Slides from talk for Computer Communications and Networks course

Overview

The Computers

Hardware Capabilities

Traffic Flows

Local Area Tradeoffs

Local Media

Network Components

Logical Network Structure 94

Logical Network Structure 95

Logical Network Structure 96

Full Structure Autumn 96

Network Monitoring

Tower Router SNMP stastitics

Server Interface Statistics

Etherd stats reported by Ethertop

Network load as seen from little
   bytes    pkts    bcst     tcp     udp    icmp     arp      nd     oth
 395.29K  946.10    9.17  826.70   83.59    0.29    0.35    0.00   35.17
packet sizes:
 64-154  155-245    246-336    337-427   428-518   519-609   610-699   700-790
 573.55    69.06      12.69       9.76      8.17      7.45     43.95      7.02
791-881  882-972   973-1063  1064-1154 1155-1245 1246-1336 1337-1427 1428-1518
   2.21     1.25       3.13       6.44      0.59      6.98      0.54    193.31
--------------------------------------------------------------------------------
HOSTNAME                          SENT | HOSTNAME                          RECV
tuck                            224.67 | tuck                            370.13
pine                            180.58 | pine                             93.19
wcc4y2.nottingham.ac.uk          92.98 | walnut                           76.61
robin-cs-gen                     76.09 | wcc4y2.nottingham.ac.uk          68.77
robin                            54.71 | robin                            62.92
pat                              51.26 | pat                              43.05
wcc1a1.nottingham.ac.uk          34.72 | marian                           40.51
ben.Britain.EU.net               26.23 | wcc1a1.nottingham.ac.uk          21.76
marian                           25.96 | wcc2w1.nottingham.ac.uk          14.32
wcc2w1.nottingham.ac.uk          22.04 | wcc2y2.nottingham.ac.uk          13.83
wcc2y2.nottingham.ac.uk          21.07 | ben.Britain.EU.net               13.59
wcc4x3.nottingham.ac.uk          12.78 | sun-cc204.lut.ac.uk              10.34
wcc4z4.nottingham.ac.uk          12.12 | wcc4x3.nottingham.ac.uk           8.40
wahlga1.nottingham.ac.uk          8.62 | wcc4z4.nottingham.ac.uk           6.80
much                              7.39 | mercury.doc.ntu.ac.uk             6.72
sun-cc204.lut.ac.uk               6.49 | much                              6.50
wcc4x4.nottingham.ac.uk           5.98 | wahlga1.nottingham.ac.uk          5.23
wcc2x1.nottingham.ac.uk           5.50 | wcc4x4.nottingham.ac.uk           3.98
mercury.doc.ntu.ac.uk             4.21 | wcc2x1.nottingham.ac.uk           2.82
wcc4y4.nottingham.ac.uk           3.44 | monza                             2.55
wcc4z2.nottingham.ac.uk           2.60 | hill                              2.53
ccn7                              2.50 | suzuka                            2.50
turing                            2.42 | nurburgring                       2.49
pat.ccc.nottingham.ac.uk          2.41 | biffa                             2.48
scarlet                           2.29 | hockenheim                        2.46
little                            2.14 | spa                               2.42
trellis                           2.05 | estoril                           2.40
wcc2z2.nottingham.ac.uk           1.90 | silverstone                       2.38
pat-cs-gen                        1.63 | imola                             2.36
ccsun13                           1.40 | turing                            2.34
tuck-cs-gen                       1.27 | wcc4y4.nottingham.ac.uk           2.09
keep                              1.13 | scarlet                           1.94
jess                              1.03 | pat.ccc.nottingham.ac.uk          1.62
194.129.186.243                   0.87 | trellis                           1.42
marian-cs-gen                     0.78 | wcc4z2.nottingham.ac.uk           1.36
plum                              0.72 | ccn7                              1.25
192.135.10.141                    0.52 | emnet-ppp4.emnet.co.uk            1.22
pppb599.pppp.ap.so-net.or.jp      0.44 | wcc2z2.nottingham.ac.uk           1.07
monza                             0.42 | jess                              1.03
hill                              0.42 | keep                              0.98
suzuka                            0.42 | pppb599.pppp.ap.so-net.or.jp      0.93
biffa                             0.41 | 192.135.10.141                    0.90
nurburgring                       0.41 | ccsun13                           0.89

Etherd - Packet type distribution

Etherd - Packets length distribution

Nnstat - configuration file

##################################################################
##	Statspy coniguration to explore Nottingham traffic
##################################################################

attach {
        # Frequency of ICMP types #
        #                         #
  record  ICMP.type in ICMP  freq-all; 
  
  select TCP.srcport {
    case(20,21,23,25,53,70,79,80,110,111,119,137,138,139,161,
	220,389,512,513,514,515,1023,2049,3128,4045,6000):
	record  TCP.srcport in TCPwks freq-all-bytes;

    default:
      select TCP.dstport {
	  case(20,21,23,25,53,70,79,80,110,111,119,137,138,139,161,
	      220,389,512,513,514,515,1023,2049,3128,4045,6000):
	      record  TCP.dstport in TCPwks freq-all-bytes;
    }
  }
  
  select UDP.srcport {
case(53,67,68,69,111,123,137,138,139,161,177,513,514,517,518,1023,2049,4045):
      record UDP.srcport in UDPwks freq-all-bytes;

    default:
      select UDP.dstport {
case(53,67,68,69,111,123,137,138,139,161,177,513,514,517,518,1023,2049,4045):
	      record  UDP.dstport in UDPwks freq-all-bytes;
    }
  }
        # Frequency of IP protocols  #
  record IP.protocol in IP.protos freq-all-bytes;

        # Histogram of IP datagram sizes #
  record  IP.length  in IP.lens  hist-pwr2(10);

        # Frequencies of different Ethernet types #
  record  Ether.type2 in Ether.type2s  freq-all-bytes;	 
  record  LLC.DSAP    in Ether.dsap    freq-all-bytes;
  record  SNAP.type   in Ether.snaps   freq-all-bytes;	 
  record  Ether.cast  in Ether.multi   freq-all-bytes;	 

  if IP.srcnet is eqf(128.243.0.0) {
    if IP.dstnet is eqf(128.243.0.0) {
      record IP.srchost in Local.src freq-all-bytes;
      record IP.dsthost in Local.dst freq-all-bytes;
    }
    else
      record IP.srchost in Jips.src freq-all-bytes;
  }
  else {
    if IP.dstnet is eqf(128.243.0.0)
      record IP.dsthost in Jips.dst freq-all-bytes;
  }

}

Nnstat - Raw output

Log created on Sat Nov 29 00:03:35 1997, for host guy.
    Object name = 'Ether.type2s'.

OBJECT: Ether.type2s  Class= freq-all-bytes  [Created: 20:13:43 11-27-97]
  ReadTime: 00:03:35 11-29-97, ClearTime: 20:13:43 11-27-97 (@-100192sec)
  Total Count= 68024315 (+0 orphans)
  Total Bytes= 19075839620B    #bins = 42 (17.3% Ethernet load) 
[x0800]= 64020499 &18143195298B    (94.1%) (16.4% Ethernet load) @-0sec 
[x0000]= 3339965 &852731382B   ( 4.9%) ( 0.8% Ethernet load) @-0sec 
[x6007]= 325979 &37161606B     ( 0.5%) ( <.1% Ethernet load) @-0sec 
[x0806]= 132786 &6110242B      ( 0.2%) ( <.1% Ethernet load) @-2sec 
...

Log created on Sat Nov 29 00:03:35 1997, for host guy.
    Object name = 'Ether.dsap'.

OBJECT: Ether.dsap  Class= freq-all-bytes  [Created: 20:13:43 11-27-97]
  ReadTime: 00:03:35 11-29-97, ClearTime: 20:13:43 11-27-97 (@-100192sec)
  Total Count= 3339965 (+0 orphans)
  Total Bytes= 852731382B    #bins = 78 ( 0.8% Ethernet load) 
[xe0]= 2244464 &649492065B (67.2%) ( 0.6% Ethernet load) @-1sec 
[x7e]= 399321 &2394675B    (12.0%) ( <.1% Ethernet load) @-0sec 
[xaa]= 187580 &33739131B   ( 5.6%) ( <.1% Ethernet load) @-1sec 
[xff]= 179148 &84625310B   ( 5.4%) ( <.1% Ethernet load) @-9sec 
[xfe]= 162248 &66786800B   ( 4.9%) ( <.1% Ethernet load) @-1sec 
[xf0]= 89240 &12581259B    ( 2.7%) ( <.1% Ethernet load) @-0sec 
[x42]= 44501 &1691038B     ( 1.3%) ( <.1% Ethernet load) @-0sec 
...

Log created on Sat Nov 29 00:03:35 1997, for host guy.
    Object name = 'Ether.snaps'.

OBJECT: Ether.snaps  Class= freq-all-bytes  [Created: 20:13:43 11-27-97]
  ReadTime: 00:03:35 11-29-97, ClearTime: 20:13:43 11-27-97 (@-100192sec)
  Total Count= 187580 (+0 orphans)
  Total Bytes= 33739131B    #bins = 13 ( <.1% Ethernet load) 
[x809b]= 131826 &24815520B (70.3%) ( <.1% Ethernet load) @-2sec 
[x8048]= 33379 &5474156B   (17.8%) ( <.1% Ethernet load) @-1sec 
[x0001]= 10003 &2060618B   ( 5.3%) ( <.1% Ethernet load) @-4sec 
[x2000]= 6668 &908941B     ( 3.6%) ( <.1% Ethernet load) @-10sec 
[x6002]= 5087 &394253B     ( 2.7%) ( <.1% Ethernet load) @-3sec 
[x803e]= 221 &41306B       ( 0.1%) ( <.1% Ethernet load) @-116sec 
...

Log created on Sat Nov 29 00:03:35 1997, for host guy.
    Object name = 'IP.lens'.

OBJECT: IP.lens  Class= hist-pwr2  [Created: 20:13:43 11-27-97]
  ReadTime: 00:03:35 11-29-97, ClearTime: 20:13:43 11-27-97 (@-100192sec)
  Total Count= 64020479 (+0 orphans)
   Avg= 285  Min= 28  Max= 8464
  [0-9]= 0
  [10-19]= 0
  [20-39]= 61001
  [40-79]= 35266925
  [80-159]= 13222335
  [160-319]= 3778070
  [320-639]= 2446024
  [640-1279]= 1859449
  [1280-2559]= 7334611
  [2560-5119]= 40496
  [5120-10239]= 11568
  [10240-20479]= 0

Nnstat - unicast packet rate

Nnstat - multicast packet rate

Nnstat - unicast load

Nnstat - multicast load

Nnstat - traffic by protocol Fri Nov 28 1997 on CS Fast ethernet

Results for all the days NNSTAT was running
Nov 28 Postscript
Nov 29 Postscript
Nov 30 Postscript
Dec 1 Postscript
Dec 2 Postscript
Dec 3 Postscript

Nnstat - traffic by host on CS Fast Ethernet Fri Nov 28 1997

Wide Area Traffic

CS Fast Ethernet 1128
Local Area Traffic by Host

Results for all the days NNSTAT was running
Nov 28 Postscript
Nov 29 Postscript
Nov 30 Postscript
Dec 1 Postscript
Dec 2 Postscript
Dec 3 Postscript

Campus topology 95

Campus topology 97

Tower and Campus 95

Tower Router FDDI load

Telecoms Provision

SuperJanet Mk 1 and Mk 2 sites map

SuperJanet I

PDH Topology

SuperJanet II - SMDS network 95

SuperJanet II - SMDS network 97

SuperJanet III - ATM data network 97

International Links 96

Nottingham SMDS load

US Traffic

Nottingham SMDS plotted over a week

Ten-34 European Research network

Ten-34 Schematic

Video Network