[nsp-sec] Anyone else seeing a HUGE increase in TCP/1935 from Limelight Networks

[Chris Calvert]

That's funny, I was going to mention that the Germany v Austria Euro 2008
match was this afternoon, starting about 2.5 hours ago.

Could be a combination of the two events.  We've seen spikes like this due
to streaming during big tournament matches in the past.

Chris

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net 
> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of 
> Sean Donelan
> Sent: Monday, June 16, 2008 2:30 PM
> To: John Fraizer
> Cc: nsp-security NSP
> Subject: Re: [nsp-sec] Anyone else seeing a HUGE increase in 
> TCP/1935 from Limelight Networks
> 
> ----------- nsp-security Confidential --------
> 
> On Mon, 16 Jun 2008, John Fraizer wrote:
> > We've suddenly (since about 1600 GMT today) seen a huge 
> increase in inbound traffic - a very unnatural curve on our 
> graphs.  I have tracked this via flows to a large influx
> > of traffic from Limelight networks.
> 
> The PGA final round is this afternoon.  Could this be a 
> streaming event?
> 
> TCP/1935 Adobe Macromedia Flash Real Time Messaging Protocol (RTMP)
>     "plain" protocol
> 
> Are you seeing it decrease now.  Tiger won.
> 
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the 
> nsp-security
> community. Confidentiality is essential for effective 
> Internet security counter-measures.
> _______________________________________________
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4858 bytes
Desc: not available
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20080616/20d450f5/attachment-0001.bin>