's still fairly murky to an ignorant slob like me. Again, I do appreciate seeing real numbers like this, lest I seem excessively grouchy. Andrew From owner-Big-Internet@munnari.OZ.AU Fri Feb 9 06:35:41 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id TA21028; Fri, 9 Feb 1996 06:35:41 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id GAA18713; Fri, 9 Feb 1996 06:35:24 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id GAA18707; Fri, 9 Feb 1996 06:32:28 +1100 Received: from greatdane.cisco.com by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id TA25009; Fri, 9 Feb 1996 06:32:26 +1100 (from tli@cisco.com) Received: (tli@localhost) by greatdane.cisco.com (8.6.8+c/8.6.5) id LAA22766; Thu, 8 Feb 1996 11:30:55 -0800 Date: Thu, 8 Feb 1996 11:30:55 -0800 From: Tony Li Message-Id: <199602081930.LAA22766@greatdane.cisco.com> To: amolitor@anubis.network.com (Andrew Molitor) Cc: big-internet@munnari.OZ.AU Subject: Re: relative traffic snapshots Precedence: bulk Could someone please interpret? Well, Darren's out for a bit, but sure... 'Flows/Sec'? Is that flows set up per second? Yes. Over what averaging interval? Averaged over the entire sample (i.e., since the last time the statisics were cleared). Or perhaps it's flows seen to be active over the most recent second? 'Packets/Flow'? I have a hard time imagining that the average telnet session takes 40 packets, so perhaps it's some kind of average? Yes, of course that's an average. That's total packets divided by flows. You should also note that if a flow appears idle for a long time (32s) then we assume it has died. So if you go get a cup of coffee, that would look like a new flow. Again, I do appreciate seeing real numbers like this, lest I seem excessively grouchy. Arf! Tony From owner-Big-Internet@munnari.OZ.AU Fri Feb 9 21:56:59 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id KA06268; Fri, 9 Feb 1996 21:56:59 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id VAA19481; Fri, 9 Feb 1996 21:55:29 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id VAA19464; Fri, 9 Feb 1996 21:52:06 +1100 Received: from nic.hq.cic.net by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id KA21177; Fri, 9 Feb 1996 21:52:00 +1100 (from dorian@CIC.Net) Received: (from dorian@localhost) by nic.hq.cic.net (8.7.3/8.6.12) id FAA29909; Fri, 9 Feb 1996 05:51:57 -0500 (EST) Date: Fri, 9 Feb 1996 05:51:57 -0500 (EST) From: Dorian Kim X-Sender: dorian@nic.hq.cic.net To: Sean Doran , big-internet@munnari.OZ.AU Subject: Re: relative traffic snapshots In-Reply-To: Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Precedence: bulk On Thu, 8 Feb 1996, Dorian Kim wrote: > For those who are interested, here's some comparison data from CICNet. I > turned on flow switching on our 7513s, for much the same reasons Sean > did. This is from dgc.cic.net, one of our Chicago hub routers. It has > moderate amount of traffic passing through it, about 20mbps over its FDDI > at peak time. And for the sake of comparsion, here's data from the other 7513, dgb.cic.net. IP Flow Switching Cache, 12059 active flows, 4325 inactive 39944369 added, 37686959 replaced, 1311271 timed out, 934080 invalidated statistics cleared 82750 seconds ago Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec) -------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow TCP-Telnet 1415521 17.1 51 88 884.3 39.3 19.2 TCP-FTP 575464 6.9 6 87 46.4 8.2 24.2 TCP-FTPD 388578 4.6 90 381 427.0 22.5 24.1 TCP-WWW 25740805 311.0 9 311 3025.6 5.5 22.6 TCP-SMTP 4141938 50.0 8 187 449.6 6.5 23.4 TCP-X 15112 0.1 138 205 25.2 31.4 19.2 TCP-other 4957906 59.9 44 278 2642.3 26.0 22.9 UDP-TFTP 73 0.0 1 393 0.0 1.8 21.5 UDP-other 1634987 19.7 9 208 185.1 10.0 26.7 ICMP 1039015 12.5 4 85 59.0 6.9 27.5 IGMP 12833 0.1 32 405 4.9 51.4 29.6 IPINIP 1972 0.0 2403 273 57.2 219.0 21.5 GRE 7306 0.0 325 364 28.7 64.1 21.9 IP-other 800 0.0 2 113 0.0 17.2 21.1 Total: 39932310 482.5 16 259 7835.8 0.0 0.0 -dorian ______________________________________________________________________________ Dorian Kim Email: dorian@cic.net 2901 Hubbard Drive Network Engineer Phone: (313)998-6976 Ann Arbor MI 48105 CICNet Network Systems Fax: (313)998-6105 http://www.cic.net/~dorian From owner-Big-Internet@munnari.OZ.AU Sat Feb 10 02:35:59 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id PA02877; Sat, 10 Feb 1996 02:35:59 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id CAA19778; Sat, 10 Feb 1996 02:35:30 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id CAA19772; Sat, 10 Feb 1996 02:25:57 +1100 Received: from chops.icp.net by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id PA22448; Sat, 10 Feb 1996 02:25:51 +1100 (from smd@icp.net) Received: by chops.icp.net id <20619>; Fri, 9 Feb 1996 10:25:37 -0000 From: Sean Doran To: big-internet@munnari.OZ.AU, dorian@CIC.Net, smd@chops.icp.net Subject: Re: relative traffic snapshots Message-Id: <96Feb9.102537-0000_est.20619+100@chops.icp.net> Date: Fri, 9 Feb 1996 10:25:27 -0000 Precedence: bulk | > I turned on flow switching on our 7513s, for much the same reasons Sean | > did. You should be careful about admitting you're a complete lunatic. Sean. From owner-Big-Internet@munnari.OZ.AU Sat Feb 10 06:15:45 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id TA26517; Sat, 10 Feb 1996 06:15:45 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id GAA20015; Sat, 10 Feb 1996 06:15:31 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id GAA20009; Sat, 10 Feb 1996 06:11:33 +1100 Received: from nic.hq.cic.net by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id TA28032; Sat, 10 Feb 1996 06:11:32 +1100 (from dorian@CIC.Net) Received: (from dorian@localhost) by nic.hq.cic.net (8.7.3/8.6.12) id OAA06563; Fri, 9 Feb 1996 14:10:15 -0500 (EST) Date: Fri, 9 Feb 1996 14:10:14 -0500 (EST) From: Dorian Kim X-Sender: dorian@nic.hq.cic.net To: Sean Doran Cc: big-internet@munnari.OZ.AU, smd@chops.icp.net Subject: Re: relative traffic snapshots In-Reply-To: <96Feb9.102537-0000_est.20619+100@chops.icp.net> Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Precedence: bulk On Fri, 9 Feb 1996, Sean Doran wrote: > | > I turned on flow switching on our 7513s, for much the same reasons Sean > | > did. > > You should be careful about admitting you're a complete lunatic. Nah, why keep my mouth shut and let them wonder when I can open it and remove any trace of doubt? ;) -dorian From owner-Big-Internet@munnari.OZ.AU Sun Feb 11 12:16:26 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id BA29836; Sun, 11 Feb 1996 12:16:26 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id MAA21607; Sun, 11 Feb 1996 12:15:46 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id MAA21590; Sun, 11 Feb 1996 12:08:57 +1100 Received: from nsco.network.com by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id BA14285; Sun, 11 Feb 1996 12:08:46 +1100 (from amolitor@anubis.network.com) Received: from anubis.network.com by nsco.network.com (4.1/1.34) id AA05399; Sat, 10 Feb 96 19:11:28 CST Received: from blefscu.network.com by anubis.network.com (4.1/SMI-4.1) id AA03526; Sat, 10 Feb 96 19:10:12 CST Date: Sat, 10 Feb 96 19:10:12 CST From: amolitor@anubis.network.com (Andrew Molitor) Message-Id: <9602110110.AA03526@anubis.network.com> To: big-internet@munnari.OZ.AU Subject: Re: relative traffic snapshots Precedence: bulk Every so often I go back and stare at these flow statistics, and it has occured to me (after a long time, I'm a little dim) that I don't know what a flow is, to a 7513. Is it: 1) bi-directional or uni-directional? I.E. does a bi-directional TCP stream get charged to 2 flows or 1? 2) what's the resolution of an endpoint? Since it's broken out by type, I gather than ports are involved, but is it dest port only? That is, does a WWW flow mean 'traffic from host A to/from host B that was WWW' or does it mean 'a single TCP connection from host A to host B with dest port == 80'? For something like http, this makes a pretty big difference! Also, is the non-port part a host or a routing table entry? Finally, if the answers to all the above foo are such that it makes sense to even ask, does the flow counting gear snoop TCP flags to catch setup/teardown, or does it just approximate by looking at (lhost, lport, rhost, rport, proto) 5-tuples? From owner-Big-Internet@munnari.OZ.AU Wed Feb 14 04:25:40 1996 Return-Path: Received: from murtoa.cs.mu.OZ.AU by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id RA30040; Wed, 14 Feb 1996 04:25:40 +1100 (from owner-Big-Internet@munnari.OZ.AU) Received: from mailing-list by murtoa.cs.mu.OZ.AU (8.6.9/1.0) id EAA25026; Wed, 14 Feb 1996 04:24:24 +1100 Received: from munnari.oz.au by murtoa.cs.mu.OZ.AU (8.6.9/1.0) with SMTP id EAA25004; Wed, 14 Feb 1996 04:05:19 +1100 Received: from [206.126.96.4] by munnari.oz.au with SMTP (5.83--+1.3.1+0.55) id RA29923; Wed, 14 Feb 1996 04:05:17 +1100 (from jfbb@atmnet.net) Received: from jim.atmnet.net (jim.atmnet.net [204.250.94.197]) by core.atmnet.com (8.7.1/8.6.9) with SMTP id JAA12753 for ; Tue, 13 Feb 1996 09:03:31 -0800 (PST) Received: by jim.atmnet.net with Microsoft Mail id <01BAF9F2.5504F4E0@jim.atmnet.net>; Tue, 13 Feb 1996 09:04:50 -0800 Message-Id: <01BAF9F2.5504F4E0@jim.atmnet.net> From: Jim Browning To: "'big-internet@munnari.oz.au'" Subject: Apology Date: Tue, 13 Feb 1996 09:04:49 -0800 Encoding: 7 TEXT Precedence: bulk My apology for sending an administrative request to the list. I tried to take a 'subscription shortcut' and messed up... -- Jim Browning 619/812-2860 Fax 619/812-2867