nanog mailing list archives
Re: IPv4 Exhaustion...
From: "Ricky Beam" <jfbeam () gmail com>
Date: Fri, 23 Jul 2010 16:40:02 -0400
On Fri, 23 Jul 2010 13:59:41 -0400, Steven Bellovin <smb () cs columbia edu> wrote:
Do the complaints you receive include port numbers?
I've never seen one that did. I've not even seen one with an exact timestamp.
You would require the src and dst ip *and* port, plus the near exact timestamp of when the connection was opened and closed. Even then, that's one needle in a huge pile of identical needles. The netflow/sflow/etc. data needed to support such a lookup for a modern ISP network would be absolutely insane. (a decade ago for a small, regional ISP/telco, just prefix records were over 700MB per day -- back in the days of 2mb DSL, before bittorrent...)
--Ricky
Current thread:
- IPv4 Exhaustion... Positively Optimistic (Jul 23)
- Re: IPv4 Exhaustion... David E. Smith (Jul 23)
- Re: IPv4 Exhaustion... William Herrin (Jul 23)
- RE: IPv4 Exhaustion... Lee Howard (Jul 23)
- Re: IPv4 Exhaustion... Ricky Beam (Jul 26)
- Re: IPv4 Exhaustion... Michael Thomas (Jul 26)
- Re: IPv4 Exhaustion... Ricky Beam (Jul 26)
- Re: IPv4 Exhaustion... nick hatch (Jul 23)
- Re: IPv4 Exhaustion... Barry Shein (Jul 24)
- <Possible follow-ups>
- Re: IPv4 Exhaustion... khatfield (Jul 23)
- Re: IPv4 Exhaustion... Steven Bellovin (Jul 23)
- Re: IPv4 Exhaustion... Ricky Beam (Jul 23)
- Re: IPv4 Exhaustion... Leo Vegoda (Jul 23)
- Re: IPv4 Exhaustion... Owen DeLong (Jul 24)
- Re: IPv4 Exhaustion... Christopher Morrow (Jul 24)
- Re: IPv4 Exhaustion... Valdis . Kletnieks (Jul 24)
- Re: IPv4 Exhaustion... Christopher Morrow (Jul 24)
- Re: IPv4 Exhaustion... Ricky Beam (Jul 26)
- RE: IPv4 Exhaustion... Deepak Jain (Jul 26)
- Re: IPv4 Exhaustion... Ricky Beam (Jul 26)
- Re: IPv4 Exhaustion... Steven Bellovin (Jul 23)
- Re: IPv4 Exhaustion... Ricky Beam (Jul 26)
- RE: IPv4 Exhaustion... Deepak Jain (Jul 26)