
We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else? -- Jay Hennigan - CCIE #7880 - Network Engineering - jay@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV

Yes, pretty well everyone else. :-) On Tue, Jan 20, 2009 at 09:20:40AM -0800, Jay Hennigan wrote:
We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else?
-- Jay Hennigan - CCIE #7880 - Network Engineering - jay@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV
--- Wayne Bouchard web@typo.org Network Dude http://www.typo.org/~web/

On Jan 20, 2009, at 12:20 PM, Jay Hennigan wrote:
We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else?
We are seeing about 150% increase in traffic as well. -Patrick -- Patrick Muldoon Network/Software Engineer INOC (http://www.inoc.net) PGPKEY (http://www.inoc.net/~doon) Key ID: 0x370D752C I'm sorry a pentium won't do, you need an SGI to connect with us.

Yep, most seems to be port 8247. Which seems to be CNN streaming service. And yay for the p2p options now in flash... nothing like that to make it look like a comp'd system/attack. --Harry On Tue, 2009-01-20 at 12:24 -0500, Patrick Muldoon wrote:
On Jan 20, 2009, at 12:20 PM, Jay Hennigan wrote:
We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else?
We are seeing about 150% increase in traffic as well.
-Patrick
-- Patrick Muldoon Network/Software Engineer INOC (http://www.inoc.net) PGPKEY (http://www.inoc.net/~doon) Key ID: 0x370D752C
I'm sorry a pentium won't do, you need an SGI to connect with us.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We're seeing more TCP1935 than UDP8247. http://ct-mail.cites.uiuc.edu/~hardenrm/graphs/Peakflow-1.png /Ryan Harry Hoffman wrote:
Yep, most seems to be port 8247. Which seems to be CNN streaming service.
And yay for the p2p options now in flash... nothing like that to make it look like a comp'd system/attack.
--Harry
On Tue, 2009-01-20 at 12:24 -0500, Patrick Muldoon wrote:
On Jan 20, 2009, at 12:20 PM, Jay Hennigan wrote:
We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else?
We are seeing about 150% increase in traffic as well.
-Patrick
-- Patrick Muldoon Network/Software Engineer INOC (http://www.inoc.net) PGPKEY (http://www.inoc.net/~doon) Key ID: 0x370D752C
I'm sorry a pentium won't do, you need an SGI to connect with us.
- -- Ryan M. Harden, BS, KC9IHX Office: 217-265-5192 CITES - Network Engineering Cell: 630-363-0365 2130 Digital Computer Lab Fax: 217-244-7089 1304 W. Springfield email: hardenrm@illinois.edu Urbana, IL 61801 University of Illinois at Urbana/Champaign University of Illinois - ICCN -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkl2D9IACgkQtuPckBBbXbrcdwCgoI8sF0fNPK3J983bgRL7h9OI Cy0An3WuZB9sd5ncIrKSeqGOKy+PiOnO =apAL -----END PGP SIGNATURE-----

On Tue, 20 Jan 2009, Jay Hennigan wrote: :We're a regional ISP, about 80% SMB 20% residential. We're seeing :almost double our normal downstream traffic right now. Anyone else? We're seeing traffic levels nearly 2x normal. On 9/11/01, we were probably only about 50% higher than the norm. Of course, lots has changed, so that's probably not a fair comparison.

On Tue, Jan 20, 2009 at 12:26 PM, Brian Wallingford <brian@meganet.net> wrote:
On Tue, 20 Jan 2009, Jay Hennigan wrote:
:We're a regional ISP, about 80% SMB 20% residential. We're seeing :almost double our normal downstream traffic right now. Anyone else?
We're seeing traffic levels nearly 2x normal. On 9/11/01, we were probably only about 50% higher than the norm. Of course, lots has changed, so that's probably not a fair comparison.
As an aside... thanks to BBC for streaming this, I couldn't find another source that wasn't overloaded/jerky/ugly :( Thanks Brandon. -Chris

On Tue, Jan 20, 2009 at 12:50 PM, Ren Provo <ren.provo@gmail.com> wrote:
BitGravity did a great job.
Nearly every major CDN or web host was involved with the inauguration in some manner, with no reported issues to speak of. Some "facilities-based" providers even placed infrastructure with their competitors to be extra certain they could handle the traffic spike. With so many involved, and in the interests of full disclosure, do you or Comcast have any fiscal interest in BitGravity's streaming of this event? ;) Drive Slow Paul Wall

On Tue, Jan 20, 2009 at 12:38:11PM -0500, Christopher Morrow wrote:
On Tue, Jan 20, 2009 at 12:26 PM, Brian Wallingford <brian@meganet.net> wrote:
On Tue, 20 Jan 2009, Jay Hennigan wrote:
:We're a regional ISP, about 80% SMB 20% residential. We're seeing :almost double our normal downstream traffic right now. Anyone else?
We're seeing traffic levels nearly 2x normal. On 9/11/01, we were probably only about 50% higher than the norm. Of course, lots has changed, so that's probably not a fair comparison.
As an aside... thanks to BBC for streaming this, I couldn't find another source that wasn't overloaded/jerky/ugly :(
The Beeb's HD multicast feed is about 23Mbit/s to the host, and we received it at quite decent (subjective) quality here on a JANET-connected university site. The feed runs continuously (as far as any 'as-is' test stream does :) and this morning is pretty flawless. The interesting aspect of the HD stream was seeing how various systems coped with the CPU load. It was good to have some HD content available that encouraged people to install vlc, find out a little about multicast, and system issues in receiving it. Thanks again Beeb :) -- Tim

We also enjoyed a large multicast stream -- we selected the one provided by Northwestern University's retransmission of C-SPAN's coverage. We consumed the stream via KanREN's link to The Great Plains Network (our Internet2 connector). If anyone is on the list from Northwestern University: Thanks for your work... if nothing else, it helped a bunch of dorks in Kansas watch the events without consuming precious I1 capacity. :D -- Brad Fleming Network Engineer Kansas Research and Education Network Office: 785-856-9800 x.222 Moblie: 785-865-7231 NOC: 866-984-3662 On Jan 21, 2009, at 5:29 AM, Tim Chown wrote:
On Tue, Jan 20, 2009 at 12:38:11PM -0500, Christopher Morrow wrote:
On Tue, Jan 20, 2009 at 12:26 PM, Brian Wallingford <brian@meganet.net
wrote: On Tue, 20 Jan 2009, Jay Hennigan wrote:
:We're a regional ISP, about 80% SMB 20% residential. We're seeing :almost double our normal downstream traffic right now. Anyone else?
We're seeing traffic levels nearly 2x normal. On 9/11/01, we were probably only about 50% higher than the norm. Of course, lots has changed, so that's probably not a fair comparison.
As an aside... thanks to BBC for streaming this, I couldn't find another source that wasn't overloaded/jerky/ugly :(
The Beeb's HD multicast feed is about 23Mbit/s to the host, and we received it at quite decent (subjective) quality here on a JANET-connected university site. The feed runs continuously (as far as any 'as-is' test stream does :) and this morning is pretty flawless.
The interesting aspect of the HD stream was seeing how various systems coped with the CPU load. It was good to have some HD content available that encouraged people to install vlc, find out a little about multicast, and system issues in receiving it.
Thanks again Beeb :)
-- Tim

-----Original Message----- From: Jay Hennigan [mailto:jay@west.net] Sent: Tuesday, January 20, 2009 12:21 PM To: nanog@nanog.org Subject: Inauguration streaming traffic
We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else?
-- Jay Hennigan - CCIE #7880 - Network Engineering - jay@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV
Peering sessions to Limelight tripled in downstream today. No problems, just a lot of traffic. Total aggregate into our network nearly doubled, but we service a lot of SMB and government agencies in the DC area, most of which had today off or telecommuted. -evt

We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone
else?
-- Jay Hennigan - CCIE #7880 - Network Engineering - jay@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV
Peering sessions to Limelight tripled in downstream today. No problems, just a lot of traffic. Total aggregate into our network nearly doubled, but we service a lot of SMB and government agencies in the DC area, most of which had today off or telecommuted.
-evt
Port 1935 to LimeLight is what we saw as well. All is back to normal at this point.

Jay Hennigan wrote:
We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else?
Yes, tres beaucoups. Mostly udp/8247 for the streaming (CNN). But oddly enough, for a given client, more outbound traffic than inbound. Streaming gone peer-to-peer? Jeff

On Tue, Jan 20, 2009 at 4:23 PM, Jeff Kell <jeff-kell@utc.edu> wrote:
Mostly udp/8247 for the streaming (CNN). But oddly enough, for a given client, more outbound traffic than inbound. Streaming gone peer-to-peer?
Jeff
CNN is using Octoshape's P2P plug-in with Flash. Marcello Azambuja

During the inauguration our traffic was higher than normal, but levels only reached our average daily peak. More specifically, we climbed to our average daily peak earlier than normal, and it stayed at a sustained rate, but it didn't break any records here. Frank -----Original Message----- From: Jay Hennigan [mailto:jay@west.net] Sent: Tuesday, January 20, 2009 11:21 AM To: nanog@nanog.org Subject: Inauguration streaming traffic We're a regional ISP, about 80% SMB 20% residential. We're seeing almost double our normal downstream traffic right now. Anyone else? -- Jay Hennigan - CCIE #7880 - Network Engineering - jay@impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV

Interesting read on yesterday's streaming. My experiences seem to mirror a lot of what is written here: http://www.techcrunch.com/2009/01/21/the-day-live-web-video-streaming-failed... -Jim P.

Is there a general study done on the overall impact of inauguration streaming traffic ? any summary on what is the overall gain of bandwidth, etc.

Arbor had a good writeup on the traffic that they saw. http://asert.arbornetworks.com/2009/01/the-great-obama-traffic-flood/ Regards, James Pleger On Jan 21, 2009, at 7:14 PM, Ong Beng Hui wrote:
Is there a general study done on the overall impact of inauguration streaming traffic ?
any summary on what is the overall gain of bandwidth, etc.
participants (21)
-
Brad Fleming
-
Brian Wallingford
-
Christopher Morrow
-
David E. Smith
-
Elijah Savage
-
Eric Van Tol
-
Frank Bulk
-
Harry Hoffman
-
James Pleger
-
Jay Hennigan
-
Jeff Kell
-
Jim Popovitch
-
Marcello Azambuja
-
Mike Tancsa
-
Ong Beng Hui
-
Patrick Muldoon
-
Paul Wall
-
Ren Provo
-
Ryan Harden
-
Tim Chown
-
Wayne E. Bouchard