Not seeing the same here in Houston, the influx of 54113 traffic was coming in on PNI. Most of my traffic from the other “big guy” is coming in on transit instead of PNI, but I’ve been told that is due to some issues with their POP in the market.
> On Jul 23, 2024, at 9:15 AM, Bryan Holloway <br...@shout.net> wrote: > > What irks me is that we have direct PNIs with -- without naming names -- the > "big guys" delivering this content, and yet the majority of this traffic is > coming over our public IX connections and transit. > > Kinda defeats the purpose of a PNI ... anyone else seeing this? > > - bryan > > > On 7/23/24 16:05, Aaron Gould wrote: >> thanks Peter, et al. Is there some sort of website, traffic stats, gaming >> update schedule page for me to proactively see if/when this type of thing >> will occur? I mean, this is a significant uptick on all 3 of my internet >> uplinks... would be nice to know beforehand >> -Aaron >> On 7/23/2024 9:02 AM, Peter Potvin wrote: >>> Considering at least the top 4 IPs you've listed are CDN providers (Edgio >>> and Fastly), this definitely sounds like game updates or something of the >>> sort. Nothing unusual really for 3am on a weekday morning especially for an >>> eyeball network. >>> >>> Kind regards, >>> Peter >>> >>> >>> On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould <aar...@gvtc.com> wrote: >>> >>> Thanks Jason, updates for what? I was hoping any other eyeball network >>> operators may have been seeing "lots of internet" usage like me and may be >>> able to share what they know. I'm always suspicious about the typical game >>> update that tends to cause something like this. someone unicasted me a >>> response that it might be related to F1 Manager 2024 for video game >>> consoles released today >>> >>> i grabbed my netflow data for the last few hours for any source ip that >>> has sent more than 5 GB of data... >>> >>> Top 100 Src IP Addr ordered by bytes: >>> Date first seen Duration Proto Src IP Addr Flows(%) >>> Packets(%) Bytes(%) pps bps bpp >>> 2024-07-23 04:37:29.600 14860.800 any 93.184.215.240 557558( 0.6) >>> 108.5 M( 9.2) 162.6 G(12.9) 7302 87.5 M 1497 >>> 2024-07-23 04:42:07.616 14577.664 any 72.21.81.240 361240( 0.4) >>> 64.5 M( 5.5) 96.6 G( 7.7) 4426 53.0 M 1497 >>> 2024-07-23 06:52:08.192 6781.696 any 151.101.162.172 270298( 0.3) >>> 36.9 M( 3.1) 55.0 G( 4.4) 5445 64.9 M 1489 >>> 2024-07-23 04:23:08.160 15722.240 any 151.101.150.172 1.0 M( 1.0) >>> 31.2 M( 2.6) 46.4 G( 3.7) 1985 23.6 M 1486 >>> 2024-07-23 04:42:47.552 14542.592 any 146.75.106.172 238287( 0.2) >>> 22.9 M( 1.9) 33.9 G( 2.7) 1575 18.7 M 1480 >>> 2024-07-23 03:40:11.776 18298.880 any 199.232.214.172 135793( 0.1) >>> 19.1 M( 1.6) 28.4 G( 2.3) 1043 12.4 M 1486 >>> 2024-07-23 03:48:59.392 17769.728 any 199.232.210.172 135811( 0.1) >>> 18.8 M( 1.6) 27.9 G( 2.2) 1057 12.6 M 1486 >>> 2024-07-23 04:22:05.184 15783.680 any 199.232.70.172 923350( 0.9) >>> 18.5 M( 1.6) 27.5 G( 2.2) 1169 14.0 M 1491 >>> 2024-07-23 04:36:40.704 14909.696 any 146.75.42.172 138813( 0.1) >>> 5.6 M( 0.5) 8.3 G( 0.7) 374 4.5 M 1492 >>> 2024-07-22 22:50:26.048 35683.840 any 199.232.70.252 112323( 0.1) >>> 5.4 M( 0.5) 8.0 G( 0.6) 150 1.8 M 1485 >>> 2024-07-23 06:52:06.656 6783.488 any 146.75.10.172 74859( 0.1) >>> 4.6 M( 0.4) 6.8 G( 0.5) 676 8.1 M 1489 >>> 2024-07-23 02:38:16.704 22011.392 any 151.101.160.204 6114( 0.0) >>> 4.1 M( 0.3) 6.2 G( 0.5) 187 2.2 M 1489 >>> 2024-07-23 01:34:17.728 25851.136 any 151.101.161.190 44001( 0.0) >>> 4.1 M( 0.3) 6.1 G( 0.5) 157 1.9 M 1489 >>> 2024-07-22 22:17:50.464 37638.912 any 199.232.154.252 69420( 0.1) >>> 3.6 M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483 >>> >>> -Aaron >>> >>> >>> >>> On 7/23/2024 8:19 AM, Peter Potvin wrote: >>>> Do you have /any/ sort of additional information about this? >>>> Which source and destination ASNs, how much "a lot" is, etc? This >>>> sounds like a typical game update release cycle though without >>>> any information not a whole lot of networks would be able to >>>> confirm anything. >>>> >>>> Kind regards, >>>> Peter >>>> >>>> >>>> On Tue, Jul 23, 2024 at 9:07 AM Aaron Gould <aar...@gvtc.com> wrote: >>>> >>>> Anyone else see a lot of Internet traffic starting at 3 a.m. and >>>> continuing even now? Seems to be spiky tcp. >>>> >>>> -- -Aaron >>>> >>> -- -Aaron >>> >> -- >> -Aaron
