lots of internet starting at ~3 a.m. cst
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp. -- -Aaron
Do you have *any* sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything. Kind regards, Peter On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data... Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483 -Aaron On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
Playstation 5 system updates kicked off around then: https://www.reddit.com/r/PS5/comments/1ea1dii/ps5_firmware_update_released_f... On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have *any* sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- Paul Bradford Lead Network Engineer AS11776 C: 814-203-0699 E: pbradford@breezeline.com Breezeline.com 2875 Rt 764 Suite 2, Duncansville, PA 16635
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network. Kind regards, Peter On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have *any* sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
thanks Peter, et al. Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur? I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand -Aaron On 7/23/2024 9:02 AM, Peter Potvin wrote:
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- -Aaron
What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit. Kinda defeats the purpose of a PNI ... anyone else seeing this? - bryan On 7/23/24 16:05, Aaron Gould wrote:
thanks Peter, et al. Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur? I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand
-Aaron
On 7/23/2024 9:02 AM, Peter Potvin wrote:
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- -Aaron
There was an issue in a Fortnite update yesterday for Xbox causing the update to be over 80gb (usually 20gb or less) on that platform. Xbox will also auto push out updates to games very soon after their release, even with the console being off. Brandon Ambrose On Jul 23, 2024 at 10:17 AM -0400, Bryan Holloway <bryan@shout.net>, wrote:
What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit.
Kinda defeats the purpose of a PNI ... anyone else seeing this?
- bryan
On 7/23/24 16:05, Aaron Gould wrote:
thanks Peter, et al. Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur? I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand
-Aaron
On 7/23/2024 9:02 AM, Peter Potvin wrote:
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- -Aaron
Xbox will also auto push out updates to games very soon after their release, even with the console being off
Auto updates with the console "off" has been a thing since the launch of the Xbox One (nov 2013) and the relatable Playstation. Newer Xbox/Playstation continue to have this. I don't think the Switch does, but it doesn't have as much storage capacity/updates. On Tue, Jul 23, 2024 at 11:01 AM Brandon Ambrose <bpambrose97@gmail.com> wrote:
There was an issue in a Fortnite update yesterday for Xbox causing the update to be over 80gb (usually 20gb or less) on that platform. Xbox will also auto push out updates to games very soon after their release, even with the console being off.
Brandon Ambrose On Jul 23, 2024 at 10:17 AM -0400, Bryan Holloway <bryan@shout.net>, wrote:
What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit.
Kinda defeats the purpose of a PNI ... anyone else seeing this?
- bryan
On 7/23/24 16:05, Aaron Gould wrote:
thanks Peter, et al. Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur? I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand
-Aaron
On 7/23/2024 9:02 AM, Peter Potvin wrote:
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- -Aaron
Not seeing the same here in Houston, the influx of 54113 traffic was coming in on PNI. Most of my traffic from the other “big guy” is coming in on transit instead of PNI, but I’ve been told that is due to some issues with their POP in the market.
On Jul 23, 2024, at 9:15 AM, Bryan Holloway <bryan@shout.net> wrote:
What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit.
Kinda defeats the purpose of a PNI ... anyone else seeing this?
- bryan
On 7/23/24 16:05, Aaron Gould wrote:
thanks Peter, et al. Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur? I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand -Aaron On 7/23/2024 9:02 AM, Peter Potvin wrote:
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- -Aaron
On 7/23/24 16:15, Bryan Holloway wrote:
What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit.
Kinda defeats the purpose of a PNI ... anyone else seeing this?
This issue is fairly common because more network is deployed in centralized locations that most people can access (like a large city data centre, e.t.c.), as well as for on-net caches. This is what leads to exchange point and PNI de-preference switching over to what an eyeball network may consider "transit". For the CDN and content folk, exchange point peering (whether PNI or via the exchange point fabric) is often under-spec'd by consequence, not by choice. So when clusters or the network feeding them suffers, they tend to be the first ones to be de-preferred for serving eyeballs. It happens a lot more often than you may realize, actually, and is not unique to any one CDN or content network. Mark.
You're right on and most of us don't monitor for shifts between direct peering and transit very well. we monitor for bw threshold. Paul Bradford Lead Network Engineer AS11776 C: 814-203-0699 E: pbradford@breezeline.com Breezeline.com 2875 Rt 764 Suite 2, Duncansville, PA 16635 On Tue, Jul 23, 2024 at 11:23 AM Mark Tinka <mark@tinka.africa> wrote:
On 7/23/24 16:15, Bryan Holloway wrote:
What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit.
Kinda defeats the purpose of a PNI ... anyone else seeing this?
This issue is fairly common because more network is deployed in centralized locations that most people can access (like a large city data centre, e.t.c.), as well as for on-net caches. This is what leads to exchange point and PNI de-preference switching over to what an eyeball network may consider "transit".
For the CDN and content folk, exchange point peering (whether PNI or via the exchange point fabric) is often under-spec'd by consequence, not by choice. So when clusters or the network feeding them suffers, they tend to be the first ones to be de-preferred for serving eyeballs. It happens a lot more often than you may realize, actually, and is not unique to any one CDN or content network.
Mark.
No, because there's no set schedule for these things. Some publishers / consoles get content/patches up in advance to allow user to pre-load. This can smooth out the bandwidth hits, but only if the users enable the pre-load feature. Many don't. Other publishers just enable the updates at once for everybody, and you see a big spike when they do. The time of day is also not always the same either. On Tue, Jul 23, 2024 at 10:09 AM Aaron Gould <aaron1@gvtc.com> wrote:
thanks Peter, et al. Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur? I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand
-Aaron
On 7/23/2024 9:02 AM, Peter Potvin wrote:
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have *any* sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- -Aaron
understood. today's ~3:00 a.m traffic increase, is similar to what I saw 1/23/2024... nice of them to at least start it during lowest use time of the day. https://mailman.nanog.org/pipermail/nanog/2024-January/224671.html -Aaron On 7/23/2024 12:33 PM, Tom Beecher wrote:
No, because there's no set schedule for these things.
Some publishers / consoles get content/patches up in advance to allow user to pre-load. This can smooth out the bandwidth hits, but only if the users enable the pre-load feature. Many don't. Other publishers just enable the updates at once for everybody, and you see a big spike when they do.
The time of day is also not always the same either.
On Tue, Jul 23, 2024 at 10:09 AM Aaron Gould <aaron1@gvtc.com> wrote:
thanks Peter, et al. Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur? I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand
-Aaron
On 7/23/2024 9:02 AM, Peter Potvin wrote:
Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
-- -Aaron
-- -Aaron
On Tue, 23 Jul 2024 13:33:45 -0400 Tom Beecher <beecher@beecher.cc> wrote:
No, because there's no set schedule for these things.
Maybe not for security updates and patches, but many new or major game release schedules are known well known in advance. Perhaps this is of some help: <https://www.ign.com/articles/video-game-release-dates-ps4-ps5-xbox-one-series-x-nintendo-switch> John
I see a mix of Akamai, Amazon, Apple (iOS/macOS updates?), Edgio, Fastly for direct peers. I haven't dug into transit but I see spikes on Arelion and Cogent. Quick search is showing me multiple possibilities: Fallout 76 update, PS5 firmware update, possibly Fortnite update. On Tue, Jul 23, 2024 at 10:00 AM Aaron Gould <aaron1@gvtc.com> wrote:
Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a response that it might be related to F1 Manager 2024 for video game consoles released today
i grabbed my netflow data for the last few hours for any source ip that has sent more than 5 GB of data...
Top 100 Src IP Addr ordered by bytes: Date first seen Duration Proto Src IP Addr Flows(%) Packets(%) Bytes(%) pps bps bpp 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have *any* sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything.
Kind regards, Peter
On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aaron1@gvtc.com> wrote:
Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now? Seems to be spiky tcp.
-- -Aaron
-- -Aaron
participants (12)
-
Aaron Gould -
Brandon Ambrose -
Bryan Holloway -
Eric Dugas -
Jason Canady -
John Kristoff -
Josh Luthman -
Mark Tinka -
Paul Bradford -
Peter Potvin -
Tim Burke -
Tom Beecher