This is a question for serious network technicians on DU

[UL_Approved]

How many people here have access to MRTG or SNMP data for Internet backbone usage?

This is something that is NOT definite or well-defined, but it is an observation and/or theory. Please bear with me. :tinfoilhat:

I use FPS games over the Internet to various servers. Some are in Southern California, some are in New York, some are in Italy, Germany, Canada, etc.

My observation is this: my network performance has dragged severely since last Friday. My total latency figure is higher, and packet loss is greater. I know that the topology of the network that I use involves several possible trunks over which data may be routed. And I know from some TRACEROUTE work that the servers I use depend upon all of these different trunks for a physical link, which is to say that one server depends upon one route, a second server depends upon a different route, etc.

In talking to different players, from all over the world, I get the same story. The servers that I play on are having latency and/or packet loss problems. And in talking to server admins, the server builds have not changed for about 7-10 days.

Now comes the question: Has anybody been able to see MRTG or SNMP data for Internet routers? I ask this, because the performance decrease seems to mirror the effects of overloaded switches or routers on local networks. Have any traffic spikes been observed on major Internet routers since 2/18/2005?

The theory: If this has ANY merit at all, it would seem to indicate that either a new DoS attack has been found and implemented, or that a huge amount of data transfer is occurring all over the place. If a large amount of data is being transferred, what does it consist of? Has a new software package for mass market been released recently? Was most of last week a low traffic period?

If anybody knows what I am talking about, or has some information, I'd like to get some ideas here. This seems to be very broad, and I'm not the first guy to observe it. But I don't have access to the right information to look for trends.

[uberotto]

1. One possible answer is...

that last week it was reported that people had found a way for subscribers of Napster to remove the DRM from the downloaded music, and convert the songs to mp3s.

I know that if I was a subscriber to Napster, I would be downloading as much music as possible before that hole was patched.

Here is a link to an article on Slashdot, which appeared Feb 17th.

http://slashdot.org/article.pl?sid=05/02/17/0346229&tid=141&tid=95

So it does fit with your timeline.

[UL_Approved]

5. Yes, that makes sense

The traffic was fine up through Friday. But this new discovery with Napster would take about 2 days for people to really get it implemented and downloaded all over the Internet. If the traffic subsides in the next few days, this will show that the security fix is put in.

But if the more far-fetched theories are correct, then a drop in traffic could occur too.

What I'm really getting at for the conspiracy theory stuff is massive data transfers surrounding the Gannon/Guckert saga. This guy could be like the Watergate Hotel break-in. It's like walking in the desert, tripping over something, and digging until you discover a buried space craft. It's that outrageous.

[oneold1-4u]

2. No nerd here- -

So what you are saying I will not attempt to get into. I do know that the warning signs of attempts to check and possibly reduce public use of the INTERNET are out there. Some, have spouted off about the WMD arsenals around the US and other strategic info that wasn't really intended to be TOP SECRET, but they have named one person and are harassing him at this point. He will have to buy a hundred PCs and use that many IDs to be able to have access in the months ahead! They just need the simplest excuse to take over the public use of the INTERNET, but if that is the plan then I will be on every day, denouncing this regime and each and every person who was stupid enough to vote for them!

[rog]

3. Internet Traffic Report

I don't know if they have archives, but you can monitor a lot of info on a daily basis here: http://www.internettrafficreport.com/main.htm

Is that the type of info you're looking for?

.rog.

On edit: Looks like they do have 24-hour, 7-day and 30-day graphs.

.rb.

[UL_Approved]

6. Yes it is, thank you. n/t

[luaptifer]

4. seems to be something of a blip

at the end of january if you take a look at the 30 day chart, here:

http://www.internettrafficreport.com/30day.htm

but it looks as though overall packet loss actually decreased after that point as traffic has increased.

it's been some time since i monitored this site but i don't recall ever noting that ALL regions were below 90% on the index

http://www.internettrafficreport.com/

simultaneously. i do believe a worm or virus has been noted of significance recently but i didn't look further into that headline.

see realtime op stats subject here for your backbone carrier, the page requires some updating of links clearly.

http://www.caida.org/outreach/info/

[UL_Approved]

7. This is exactly what I am looking for

The reason that I wonder is, how does this whole thing compare to the time line for viruses, worms, new software, and mass data transfer.

The Napster security hole thing from post #1 might explain this weekend.

But long-term trends indicate that new software is on the market. Short-term trends can indicate sudden popularity of something, or can indicate a DoS, worm, or other misuse of Internet bandwidth.

What I'm worried about is the possibility of mass data transfer to/from corporate entities or government agencies. I wonder how this traffic relates to the Gannon/Guckert scandal. That is what I want to rule out.

[luaptifer]

8. only thing i have available is a 24 hour window on

several key events, from the same site:

http://www.internettrafficreport.com/event.htm

[UL_Approved]

9. Just as a side note, you can see the Iranian earthquake effects

If you look at the Asia traffic report, you can see the effect of the Iran earthquake today.

Its discussed in this DU thread:
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=102&topic_id=1256012#1257277

Its very interesting to see what you can find by looking at indirect sources.

Part II: All of Asia is going offline. Something very serious is happening. Keep up.

[Goldmund]

10. "All of Asia is going offline."

What mean you?

[UL_Approved]

11. Check out this link

Its since come back with better figures, but Asia is having severe Internet trouble today.

Link: http://www.internettrafficreport.com/

The averages are usually a few points higher.