Re: Traffic to 5/8 and 37/8 - stats on RIPE Labs

2011-02-21 Thread Manish Karir
Hi Oleg, You are correct. We got our default values mixed up. We will correct this on the blog post. Thanks. -manish > Hello, > > > http://labs.ripe.net/Members/mkarir/first-impressions-of-pollution-in-two-ripe-ncc-darknets > > Quote from the link: > > > Note that in the 37/8, most traff

Re: Traffic to 5/8 and 37/8 - stats on RIPE Labs

2011-02-21 Thread "Oleg A. Arkhangelsky"
Hello, > http://labs.ripe.net/Members/mkarir/first-impressions-of-pollution-in-two-ripe-ncc-darknets Quote from the link: > Note that in the 37/8, most traffic comes from TTLs around 100. These are > Linux hosts. > The smaller humps are at ~32 (Windows) and ~250 (Solaris). I don't agree. TTL a

Re: Traffic to 5/8 and 37/8 - stats on RIPE Labs

2011-02-21 Thread Ryan Rawdon
Doesn't the LogMeIn Hamachi "VPN service" use 5.0.0.0/8? Perhaps the spikes to 5.5.5.0/24 or the space in general are from fluctuations or waves of disconnects of Hamachi users, so when they are disconnected their Hamachi traffic heads out in to the DFZ? This service is particularly popular am

Traffic to 5/8 and 37/8 - stats on RIPE Labs

2011-02-21 Thread Mirjam Kuehne
Hello, During NANOG 51, Manish Karir gave a Lightning Talk showing how much and what kind of traffic is going to unallocated address space in 5/8 and 37/8 (among other ranges he tested). This is now also available on RIPE Labs: http://labs.ripe.net/Members/mkarir/first-impressions-of-polluti