Subject: Re: [Ieprep] network congestion, VoIP, NCS contracting approach, etc. (fwd)

From: Bill Woodcock <[email-masked]>
Date: Tue, 12 Nov 2002 00:19:20 -0800 (PST)

Here's some data.  The only person I know who deals with congested links
routinely is the engineering manager for a bandwidth-manager product.
Here's what he had to say about the prevalence of real-time traffic on
the Internet, versus file sharing.

                                -Bill

---------- Forwarded message ----------
Date: Mon, 11 Nov 2002 21:00:24 -0800
Subject: Re: [Ieprep] network congestion, VoIP, NCS contracting  approach,
     etc. (fwd)

Interactive video conferencing or VoIP is so small it doesn't even hit our
radar - a couple percent at most.

On unmanaged links we typically see 60%-80% peer to peer, 10% web and
volume goes down from that.  The P2P volume is so immense it dwarfs FTP,
News, Mail, and even Web which are traditional large bandwidth consumers.

The biggest live video components are probably Yahoo Messenger Webcam's,
WebCam32 traffic over HTTP, NetMeeting, maybe PalTalk.  Internet Radio over
RealPlayer is probably the other large realtime consumer if you consider
that VoIP.

Here is data from a couple of our clients boxes that might help you make an
analysis.  If you see applications that are clearly not widely deployed
like "MCK-VoIP" gateways by MCK it is probably some other app, likely
filesharing, using the MCK ports which has been mis-identified (but which a
router filter on the same ports would make the same
mis-identification).  Each release less of our code uses by-port analysis,
especially now that KaZaA 2.0 lets users pick their serving port and so has
effectively obsoleted port-based strategies for controlling/limiting
applications.

I'll let you do the aggregation when they have a "folder" in their tree
with some subnet that replicates counts for apps that are also matching
other addresses.  I'm including a list of what partitions (bandwidth
limits) they put in place as well as bytes transferred per-application.  If
a site has lots of "default" traffic it is likely from port-based
applications PacketShaper does not recognize.

-Richard

Site one - major university serving as path between a statewide network
that includes thousands of K12 schools and the Internet.

PacketShaper# part show

Partition name          Size          Grntd       Prior       Curr  1-Min
                         Min /  Max          Excess      Usage       Avg   Peak
-------------------------------------------------------------------------------
/Inbound               200.0M 200.0M     0     0 126.4M126.4M119.9M116.0M181.7M
  /Inbound/ICMP             0    1.0M     0     0   119k  119k  116k  148k
354k
  /Inbound/Dorm             0   50.0M     0     0  25.5M 25.5M 26.8M 26.6M
40.5M
   /Inbound/Dorm/ICMP       0    1.0M     0     0  9984  9984  4505  3455
995k
   /Inbound/Dorm/HBRec      0   20.0M     0     0  20.0M 20.0M 19.8M 19.7M
20.1M
  /Inbound/Campus/HBRec     0   20.0M     0     0  20.0M 20.0M 19.9M 19.9M
20.2M

-------------------------------------------------------------------------------
/Outbound              200.0M 200.0M     0     0 153.8M153.8M156.1M149.0M206.8M
  /Outbound/ICMP            0    1.0M     0     0  27.1k 27.1k 39.8k
76.8k  1.0M
  /Outbound/Dorm            0   50.0M     0     0  24.8M 24.8M 24.1M 24.7M
51.3M
   /Outbound/Dorm/HBRec     0   20.0M     0     0  20.0M 20.0M 19.1M 19.4M
20.1M
  /Outbound/Campus/HBRec    0   20.0M     0     0  20.0M 20.0M 19.8M 19.6M
20.2M

PacketShaper# me dump class all inbound by element 30d bytes
"time:12-Oct-2002 23:00:00"
"class","bytes"
"/Inbound/Mirror_Servers/ScavengerService/FTP",210810713
"/Inbound/Mirror_Servers/ScavengerService/HTTP",220487542
"/Inbound/Mirror_Servers/ScavengerService/rsync",428617384
"/Inbound/Mirror_Servers/ScavengerService/DNS",736475
"/Inbound/Mirror_Servers/ScavengerService/ICMP",4208705
"/Inbound/Mirror_Servers/ScavengerService/Default",1696215
"/Inbound/Mirror_Servers/Citrix/Default",13433
"/Inbound/Mirror_Servers/FTP",42883093490
"/Inbound/Mirror_Servers/Half-Life",23910
"/Inbound/Mirror_Servers/HTTP",36533866881
"/Inbound/Mirror_Servers/Ident",109843
"/Inbound/Mirror_Servers/lockd",2672
"/Inbound/Mirror_Servers/MPEG-Video",2134064
"/Inbound/Mirror_Servers/NTP",151476
"/Inbound/Mirror_Servers/QuickTime",15513022
"/Inbound/Mirror_Servers/rsync",88229768737
"/Inbound/Mirror_Servers/SMTP",250000
"/Inbound/Mirror_Servers/SSH",14829079
"/Inbound/Mirror_Servers/WinMedia",96717
"/Inbound/Mirror_Servers/DNS",115412763
"/Inbound/Mirror_Servers/ISAKMP",409584
"/Inbound/Mirror_Servers/Kontiki",950865
"/Inbound/Mirror_Servers/ICMP",37406164
"/Inbound/Mirror_Servers/Default",1691121388
"/Inbound/Dorm/Soribada",60524
"/Inbound/Dorm/HBRec/WinMX",64173632532
"/Inbound/Dorm/HBRec/Soulseek",2976958820
"/Inbound/Dorm/HBRec/Aimster",4559243
"/Inbound/Dorm/HBRec/Audiogalaxy",11293276
"/Inbound/Dorm/HBRec/DirectConnect",2642730026
"/Inbound/Dorm/HBRec/eDonkey",32920419006
"/Inbound/Dorm/HBRec/Gnutella/Gnutella-Download",33876822334
"/Inbound/Dorm/HBRec/Gnutella/Gnutella-Upload",1391389393
"/Inbound/Dorm/HBRec/Gnutella/Default",118785746125
"/Inbound/Dorm/HBRec/Hotline",188349418
"/Inbound/Dorm/HBRec/KaZaA/KaZaA-Download",4885506429032
"/Inbound/Dorm/HBRec/KaZaA/KaZaA-Upload",174420649506
"/Inbound/Dorm/HBRec/KaZaA/Default",163401867474
"/Inbound/Dorm/HBRec/Napster",4695135634
"/Inbound/Dorm/HBRec/ScourExchange",611
"/Inbound/Dorm/HBRec/Shoutcast",29379325649
"/Inbound/Dorm/HBRec/Blubster",838666524
"/Inbound/Dorm/Apache_OpenSSL_worm",0
"/Inbound/Dorm/AFS",44478369
"/Inbound/Dorm/AsheronsCall",203076355
"/Inbound/Dorm/ATSTCP",106258620
"/Inbound/Dorm/BackWeb",72931295
"/Inbound/Dorm/ccMail",78107467
"/Inbound/Dorm/CIFS-TCP",94119505
"/Inbound/Dorm/Citrix/Default",2340264686
"/Inbound/Dorm/CitrixIMA",1128826271
"/Inbound/Dorm/CUSeeMe",5674
"/Inbound/Dorm/CVSpserver",167271
"/Inbound/Dorm/DHCP",2448
"/Inbound/Dorm/DLS",1333746707
"/Inbound/Dorm/Doom",653531681
"/Inbound/Dorm/FileMaker",31907938
"/Inbound/Dorm/FileRouge",0
"/Inbound/Dorm/Finger",8448204
"/Inbound/Dorm/FTP",136895796920
"/Inbound/Dorm/Furthurnet",29802689155
"/Inbound/Dorm/Gopher",82607
"/Inbound/Dorm/Groupwise",29827486
"/Inbound/Dorm/Half-Life",20943847053
"/Inbound/Dorm/HTTP",582864156901
"/Inbound/Dorm/Ident",4647344783
"/Inbound/Dorm/IMAP",252569128
"/Inbound/Dorm/IRC",193802170025
"/Inbound/Dorm/Kali",135609221
"/Inbound/Dorm/Kerberos",153757
"/Inbound/Dorm/L2TP",16942546
"/Inbound/Dorm/LDAP",1779932
"/Inbound/Dorm/lockd",9491
"/Inbound/Dorm/LotusNotes",1160520431
"/Inbound/Dorm/LucasArts",1179005927
"/Inbound/Dorm/Marimba",729552943
"/Inbound/Dorm/MCK-Signaling",280950246
"/Inbound/Dorm/Micom-VIP",0
"/Inbound/Dorm/MPEG-Audio",18848970449
"/Inbound/Dorm/MPEG-Video",25622855714
"/Inbound/Dorm/MSN-Messenger",3780896706
"/Inbound/Dorm/MSN-Zone",0
"/Inbound/Dorm/MSSQL",1059446343
"/Inbound/Dorm/NNTP",152059491
"/Inbound/Dorm/NTP",1424249
"/Inbound/Dorm/NW5-CMD",2601111
"/Inbound/Dorm/Oracle",4230930744
"/Inbound/Dorm/OracleEM",201561929
"/Inbound/Dorm/PEPGate",243679874
"/Inbound/Dorm/Persona",1012309396
"/Inbound/Dorm/POP3",4701345548
"/Inbound/Dorm/PPTP",492728307
"/Inbound/Dorm/Quake",973096764
"/Inbound/Dorm/QuickTime",34367005571
"/Inbound/Dorm/RADIUS",8271533
"/Inbound/Dorm/RC5DES",2000239639
"/Inbound/Dorm/RDP",1401008055
"/Inbound/Dorm/Real",23118311267
"/Inbound/Dorm/rsync",1899312
"/Inbound/Dorm/RTCP-I",43774503
"/Inbound/Dorm/RTP-I",5316174773
"/Inbound/Dorm/rwho",43142
"/Inbound/Dorm/SHARESUDP",8172742
"/Inbound/Dorm/SMTBF",39689534
"/Inbound/Dorm/SMTP",853030015
"/Inbound/Dorm/SNMP",28286
"/Inbound/Dorm/SOCKS",205012
"/Inbound/Dorm/SSDP",1993765
"/Inbound/Dorm/SSH",79396803
"/Inbound/Dorm/SSL",6721787529
"/Inbound/Dorm/Syslog",48
"/Inbound/Dorm/T.120",69441741
"/Inbound/Dorm/Telnet",34840760576
"/Inbound/Dorm/Timbuktu",6364544098
"/Inbound/Dorm/Tripnosis",0
"/Inbound/Dorm/Unreal",2859950608
"/Inbound/Dorm/VNC",21389408
"/Inbound/Dorm/Webshots",34226554
"/Inbound/Dorm/WHOIS",471013
"/Inbound/Dorm/WinMedia",33773206752
"/Inbound/Dorm/XWindows",54106156
"/Inbound/Dorm/YahooGames",417396348
"/Inbound/Dorm/YahooMsg",174133806
"/Inbound/Dorm/AOL-IM-ICQ",33604389794
"/Inbound/Dorm/Battle.net",980856121
"/Inbound/Dorm/CU-DEV",0
"/Inbound/Dorm/CVSup",2476477
"/Inbound/Dorm/Day-Time",816819017
"/Inbound/Dorm/DNS",18723093327
"/Inbound/Dorm/Echo",178995
"/Inbound/Dorm/H.323",1554490491
"/Inbound/Dorm/INFOC-RTMS",14239
"/Inbound/Dorm/ISAKMP",26736772
"/Inbound/Dorm/Kontiki",94762065
"/Inbound/Dorm/MeetingMaker",0
"/Inbound/Dorm/MSSQ",3761642065
"/Inbound/Dorm/Mythic",954653075
"/Inbound/Dorm/NetBIOS-IP",4970822
"/Inbound/Dorm/NFS",6433185
"/Inbound/Dorm/NW5-NCP",532522
"/Inbound/Dorm/pcANYWHERE",3182747
"/Inbound/Dorm/RTSP",175291847
"/Inbound/Dorm/SLP",3060
"/Inbound/Dorm/SMS",2236163314
"/Inbound/Dorm/SonyOnline",1363273132
"/Inbound/Dorm/StreamWorks",327284374
"/Inbound/Dorm/TimeServer",1003455
"/Inbound/Dorm/Tribes",103253020
"/Inbound/Dorm/Unavailable",0
"/Inbound/Dorm/WINS",16300
"/Inbound/Dorm/ICMP",1193892271
"/Inbound/Dorm/Protocol_102",3329
"/Inbound/Dorm/Protocol_41",4403
"/Inbound/Dorm/Protocol_54",31966
"/Inbound/Dorm/RSVP",8134
"/Inbound/Dorm/DiscoveredPorts/TCP_Port_1214",2727001065
"/Inbound/Dorm/DiscoveredPorts/TCP_Port_5750",3520
"/Inbound/Dorm/DiscoveredPorts/TCP_Port_6667",1212709
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_1556",752981
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_1626",139849
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_1689",144647
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_1943",282407
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_27926",1245627
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_2861",57326653
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_2993",22258
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_3090",26733069
"/Inbound/Dorm/DiscoveredPorts/UDP_Port_3674",308338
"/Inbound/Dorm/Default",855904671679
"/Inbound/Localhost",27549999
"/Inbound/SameSide",3756390
"/Inbound/Campus/HBRec/WinMX",47262266253
"/Inbound/Campus/HBRec/Soulseek",121145932337
"/Inbound/Campus/HBRec/Aimster",385629790
"/Inbound/Campus/HBRec/Audiogalaxy",70585549
"/Inbound/Campus/HBRec/DirectConnect",4524961731
"/Inbound/Campus/HBRec/eDonkey",119015286370
"/Inbound/Campus/HBRec/Gnutella/Gnutella-Download",28276909188
"/Inbound/Campus/HBRec/Gnutella/Gnutella-Upload",1871323856
"/Inbound/Campus/HBRec/Gnutella/Default",102465608437
"/Inbound/Campus/HBRec/Hotline",38427899
"/Inbound/Campus/HBRec/KaZaA/KaZaA-Download",4892818077973
"/Inbound/Campus/HBRec/KaZaA/KaZaA-Upload",233784488046
"/Inbound/Campus/HBRec/KaZaA/Default",109488498657
"/Inbound/Campus/HBRec/Napster",15867526878
"/Inbound/Campus/HBRec/ScourExchange",3021072
"/Inbound/Campus/HBRec/Shoutcast",314144717454
"/Inbound/Campus/HBRec/Blubster",3115319873
"/Inbound/ScavengerService",85254586508
"/Inbound/GRE",1780146821
"/Inbound/TC2-Netflow-Export",265306832505
"/Inbound/Multicast/L2TP",0
"/Inbound/Multicast/NTP",8735542
"/Inbound/Multicast/RTCP-I",63773558
"/Inbound/Multicast/RTP-I",35917933007
"/Inbound/Multicast/SNMP",0
"/Inbound/Multicast/SSDP",29455730
"/Inbound/Multicast/SLP",49354240
"/Inbound/Multicast/WINS",54784
"/Inbound/Multicast/ICMP",6488
"/Inbound/Multicast/IGMP",3337
"/Inbound/Multicast/OSPF",0
"/Inbound/Multicast/PIM",21903488
"/Inbound/Multicast/Default",216580446473
"/Inbound/Apache_OpenSSL_worm",0
"/Inbound/Soribada",514926352
"/Inbound/AFP",119300
"/Inbound/AFS",24949086
"/Inbound/AsheronsCall",239802362
"/Inbound/ATSTCP",2723254379
"/Inbound/Attachmate-GW",218948
"/Inbound/BackWeb",242556929
"/Inbound/BGP",32357031
"/Inbound/ccMail",1277089724
"/Inbound/Chaincast",178239463
"/Inbound/CIFS-TCP",2166267281
"/Inbound/Citrix/Citrix-AFOATS_MAIL",10117387
"/Inbound/Citrix/Citrix-AFW_ONLINE",0
"/Inbound/Citrix/Citrix-CRYSTAL_REPORTS",262233
"/Inbound/Citrix/Citrix-E-net",383297
"/Inbound/Citrix/Citrix-ERM_305_VIA_METAFRAME",1266260
"/Inbound/Citrix/Citrix-EXTERNAL_800X600",0
"/Inbound/Citrix/Citrix-MICROSOFT_EXCEL",0
"/Inbound/Citrix/Citrix-Outlook_2000",7163667
"/Inbound/Citrix/Citrix-PEOPLESOFT_PRODUCTION_DA",19658892
"/Inbound/Citrix/Citrix-SABREVIEWAA1",0
"/Inbound/Citrix/Citrix-TSTEST",0
"/Inbound/Citrix/Default",3353009250
"/Inbound/CitrixIMA",6870044421
"/Inbound/Clarent-CC",0
"/Inbound/Clarent-Mgmt",0
"/Inbound/CORBA",561738
"/Inbound/CRS",106591
"/Inbound/CUSeeMe",286599288
"/Inbound/CVSpserver",1407344505
"/Inbound/DHCP",145365
"/Inbound/DICOM/Default",60249762
"/Inbound/DLS",1789013430
"/Inbound/Doom",793333458
"/Inbound/DPA",10908
"/Inbound/EntryPoint",178174959
"/Inbound/FileMaker",1363663743
"/Inbound/Finger",184087561
"/Inbound/FTP",1156108031970
"/Inbound/Furthurnet",73757823415
"/Inbound/Gopher",23463125
"/Inbound/Groupwise",2117877792
"/Inbound/Half-Life",48946035343
"/Inbound/HL7",0
"/Inbound/HTTP",6526814231970
"/Inbound/Ident",16870254485
"/Inbound/IMAP",15205608702
"/Inbound/iMesh",0
"/Inbound/IPP",14699444
"/Inbound/IRC",317440978305
"/Inbound/JavaRMI",371870992
"/Inbound/Kali",91334707
"/Inbound/Kerberos",78316151
"/Inbound/L2TP",82802399
"/Inbound/LDAP",30309713
"/Inbound/lockd",17090361
"/Inbound/LotusNotes",2956418136
"/Inbound/LucasArts",173857354
"/Inbound/Marimba",3486605952
"/Inbound/MATIP",1184
"/Inbound/MCK-Signaling",1478575143
"/Inbound/MPEG-Audio",135935166075
"/Inbound/MPEG-Video",236733555334
"/Inbound/MSN-Messenger",10282312754
"/Inbound/MSSQL",3160723489
"/Inbound/Net2Phone",24497831
"/Inbound/NewsStand",73905
"/Inbound/NNTP",1774728822480
"/Inbound/NTP",4250952593
"/Inbound/NW5-CMD",16137328
"/Inbound/Oracle",15713456748
"/Inbound/OracleClient",85468
"/Inbound/OracleEM",1531307508
"/Inbound/PEPGate",1214806373
"/Inbound/Persona",2551145718
"/Inbound/POP3",20958375616
"/Inbound/PPTP",740445011
"/Inbound/Progress",8786763
"/Inbound/Quake",5956143306
"/Inbound/QuickTime",177441220785
"/Inbound/RADIUS",81597929
"/Inbound/RC5DES",3719087160
"/Inbound/RDP",3773367836
"/Inbound/Real",406835565552
"/Inbound/rexec",560
"/Inbound/rlogin",12119529
"/Inbound/rsh",12156998
"/Inbound/rsync",4721149567
"/Inbound/RTCP-I",191990699
"/Inbound/RTP-I",22495336802
"/Inbound/rwho",200027
"/Inbound/SHARESUDP",16019407
"/Inbound/SMTBF",1015186668
"/Inbound/SMTP",276488347555
"/Inbound/SNMP",2189438346
"/Inbound/SOCKS",688634687
"/Inbound/SSDP",6660685
"/Inbound/SSH",135598970476
"/Inbound/SSL",225421152342
"/Inbound/Syslog",762299
"/Inbound/T.120",4793924980
"/Inbound/TACACS",787
"/Inbound/Telnet",12135919253
"/Inbound/TFTP",2971867
"/Inbound/Timbuktu",14531085088
"/Inbound/tn3270",3197548
"/Inbound/tn5250",16417732
"/Inbound/tn5250p",391394
"/Inbound/Tripnosis",0
"/Inbound/Unreal",10737545778
"/Inbound/VDOPhone",161844562
"/Inbound/VNC",3907744639
"/Inbound/WebEx",356071565
"/Inbound/Webshots",356894418
"/Inbound/WHOIS",54083762
"/Inbound/WinMedia",680503794207
"/Inbound/XWindows",1309373733
"/Inbound/YahooGames",2819811728
"/Inbound/YahooMsg",1755788955
"/Inbound/Battle.net",7335236719
"/Inbound/CU-DEV",5948
"/Inbound/CVSup",3089293117
"/Inbound/Day-Time",979943342
"/Inbound/DCOM",390740
"/Inbound/Dialpad",181496
"/Inbound/DNS/CampusDNSservers",13516568527
"/Inbound/DNS/Default",37437581098
"/Inbound/AOL-IM-ICQ/AOL-IM-File",49782797554
"/Inbound/AOL-IM-ICQ/AOL-IM-IMAGE",2800035304
"/Inbound/AOL-IM-ICQ/Default",81786471165
"/Inbound/Echo",84578271
"/Inbound/FNAonTCP",198
"/Inbound/Groove",3441518
"/Inbound/H.323",5651558355
"/Inbound/INFOC-RTMS",801521
"/Inbound/ISAKMP",682961094
"/Inbound/Kontiki",753083782
"/Inbound/MeetingMaker",111121537
"/Inbound/Microsoft-ds",71911729
"/Inbound/MSSQ",27791304433
"/Inbound/Mythic",637229204
"/Inbound/NetBIOS-IP",200482346
"/Inbound/NFS",9225533
"/Inbound/NW5-NCP",3496739409
"/Inbound/pcANYWHERE",5434160394
"/Inbound/Printer",3494742
"/Inbound/RIP",1878458
"/Inbound/RTSP",5316789435
"/Inbound/SLP",21287190
"/Inbound/SMS",8160951904
"/Inbound/SonyOnline",6440087323
"/Inbound/StreamWorks",1089590643
"/Inbound/SunRPC",42332
"/Inbound/TimeServer",642036601
"/Inbound/Tribes",1327952624
"/Inbound/Unavailable",0
"/Inbound/WINS",699963
"/Inbound/CBT",3396
"/Inbound/ICMP",35084113498
"/Inbound/IGMP",44072
"/Inbound/IPSec",18681285969
"/Inbound/OSPF",0
"/Inbound/PIM",0
"/Inbound/Protocol_102",141
"/Inbound/Protocol_255",0
"/Inbound/Protocol_4",36954872
"/Inbound/Protocol_41",11288
"/Inbound/Protocol_54",314440
"/Inbound/RSVP",1354306
"/Inbound/DiscoveredPorts/RMT-maybe",21031671
"/Inbound/DiscoveredPorts/TCP_Port_1086",5661627
"/Inbound/DiscoveredPorts/TCP_Port_1214",2084597522
"/Inbound/DiscoveredPorts/TCP_Port_1327",2326934
"/Inbound/DiscoveredPorts/TCP_Port_1481",242963168
"/Inbound/DiscoveredPorts/TCP_Port_1496",214365665
"/Inbound/DiscoveredPorts/TCP_Port_17111",3723602317
"/Inbound/DiscoveredPorts/TCP_Port_1938",4142975
"/Inbound/DiscoveredPorts/TCP_Port_1984",6583437
"/Inbound/DiscoveredPorts/TCP_Port_2039",4148005
"/Inbound/DiscoveredPorts/TCP_Port_21",11380316348
"/Inbound/DiscoveredPorts/TCP_Port_2112",54870101
"/Inbound/DiscoveredPorts/TCP_Port_2214",112718
"/Inbound/DiscoveredPorts/TCP_Port_2235",2718965028
"/Inbound/DiscoveredPorts/TCP_Port_251",3166647964
"/Inbound/DiscoveredPorts/TCP_Port_3403",16327266
"/Inbound/DiscoveredPorts/TCP_Port_3632",44119387
"/Inbound/DiscoveredPorts/TCP_Port_4034",7112560
"/Inbound/DiscoveredPorts/TCP_Port_44445",50062065
"/Inbound/DiscoveredPorts/TCP_Port_49",17115099
"/Inbound/DiscoveredPorts/TCP_Port_5013",32139427
"/Inbound/DiscoveredPorts/TCP_Port_5100",585244393
"/Inbound/DiscoveredPorts/TCP_Port_5625",19529741
"/Inbound/DiscoveredPorts/TCP_Port_5992",34586461
"/Inbound/DiscoveredPorts/TCP_Port_6016",12338317
"/Inbound/DiscoveredPorts/TCP_Port_6080",73954896
"/Inbound/DiscoveredPorts/TCP_Port_6567",10473597
"/Inbound/DiscoveredPorts/TCP_Port_6669",7727536919
"/Inbound/DiscoveredPorts/TCP_Port_6891",4243295461
"/Inbound/DiscoveredPorts/TCP_Port_6928",2011609043
"/Inbound/DiscoveredPorts/TCP_Port_7290",378963758156
"/Inbound/DiscoveredPorts/TCP_Port_7700",71482527
"/Inbound/DiscoveredPorts/TCP_Port_7879",8212808
"/Inbound/DiscoveredPorts/TCP_Port_80",2403655696
"/Inbound/DiscoveredPorts/TCP_Port_8989",8455686
"/Inbound/DiscoveredPorts/TCP_Port_9833",251520151
"/Inbound/DiscoveredPorts/TCP_Port_9931",1011188920
"/Inbound/DiscoveredPorts/TCP_Port_9999",516485106
"/Inbound/DiscoveredPorts/UDP_Port_13139",158321713
"/Inbound/DiscoveredPorts/UDP_Port_1434",10797627
"/Inbound/DiscoveredPorts/UDP_Port_15003",187638
"/Inbound/DiscoveredPorts/UDP_Port_1971",32088552
"/Inbound/DiscoveredPorts/UDP_Port_2200",12577161
"/Inbound/DiscoveredPorts/UDP_Port_2203",116519861
"/Inbound/DiscoveredPorts/UDP_Port_2223",405573
"/Inbound/DiscoveredPorts/UDP_Port_23000",195873403
"/Inbound/DiscoveredPorts/UDP_Port_2606",9047238
"/Inbound/DiscoveredPorts/UDP_Port_27016",8154578
"/Inbound/DiscoveredPorts/UDP_Port_2859",76432073
"/Inbound/DiscoveredPorts/UDP_Port_2868",1798327
"/Inbound/DiscoveredPorts/UDP_Port_3468",17964922
"/Inbound/DiscoveredPorts/UDP_Port_375",62449
"/Inbound/DiscoveredPorts/UDP_Port_37852",113549815
"/Inbound/DiscoveredPorts/UDP_Port_4110",19130305
"/Inbound/DiscoveredPorts/UDP_Port_4224",216656
"/Inbound/DiscoveredPorts/UDP_Port_6970",33411419188
"/Inbound/DiscoveredPorts/UDP_Port_7674",102172836
"/Inbound/DiscoveredPorts/UDP_Port_7778",4108815
"/Inbound/DiscoveredPorts/UDP_Port_7787",51507063
"/Inbound/DiscoveredPorts/UDP_Port_8344",24240670
"/Inbound/DiscoveredPorts/UDP_Port_9000",24805620
"/Inbound/DiscoveredPorts/UDP_Port_9665",2975550
"/Inbound/Default",2192603208620

PacketShaper# me dump class all outbound by element 30d bytes
"time:12-Oct-2002 23:00:00"
"class","bytes"
"/Outbound/Mirror_Servers/ScavengerService/HTTP",460753651549
"/Outbound/Mirror_Servers/ScavengerService/rsync",618223794899
"/Outbound/Mirror_Servers/ScavengerService/SMTP",16667
"/Outbound/Mirror_Servers/ScavengerService/SSH",881282
"/Outbound/Mirror_Servers/ScavengerService/DNS",291926
"/Outbound/Mirror_Servers/ScavengerService/ICMP",2264705
"/Outbound/Mirror_Servers/ScavengerService/Default",27769760023
"/Outbound/Mirror_Servers/BackWeb",0
"/Outbound/Mirror_Servers/Citrix/Default",18040
"/Outbound/Mirror_Servers/FTP",1991378204256
"/Outbound/Mirror_Servers/Half-Life",75175
"/Outbound/Mirror_Servers/HTTP",1229339277328
"/Outbound/Mirror_Servers/lockd",7840
"/Outbound/Mirror_Servers/MPEG-Video",95542124
"/Outbound/Mirror_Servers/NTP",153504
"/Outbound/Mirror_Servers/QuickTime",744338502
"/Outbound/Mirror_Servers/Real",26725059
"/Outbound/Mirror_Servers/rsync",133500407843
"/Outbound/Mirror_Servers/SMTP",30113
"/Outbound/Mirror_Servers/SSH",134799523
"/Outbound/Mirror_Servers/WinMedia",771626
"/Outbound/Mirror_Servers/DNS",460093460
"/Outbound/Mirror_Servers/Kontiki",40084956
"/Outbound/Mirror_Servers/ICMP",20175171
"/Outbound/Mirror_Servers/Default",35089567911
"/Outbound/Dorm/HBRec/WinMX",51354327229
"/Outbound/Dorm/HBRec/Soulseek",14206995361
"/Outbound/Dorm/HBRec/Aimster",2304371
"/Outbound/Dorm/HBRec/Audiogalaxy",15298722
"/Outbound/Dorm/HBRec/DirectConnect",1573545139
"/Outbound/Dorm/HBRec/eDonkey",34918803531
"/Outbound/Dorm/HBRec/Gnutella/Gnutella-Download",1060585396
"/Outbound/Dorm/HBRec/Gnutella/Gnutella-Upload",26478141710
"/Outbound/Dorm/HBRec/Gnutella/Default",95367140173
"/Outbound/Dorm/HBRec/Hotline",6967336
"/Outbound/Dorm/HBRec/KaZaA/KaZaA-Download",122252032605
"/Outbound/Dorm/HBRec/KaZaA/KaZaA-Upload",4997197470941
"/Outbound/Dorm/HBRec/KaZaA/Default",186623803180
"/Outbound/Dorm/HBRec/Napster",19065669346
"/Outbound/Dorm/HBRec/ScourExchange",470
"/Outbound/Dorm/HBRec/Shoutcast",766725960
"/Outbound/Dorm/HBRec/Blubster",909180373
"/Outbound/Dorm/GRE",33705
"/Outbound/Dorm/Apache_OpenSSL_worm",0
"/Outbound/Dorm/AFP",4615
"/Outbound/Dorm/AFS",720547
"/Outbound/Dorm/AsheronsCall",696598
"/Outbound/Dorm/ATSTCP",157695543
"/Outbound/Dorm/BackWeb",24647972
"/Outbound/Dorm/ccMail",433044789
"/Outbound/Dorm/CIFS-TCP",62572946
"/Outbound/Dorm/Citrix/Default",554732181
"/Outbound/Dorm/CitrixIMA",583209705
"/Outbound/Dorm/Clarent-CC",0
"/Outbound/Dorm/Clarent-Mgmt",0
"/Outbound/Dorm/CVSpserver",6863
"/Outbound/Dorm/DHCP",4576
"/Outbound/Dorm/DLS",395950946
"/Outbound/Dorm/Doom",235896028
"/Outbound/Dorm/FileMaker",4012590
"/Outbound/Dorm/FileRouge",0
"/Outbound/Dorm/Finger",92066754
"/Outbound/Dorm/FTP",51797917774
"/Outbound/Dorm/Furthurnet",40132408343
"/Outbound/Dorm/Gopher",47502
"/Outbound/Dorm/Groupwise",32184057
"/Outbound/Dorm/Half-Life",16817361211
"/Outbound/Dorm/HTTP",108412938152
"/Outbound/Dorm/Ident",931105919
"/Outbound/Dorm/IMAP",55606438
"/Outbound/Dorm/IRC",73081902108
"/Outbound/Dorm/Kali",172270951
"/Outbound/Dorm/Kerberos",84664
"/Outbound/Dorm/L2TP",8331380
"/Outbound/Dorm/LDAP",152636
"/Outbound/Dorm/lockd",519175
"/Outbound/Dorm/LotusNotes",2076395495
"/Outbound/Dorm/LucasArts",572756280
"/Outbound/Dorm/Marimba",21728396
"/Outbound/Dorm/MCK-Signaling",94637126262
"/Outbound/Dorm/Micom-VIP",0
"/Outbound/Dorm/MPEG-Audio",1170108240
"/Outbound/Dorm/MPEG-Video",1654813264
"/Outbound/Dorm/MSN-Messenger",1560902486
"/Outbound/Dorm/MSN-Zone",0
"/Outbound/Dorm/MSSQL",1390227262
"/Outbound/Dorm/NNTP",15186571
"/Outbound/Dorm/NTP",1862141
"/Outbound/Dorm/NW5-CMD",4903064
"/Outbound/Dorm/Oracle",12670486154
"/Outbound/Dorm/OracleEM",483562328
"/Outbound/Dorm/PEPGate",226252281
"/Outbound/Dorm/Persona",6269181425
"/Outbound/Dorm/POP3",413510023
"/Outbound/Dorm/PPTP",313279296
"/Outbound/Dorm/Quake",903908597
"/Outbound/Dorm/QuickTime",663551942
"/Outbound/Dorm/RADIUS",8251055
"/Outbound/Dorm/RC5DES",115639333
"/Outbound/Dorm/RDP",19740854676
"/Outbound/Dorm/Real",521369212
"/Outbound/Dorm/rsync",1582295
"/Outbound/Dorm/RTCP-I",42781862
"/Outbound/Dorm/RTP-I",6746757024
"/Outbound/Dorm/rwho",22666
"/Outbound/Dorm/SHARESUDP",4759238
"/Outbound/Dorm/SMTBF",66273386
"/Outbound/Dorm/SMTP",1217250062
"/Outbound/Dorm/SNMP",1493170
"/Outbound/Dorm/SOCKS",0
"/Outbound/Dorm/SSDP",20787984
"/Outbound/Dorm/SSH",205975448
"/Outbound/Dorm/SSL",1921043735
"/Outbound/Dorm/Syslog",143
"/Outbound/Dorm/T.120",79383063
"/Outbound/Dorm/Telnet",6979644370
"/Outbound/Dorm/TFTP",423
"/Outbound/Dorm/Timbuktu",11357205406
"/Outbound/Dorm/Tripnosis",0
"/Outbound/Dorm/Unreal",1393343836
"/Outbound/Dorm/VNC",32448603
"/Outbound/Dorm/Webshots",2924371
"/Outbound/Dorm/WHOIS",133546
"/Outbound/Dorm/WinMedia",1231229953
"/Outbound/Dorm/XWindows",41307371
"/Outbound/Dorm/YahooGames",276508226
"/Outbound/Dorm/YahooMsg",97024196
"/Outbound/Dorm/AOL-IM-ICQ",46475828963
"/Outbound/Dorm/Battle.net",593584867
"/Outbound/Dorm/CU-DEV",0
"/Outbound/Dorm/CVSup",3076303
"/Outbound/Dorm/Day-Time",62499591
"/Outbound/Dorm/DNS",814573464
"/Outbound/Dorm/Echo",213216
"/Outbound/Dorm/H.323",710996348
"/Outbound/Dorm/INFOC-RTMS",47
"/Outbound/Dorm/ISAKMP",88627
"/Outbound/Dorm/Kontiki",270389160
"/Outbound/Dorm/MeetingMaker",75691971
"/Outbound/Dorm/MSSQ",5267428380
"/Outbound/Dorm/Mythic",214261812
"/Outbound/Dorm/NetBIOS-IP",54509670
"/Outbound/Dorm/NFS",6580922
"/Outbound/Dorm/NW5-NCP",174929
"/Outbound/Dorm/pcANYWHERE",955295
"/Outbound/Dorm/RTSP",4870662
"/Outbound/Dorm/SLP",10628530
"/Outbound/Dorm/SMS",888524864
"/Outbound/Dorm/SonyOnline",322606980
"/Outbound/Dorm/StreamWorks",289546485
"/Outbound/Dorm/TimeServer",999393
"/Outbound/Dorm/Tribes",38977482
"/Outbound/Dorm/Unavailable",0
"/Outbound/Dorm/WINS",26687
"/Outbound/Dorm/ICMP",4505564757
"/Outbound/Dorm/Protocol_41",2590
"/Outbound/Dorm/Protocol_54",134190
"/Outbound/Dorm/RSVP",123311
"/Outbound/Dorm/DiscoveredPorts/TCP_Port_1214",1570606067
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_1227",2257343
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_20100",145615291
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_27015",5833153
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_27016",6640140
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_2929",5859
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_3090",38882678
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_3674",1218566
"/Outbound/Dorm/DiscoveredPorts/UDP_Port_3987",13353
"/Outbound/Dorm/Default",2310455123084
"/Outbound/Localhost",284322881
"/Outbound/SameSide",6504159
"/Outbound/Campus/HBRec/WinMX",14799622325
"/Outbound/Campus/HBRec/Soulseek",61071186438
"/Outbound/Campus/HBRec/Audiogalaxy",57806786
"/Outbound/Campus/HBRec/DirectConnect",3147779655
"/Outbound/Campus/HBRec/eDonkey",159433206479
"/Outbound/Campus/HBRec/Gnutella/Gnutella-Download",1869112853
"/Outbound/Campus/HBRec/Gnutella/Gnutella-Upload",14308891080
"/Outbound/Campus/HBRec/Gnutella/Default",102118383725
"/Outbound/Campus/HBRec/Hotline",3396913
"/Outbound/Campus/HBRec/KaZaA/KaZaA-Download",177006040455
"/Outbound/Campus/HBRec/KaZaA/KaZaA-Upload",4820831617937
"/Outbound/Campus/HBRec/KaZaA/Default",120746374453
"/Outbound/Campus/HBRec/Napster",29868365464
"/Outbound/Campus/HBRec/ScourExchange",7207318
"/Outbound/Campus/HBRec/Shoutcast",367884097213
"/Outbound/Campus/HBRec/Blubster",2835219465
"/Outbound/ScavengerService",10736729787
"/Outbound/GRE",2115990534
"/Outbound/TC2-Netflow-Export",0
"/Outbound/Multicast/RTCP-I",11014816
"/Outbound/Multicast/SSDP",6737262
"/Outbound/Multicast/SLP",68517951
"/Outbound/Multicast/WINS",436
"/Outbound/Multicast/IGMP",1822989
"/Outbound/Multicast/OSPF",0
"/Outbound/Multicast/PIM",151570979
"/Outbound/Multicast/Default",1982653344
"/Outbound/test",2377115
"/Outbound/Apache_OpenSSL_worm",0
"/Outbound/Soribada",544827079
"/Outbound/AFP",155940
"/Outbound/AFS",12069045
"/Outbound/Aimster",259659389
"/Outbound/AsheronsCall",49336764
"/Outbound/ATSTCP",1274679433
"/Outbound/Attachmate-GW",10422493
"/Outbound/AURP",0
"/Outbound/BackWeb",160933251
"/Outbound/BGP",14853633
"/Outbound/ccMail",506789730
"/Outbound/Chaincast",515372123
"/Outbound/CIFS-TCP",476684024
"/Outbound/Citrix/Citrix-AFOATS_MAIL",5439469
"/Outbound/Citrix/Citrix-AFW_ONLINE",0
"/Outbound/Citrix/Citrix-CRYSTAL_REPORTS",208061
"/Outbound/Citrix/Citrix-E-net",114431
"/Outbound/Citrix/Citrix-ERM_305_VIA_METAFRAME",1258513
"/Outbound/Citrix/Citrix-EXTERNAL_800X600",0
"/Outbound/Citrix/Citrix-MICROSOFT_EXCEL",0
"/Outbound/Citrix/Citrix-Outlook_2000",6237654
"/Outbound/Citrix/Citrix-PEOPLESOFT_PRODUCTION_DA",19622114
"/Outbound/Citrix/Citrix-SABREVIEWAA1",0
"/Outbound/Citrix/Citrix-TSTEST",0
"/Outbound/Citrix/Default",1287052278
"/Outbound/CitrixIMA",1706399082
"/Outbound/CORBA",240538
"/Outbound/CRS",22570
"/Outbound/CUSeeMe",147921959
"/Outbound/CVSpserver",961706086
"/Outbound/DHCP",9387553
"/Outbound/DICOM/Default",1435115
"/Outbound/DLS",929780992
"/Outbound/Doom",583823729
"/Outbound/EntryPoint",13588261
"/Outbound/FileMaker",289647453
"/Outbound/Finger",42992912
"/Outbound/FTP",2537332581801
"/Outbound/Furthurnet",134787110913
"/Outbound/Gopher",210391038
"/Outbound/Groupwise",1979145596
"/Outbound/Half-Life",34999071713
"/Outbound/HL7",0
"/Outbound/HTTP",2621829597603
"/Outbound/Ident",1733176777
"/Outbound/IMAP",15199704300
"/Outbound/IPP",28719058
"/Outbound/IRC",422551798763
"/Outbound/JavaRMI",419271583
"/Outbound/Kali",51269949
"/Outbound/Kerberos",47741145
"/Outbound/L2TP",23562707
"/Outbound/LDAP",29173412
"/Outbound/lockd",17603920
"/Outbound/LotusNotes",4548682344
"/Outbound/LucasArts",114771537
"/Outbound/Marimba",220162550
"/Outbound/MCK-Signaling",456805648
"/Outbound/Micom-VIP",0
"/Outbound/MPEG-Audio",16245155538
"/Outbound/MPEG-Video",34965041535
"/Outbound/MSN-Messenger",4849563544
"/Outbound/MSSQL",914672381
"/Outbound/Net2Phone",18571723
"/Outbound/NewsStand",78643
"/Outbound/NNTP",2155275368866
"/Outbound/NTP",3501115157
"/Outbound/NW5-CMD",9834130
"/Outbound/Oracle",32746702462
"/Outbound/OracleClient",4934
"/Outbound/OracleEM",889206230
"/Outbound/PEPGate",899004917
"/Outbound/Persona",867928088
"/Outbound/POP3",109219488671
"/Outbound/PPTP",790530098
"/Outbound/Progress",27918678
"/Outbound/Quake",10323604804
"/Outbound/QuickTime",63068385087
"/Outbound/RADIUS",21340981
"/Outbound/RC5DES",1374773818
"/Outbound/RDP",7020591002
"/Outbound/Real",199617369814
"/Outbound/rexec",1076
"/Outbound/rlogin",18234850
"/Outbound/rsh",441910
"/Outbound/rsync",135374887
"/Outbound/RTCP-I",183839924
"/Outbound/RTP-I",18087146643
"/Outbound/rwho",26976
"/Outbound/SHARESUDP",7850840
"/Outbound/SMTBF",715098161
"/Outbound/SMTP",208231815831
"/Outbound/SNMP",1674713230
"/Outbound/SOCKS",1708664956
"/Outbound/SSDP",44703742
"/Outbound/SSH",322143741029
"/Outbound/SSL",322932482916
"/Outbound/Syslog",203076
"/Outbound/T.120",1176300486
"/Outbound/TACACS",1737
"/Outbound/Telnet",12390203031
"/Outbound/TFTP",35502148
"/Outbound/Timbuktu",4759800111
"/Outbound/tn3270",14357010
"/Outbound/tn5250",151841393
"/Outbound/tn5250p",3719771
"/Outbound/Unreal",8618772013
"/Outbound/VDOPhone",48738470
"/Outbound/VNC",4681097961
"/Outbound/WebEx",164497222
"/Outbound/Webshots",13402212
"/Outbound/WHOIS",17199676
"/Outbound/WinMedia",31680663047
"/Outbound/XWindows",6189416589
"/Outbound/YahooGames",1859632750
"/Outbound/YahooMsg",925907604
"/Outbound/AOL-IM-ICQ",142316004160
"/Outbound/Battle.net",3926312865
"/Outbound/CU-DEV",23020
"/Outbound/CVSup",5082449848
"/Outbound/Day-Time",191607633
"/Outbound/DCOM",2703448
"/Outbound/Dialpad",218340
"/Outbound/DNS/CampusDNSservers",16830441220
"/Outbound/DNS/Default",15104974374
"/Outbound/Echo",147702083
"/Outbound/FNAonTCP",12193
"/Outbound/Groove",131368
"/Outbound/H.323",1866434199
"/Outbound/INFOC-RTMS",10004740
"/Outbound/ISAKMP",1019874578
"/Outbound/Kontiki",406305679
"/Outbound/MeetingMaker",194364478
"/Outbound/Microsoft-ds",10638940
"/Outbound/MSSQ",246434268900
"/Outbound/Mythic",100207410
"/Outbound/NetBIOS-IP",7189740339
"/Outbound/NFS",8984667
"/Outbound/NW5-NCP",3452926681
"/Outbound/pcANYWHERE",8380860335
"/Outbound/Printer",28535600
"/Outbound/RIP",1077755
"/Outbound/RTSP",4551558885
"/Outbound/SLP",75323828
"/Outbound/SMS",3303639240
"/Outbound/SonyOnline",1311691748
"/Outbound/StreamWorks",464866912
"/Outbound/SunRPC",948673
"/Outbound/TimeServer",623495014
"/Outbound/Tribes",504446259
"/Outbound/Unavailable",0
"/Outbound/WINS",463811
"/Outbound/ICMP",20563452619
"/Outbound/IGMP",5226
"/Outbound/IPSec",18256120058
"/Outbound/OSPF",0
"/Outbound/PIM",90271529
"/Outbound/Protocol_4",103952538
"/Outbound/Protocol_41",10380
"/Outbound/Protocol_54",25233670
"/Outbound/RSVP",3677984
"/Outbound/DiscoveredPorts/RMT-maybe",24128623
"/Outbound/DiscoveredPorts/TCP_Port_1214",1381003234
"/Outbound/DiscoveredPorts/TCP_Port_1535",19128581
"/Outbound/DiscoveredPorts/TCP_Port_17111",5868352
"/Outbound/DiscoveredPorts/TCP_Port_1839",8046748017
"/Outbound/DiscoveredPorts/TCP_Port_2091",12570452
"/Outbound/DiscoveredPorts/TCP_Port_21",20832979065
"/Outbound/DiscoveredPorts/TCP_Port_2112",673660989
"/Outbound/DiscoveredPorts/TCP_Port_2121",35361151
"/Outbound/DiscoveredPorts/TCP_Port_27243",1478931
"/Outbound/DiscoveredPorts/TCP_Port_2909",42060923
"/Outbound/DiscoveredPorts/TCP_Port_446",7612685
"/Outbound/DiscoveredPorts/TCP_Port_4989",1498442610
"/Outbound/DiscoveredPorts/TCP_Port_5101",43425247
"/Outbound/DiscoveredPorts/TCP_Port_52649",5805602
"/Outbound/DiscoveredPorts/TCP_Port_5625",2014574380
"/Outbound/DiscoveredPorts/TCP_Port_6016",1326044695
"/Outbound/DiscoveredPorts/TCP_Port_6595",67376419
"/Outbound/DiscoveredPorts/TCP_Port_7687",7379735145
"/Outbound/DiscoveredPorts/TCP_Port_80",3375512630
"/Outbound/DiscoveredPorts/TCP_Port_8184",130795214
"/Outbound/DiscoveredPorts/TCP_Port_82",606779
"/Outbound/DiscoveredPorts/UDP_Port_192",80728680
"/Outbound/DiscoveredPorts/UDP_Port_2004",3252964
"/Outbound/DiscoveredPorts/UDP_Port_20100",17820184
"/Outbound/DiscoveredPorts/UDP_Port_23000",16130087
"/Outbound/DiscoveredPorts/UDP_Port_2332",12252118
"/Outbound/DiscoveredPorts/UDP_Port_27015",39989775
"/Outbound/DiscoveredPorts/UDP_Port_2859",2218908
"/Outbound/DiscoveredPorts/UDP_Port_2923",280307821
"/Outbound/DiscoveredPorts/UDP_Port_376",73253928
"/Outbound/DiscoveredPorts/UDP_Port_4000",52039778
"/Outbound/DiscoveredPorts/UDP_Port_4246",972258
"/Outbound/DiscoveredPorts/UDP_Port_47624",51537750
"/Outbound/DiscoveredPorts/UDP_Port_5555",20707594
"/Outbound/DiscoveredPorts/UDP_Port_6112",39607331
"/Outbound/DiscoveredPorts/UDP_Port_6127",39389202
"/Outbound/DiscoveredPorts/UDP_Port_6669",121629259
"/Outbound/DiscoveredPorts/UDP_Port_6770",17861222
"/Outbound/DiscoveredPorts/UDP_Port_6970",14706204179
"/Outbound/DiscoveredPorts/UDP_Port_7674",69275497
"/Outbound/DiscoveredPorts/UDP_Port_8084",4402796
"/Outbound/Default",4105623519032

-------------

Client 2 - major university

PacketShaper# part show

Partition name          Size          Grntd       Prior       Curr  1-Min
                         Min /  Max          Excess      Usage       Avg   Peak
-------------------------------------------------------------------------------
/Inbound               140.0M 140.0M     0  50.0M 68.6M118.6M 94.9M 95.3M148.6M
  /Inbound/traceroute_de10
                          250k
140.0M*    0     0     0     0     0     0     0
  /Inbound/File-Sharing     0   50.0M     0  50.0M    0  50.0M 43.5M 43.5M
51.4M
  /Inbound/GRE            5.0M 140.0M*    0     0  62.0k 62.0k 70.3k 66.7k
10.5M
  /Inbound/PPTP           5.0M 140.0M*    0     0  53.2k 53.2k 14.4k
23.2k  4.5M
  /Inbound/ICMP           250k 140.0M*    0     0   129k  129k 96.0k
47.7k  4.5M
  /Inbound/Telnet        10.0M 140.0M*    0     0  18.9k 18.9k 16.2k
14.7k  6.9M
  /Inbound/SSH           10.0M 140.0M*    0     0  52.7k 52.7k 32.6k 47.7k
10.0M

-------------------------------------------------------------------------------
/Outbound              140.0M 140.0M     0  52.0M 86.9M138.9M 91.4M 91.8M145.3M
  /Outbound/traceroute_de10
                          250k
140.0M*    0     0     0     0     0     0   136
  /Outbound/File-Sharing    0   45.0M     0   1.1M    0   1.1M  6.6M  6.9M
45.7M
  /Outbound/Default         0   50.0M     0     0  47.9M 47.9M 41.6M 42.0M
51.4M
  /Outbound/GRE          10.0M
140.0M*    0     0   233k  233k  371k  202k  8.4M
  /Outbound/PPTP          5.0M
140.0M*    0     0  1024  1024  1151  1716   1.9M
  /Outbound/ICMP/Default  250k
140.0M*    0     0   3.9M  3.9M  3.0M  3.1M  6.4M
  /Outbound/Telnet       10.0M 140.0M*    0     0  25.6k 25.6k 19.4k
20.2k  1.6M
  /Outbound/SSH          10.0M 140.0M*    0     0   147k  147k 39.0k 51.5k
11.9M

PacketShaper# me dump class all inbound by element 30d bytes
"time:13-Oct-2002 00:00:00"
"class","bytes"
"/Inbound/Localhost",5269190
"/Inbound/SameSide",1927216
"/Inbound/GRE",24887467708
"/Inbound/localRouterMgmt",3102
"/Inbound/salsa",1812080316
"/Inbound/traceroute_de10",5595643
"/Inbound/SideCar",1275756764
"/Inbound/AFP",3018778582
"/Inbound/AFS",1217349049
"/Inbound/ATSTCP",2515156473
"/Inbound/BackWeb",74102497
"/Inbound/BGP",31161
"/Inbound/ccMail",2211179787
"/Inbound/Chaincast",2363587925
"/Inbound/CORBA",126642928
"/Inbound/FileMaker",1414257525
"/Inbound/Quake/Quake_kvr5",58313294
"/Inbound/Quake/Default",4658757675
"/Inbound/HTTP/request",289755852177
"/Inbound/HTTP/Internet",6808853903014
"/Inbound/Ident",3130017404
"/Inbound/IPP",597450
"/Inbound/IRC",280767200363
"/Inbound/L2TP",167748532
"/Inbound/LDAP",308178139
"/Inbound/Marimba",1508028740
"/Inbound/MCK-Signaling",1274244079
"/Inbound/MPEG-Audio",53735644106
"/Inbound/MPEG-Video",136863047765
"/Inbound/MSN-Messenger",4241822375
"/Inbound/MSSQL",4752083119
"/Inbound/Net2Phone",143883829
"/Inbound/NNTP",951229032356
"/Inbound/Oracle",9767323681
"/Inbound/POP3",25452832310
"/Inbound/Citrix/Default",2840219110
"/Inbound/CitrixIMA",18501137481
"/Inbound/DHCP",0
"/Inbound/Doom",54440981
"/Inbound/EntryPoint",64811421
"/Inbound/Finger",167520208
"/Inbound/FTP",1115085958256
"/Inbound/Groupwise",1532542750
"/Inbound/Half-Life",30774688490
"/Inbound/IMAP",2686392441
"/Inbound/Kerberos",698175137
"/Inbound/lockd",86289875
"/Inbound/NTP",12516133849
"/Inbound/PPTP",483878661
"/Inbound/QuickTime",144016541564
"/Inbound/RADIUS",193842621
"/Inbound/RC5DES",701836772
"/Inbound/RDP",9509733512
"/Inbound/Real",259880783051
"/Inbound/rexec",7083180
"/Inbound/RTCP-I",329221103
"/Inbound/RTP-I",25698893119
"/Inbound/SHARESUDP",29827246
"/Inbound/Shoutcast",353544939979
"/Inbound/SMTP",357527215341
"/Inbound/SNMP",410044818
"/Inbound/SOCKS",3175489380
"/Inbound/SSH",46372537769
"/Inbound/SSL",98508902739
"/Inbound/T.120",1411371401
"/Inbound/Telnet",6116909572
"/Inbound/Timbuktu",19232478273
"/Inbound/tn3270",19075062
"/Inbound/VNC",7228096876
"/Inbound/Webshots",2862921801
"/Inbound/WHOIS",184238433
"/Inbound/WinMedia",740020265296
"/Inbound/XWindows",962671000
"/Inbound/YahooGames",1909069694
"/Inbound/YahooMsg",887350395
"/Inbound/AOL-IM-ICQ",275990817052
"/Inbound/Battle.net",13154790490
"/Inbound/Day-Time",209053254
"/Inbound/DCOM",6972025906
"/Inbound/DNS",26743599855
"/Inbound/Echo",213611551
"/Inbound/File-Sharing/WinMX_de10",25567515346
"/Inbound/File-Sharing/Wnn6",3745944779
"/Inbound/File-Sharing/KDX_custom",19656732952
"/Inbound/File-Sharing/Aimster",883896398
"/Inbound/File-Sharing/Audiogalaxy",17836564
"/Inbound/File-Sharing/DirectConnect",400541554642
"/Inbound/File-Sharing/eDonkey",431990620801
"/Inbound/File-Sharing/Gnutella",1010072138337
"/Inbound/File-Sharing/Hotline",47945464713
"/Inbound/File-Sharing/KaZaA/download",7273784359179
"/Inbound/File-Sharing/KaZaA/upload",52862071118
"/Inbound/File-Sharing/KaZaA/Default",2086320927210
"/Inbound/File-Sharing/Napster",624288999030
"/Inbound/File-Sharing/Blubster",9164357409
"/Inbound/File-Sharing/Groove",6100599
"/Inbound/H.323",2731767802
"/Inbound/ISAKMP",127148597
"/Inbound/Kontiki",454391662
"/Inbound/MeetingMaker",57048197
"/Inbound/Microsoft-ds",104262861914
"/Inbound/Mythic",2171254745
"/Inbound/NetBIOS-IP",65323647751
"/Inbound/NFS",952984820
"/Inbound/NW5-NCP",33856227
"/Inbound/pcANYWHERE",3427344338
"/Inbound/Printer",29168226
"/Inbound/RTSP",54674710341
"/Inbound/SLP",4355290
"/Inbound/SMS",3263302347
"/Inbound/SonyOnline",1650632345
"/Inbound/StreamWorks",1206328982
"/Inbound/SunRPC",73788271
"/Inbound/TimeServer",2570233027
"/Inbound/WINS",5469639
"/Inbound/ICMP",17393701116
"/Inbound/IGMP",0
"/Inbound/IPSec",12645912684
"/Inbound/OSPF",0
"/Inbound/PIM",0
"/Inbound/Protocol_169-AMP",16207998
"/Inbound/Protocol_41",2746503436
"/Inbound/Protocol_54",191760
"/Inbound/RSVP",4399756
"/Inbound/DiscoveredPorts/Kerberos_msw4",150531625
"/Inbound/DiscoveredPorts/TCP_Port_5001",345143936
"/Inbound/CiscoDiscovery",0
"/Inbound/Protocol_170",8074835
"/Inbound/Protocol_2004",7581913
"/Inbound/SpanningTree",0
"/Inbound/Default",3266222037717

PacketShaper# me dump class all outbound by element 30d bytes
"time:13-Oct-2002 00:00:00"
"class","bytes"
"/Outbound/Localhost",55918120
"/Outbound/SameSide",3474920
"/Outbound/GRE",33283299569
"/Outbound/localRouterMgmt",7567
"/Outbound/salsa",34601312380
"/Outbound/traceroute_de10",1351344
"/Outbound/SideCar",1180141932
"/Outbound/AFP",7359235383
"/Outbound/AFS",881227536
"/Outbound/ATSTCP",1526563677
"/Outbound/BackWeb",57167091
"/Outbound/BGP",28433
"/Outbound/ccMail",1846744784
"/Outbound/Chaincast",73535820
"/Outbound/CitrixIMA",41118231994
"/Outbound/CORBA",464812513
"/Outbound/DHCP",0
"/Outbound/Doom",76202836
"/Outbound/EntryPoint",4790661
"/Outbound/FileMaker",605087494
"/Outbound/Finger",657574595
"/Outbound/FTP",3924586514261
"/Outbound/Groupwise",1235085825
"/Outbound/Half-Life",19578806341
"/Outbound/Quake/Quake_kvr5",0
"/Outbound/Quake/Default",4222317204
"/Outbound/HTTP/reply/res_halls",0
"/Outbound/HTTP/reply/Default",940813753912
"/Outbound/HTTP/Internet",698432097235
"/Outbound/Ident",440608796
"/Outbound/IMAP",5291853854
"/Outbound/L2TP",42470383
"/Outbound/LDAP",792003477
"/Outbound/Marimba",63942118
"/Outbound/MCK-Signaling",1873885225
"/Outbound/MPEG-Audio",10855000342
"/Outbound/MPEG-Video",24142514255
"/Outbound/MSN-Messenger",8154283679
"/Outbound/MSSQL",20341862706
"/Outbound/Net2Phone",124566016
"/Outbound/NNTP",31386951031
"/Outbound/Oracle",18655410798
"/Outbound/POP3",271406521229
"/Outbound/Citrix/Default",3761969711
"/Outbound/IPP",911529
"/Outbound/Kerberos",677986786
"/Outbound/lockd",12302560
"/Outbound/NTP",12476514865
"/Outbound/PPTP",802484066
"/Outbound/QuickTime",21768158684
"/Outbound/RADIUS",55583927
"/Outbound/RC5DES",2374821472
"/Outbound/RDP",13521550631
"/Outbound/Real",16764124516
"/Outbound/rexec",3102866
"/Outbound/RTCP-I",361309026
"/Outbound/RTP-I",24367860635
"/Outbound/SHARESUDP",19745927
"/Outbound/Shoutcast",13048866134
"/Outbound/SMTP",266388221717
"/Outbound/SNMP",355755460
"/Outbound/SOCKS",40889846855
"/Outbound/SSH",96359125886
"/Outbound/SSL",56951437707
"/Outbound/Syslog",738659
"/Outbound/T.120",6669972719
"/Outbound/Telnet",8947249062
"/Outbound/Timbuktu",92062021437
"/Outbound/tn3270",160750338
"/Outbound/VNC",29615386202
"/Outbound/Webshots",62064550
"/Outbound/WHOIS",45028222
"/Outbound/WinMedia",27362529189
"/Outbound/XWindows",6672458162
"/Outbound/YahooGames",1223411541
"/Outbound/YahooMsg",444760490
"/Outbound/AOL-IM-ICQ",287538661666
"/Outbound/Battle.net",6990224435
"/Outbound/Day-Time",106416992
"/Outbound/DCOM",27038633363
"/Outbound/DNS",26615697048
"/Outbound/Echo",521868086
"/Outbound/File-Sharing/WinMX_de10",27160845561
"/Outbound/File-Sharing/Wnn6",3516523506
"/Outbound/File-Sharing/KDX_custom",424609553560
"/Outbound/File-Sharing/Aimster",270192676
"/Outbound/File-Sharing/Audiogalaxy",20686147
"/Outbound/File-Sharing/DirectConnect",551165400354
"/Outbound/File-Sharing/eDonkey",586174798625
"/Outbound/File-Sharing/Gnutella",964510081653
"/Outbound/File-Sharing/Hotline",51908033554
"/Outbound/File-Sharing/IRC",2917420684590
"/Outbound/File-Sharing/KaZaA/download",162461483374
"/Outbound/File-Sharing/KaZaA/upload",1177800829675
"/Outbound/File-Sharing/KaZaA/Default",3438397155521
"/Outbound/File-Sharing/Napster",612844823508
"/Outbound/File-Sharing/Blubster",12993031493
"/Outbound/File-Sharing/Groove",6984224
"/Outbound/H.323",5359509819
"/Outbound/ISAKMP",283534578
"/Outbound/Kontiki",1683612343
"/Outbound/MeetingMaker",900292254
"/Outbound/Microsoft-ds",138505869360
"/Outbound/Mythic",378062025
"/Outbound/NetBIOS-IP",51521655350
"/Outbound/NFS",2820045314
"/Outbound/NW5-NCP",146655029
"/Outbound/pcANYWHERE",2708993997
"/Outbound/Printer",17200365
"/Outbound/RTSP",6700437003
"/Outbound/SLP",5008430
"/Outbound/SMS",5954632358
"/Outbound/SonyOnline",433398181
"/Outbound/StreamWorks",3829366287
"/Outbound/SunRPC",40216318
"/Outbound/TimeServer",2843282610
"/Outbound/WINS",5495031
"/Outbound/ICMP/ICMP-bulk",7320578
"/Outbound/ICMP/Default",97978223622
"/Outbound/IGMP",12462326
"/Outbound/IPSec",4616617259
"/Outbound/OSPF",0
"/Outbound/PIM",0
"/Outbound/Protocol_169-AMP",1310244
"/Outbound/Protocol_41",9972322251
"/Outbound/RSVP",3722998
"/Outbound/DiscoveredPorts/Kerberos_msw4",221659301
"/Outbound/DiscoveredPorts/TCP_Port_21",327056152
"/Outbound/DiscoveredPorts/Slapper_UDP_2002",3264114041
"/Outbound/CiscoDiscovery",0
"/Outbound/MOP-RC",1115595
"/Outbound/Protocol_170",8076057
"/Outbound/Protocol_2004",7582406
"/Outbound/SpanningTree",0
"/Outbound/Default",8027415402786

Client 3 - major university

PacketShaper# part show

Partition name          Size          Grntd       Prior       Curr  1-Min
                         Min /  Max          Excess      Usage       Avg   Peak
-------------------------------------------------------------------------------
/Inbound               200.0M 200.0M     0  41.9M 78.1M120.0M 99.3M 99.9M136.2M
  /Inbound/P2P1/Gnutella-Init
                          2.0M   2.0M*    0     0  20.0k 20.0k 47.0k
44.3k  1.3M
  /Inbound/P2P1/Gnutella-Download
                         10.0M  10.0M*    0   4.0M    0   4.0M  803k  743k
8.0M
  /Inbound/P2P1/KaZaA-Cmd
                          3.0M   3.0M*    0     0   2.8M  2.8M  2.1M  2.1M
4.1M
  /Inbound/P2P1/Gnutella-Cmd
                          3.0M   3.0M*    0     0   3.0M  3.0M  2.8M  2.8M
4.0M
  /Inbound/P2P2           9.0M   9.0M*    0   9.0M 1792   9.0M  4.4M  4.4M
10.5M

-------------------------------------------------------------------------------
/Outbound              200.0M 200.0M     0  14.9M 36.8M 51.7M 59.4M 57.4M207.4M
  /Outbound/P2P1/Gnutella-Init
                          2.0M   2.0M*    0     0  9728  9728  38.4k
35.7k  840k
  /Outbound/P2P1/Gnutella-Upload
                          2.0M   2.0M*    0   2.0M    0   2.0M  2.0M  2.0M
3.0M
  /Outbound/P2P1/Gnutella-Cmd
                          3.0M   3.0M*    0     0   3.0M  3.0M  3.0M  3.0M
4.0M
  /Outbound/P2P1/KaZaA-Cmd
                          3.0M   3.0M*    0     0   2.6M  2.6M  2.7M  2.9M
5.0M
  /Outbound/P2P2          3.0M   3.0M*    0   3.0M
4352   3.0M  2.6M  2.5M  4.0M

PacketShaper# me dump class all inbound by element 14d bytes
"time:28-Oct-2002 23:00:01"
"class","bytes"
"/Inbound/Localhost",4603556
"/Inbound/SameSide",37959102
"/Inbound/Critical_Applications/FTP",451603780217
"/Inbound/Critical_Applications/HTTP",2374318201372
"/Inbound/Critical_Applications/SSL",47252299924
"/Inbound/Mail/ccMail",1010870952
"/Inbound/Mail/IMAP",535187034
"/Inbound/Mail/POP3",9675375807
"/Inbound/Mail/SMTP",35628598035
"/Inbound/P2P1/Gnutella-Cmd",264555565312
"/Inbound/P2P1/Gnutella-Download",61372722537
"/Inbound/P2P1/Gnutella-Init",5814075924
"/Inbound/P2P1/Gnutella-Upload",3960215417
"/Inbound/P2P1/KaZaA-Cmd",95353221320
"/Inbound/P2P1/KaZaA-Download",1596535302870
"/Inbound/P2P1/KaZaA-Query",11320677338
"/Inbound/P2P1/KaZaA-Upload",211055232272
"/Inbound/P2P3/Aimster-Cmd",64564376
"/Inbound/P2P3/Aimster-Data",375970439
"/Inbound/P2P3/Aimster-Init",125854
"/Inbound/P2P3/Audiogalaxy",180108197
"/Inbound/P2P3/DirectConnect",107825404509
"/Inbound/P2P3/FileRogue",0
"/Inbound/P2P3/Hotline-TCP",861473645
"/Inbound/P2P3/Hotline-UDP",13287
"/Inbound/P2P3/iMesh",0
"/Inbound/P2P3/Scour-CSC",7379315
"/Inbound/P2P3/Scour-Web",10105
"/Inbound/Voice-Video-R/MPEG-Audio",49152746262
"/Inbound/Voice-Video-R/MPEG-Video",93925086670
"/Inbound/Voice-Video-R/QuickTime",65552955509
"/Inbound/Voice-Video-R/Real",168927336530
"/Inbound/Voice-Video-R/Shoutcast",126889664561
"/Inbound/Voice-Video-R/WinMedia",261459733953
"/Inbound/Games/AsheronsCall",2213298529
"/Inbound/Games/Half-Life",22228715113
"/Inbound/Games/Kali",81060328
"/Inbound/Games/LucasArts",235664428
"/Inbound/Games/Quake",968668314
"/Inbound/Games/Unreal",4101069519
"/Inbound/Games/YahooGames",1174995894
"/Inbound/Games/Battle.net",2222908729
"/Inbound/Games/Mythic",2780960709
"/Inbound/Games/SonyOnline",2281291527
"/Inbound/Games/Tribes",908119508
"/Inbound/Messaging/AOL-IM-File",65857215425
"/Inbound/Messaging/IRC",2870010169
"/Inbound/Messaging/IRC-DCC",113893424582
"/Inbound/Messaging/MSN-Messenger",2730811580
"/Inbound/Messaging/YahooMsg",256450421
"/Inbound/Messaging/AOL-IM-ICQ",116674271510
"/Inbound/P2P2/eDonkey-Ping",52250878
"/Inbound/P2P2/eDonkey-TCP",56845953478
"/Inbound/P2P2/Furthurnet",22227361865
"/Inbound/P2P2/Napster-Cmd",251389466
"/Inbound/P2P2/Napster-Data",237125842455
"/Inbound/P2P2/Napster-Init",17214
"/Inbound/P2P2/Blubster",10264093045
"/Inbound/Terminal_Services/ATSTCP",42784765
"/Inbound/Terminal_Services/RDP",1374633723
"/Inbound/Terminal_Services/rlogin",11644202
"/Inbound/Terminal_Services/rsh",8384
"/Inbound/Terminal_Services/Telnet",5484559900
"/Inbound/Terminal_Services/Timbuktu",3416984369
"/Inbound/Terminal_Services/tn3270",55003849
"/Inbound/Terminal_Services/tn5250",0
"/Inbound/Terminal_Services/VNC",149975073
"/Inbound/Terminal_Services/XWindows",172661464
"/Inbound/Terminal_Services/pcANYWHERE",563339708
"/Inbound/Voice-Video-NR/CUSeeMe",53504552
"/Inbound/Voice-Video-NR/Net2Phone",31292594
"/Inbound/Voice-Video-NR/RTP-I",12884000059
"/Inbound/Voice-Video-NR/T.120",1210989899
"/Inbound/Voice-Video-NR/VDOPhone",5805713
"/Inbound/Voice-Video-NR/Dialpad",267797
"/Inbound/Voice-Video-NR/H.323",1553280634
"/Inbound/Voice-Video-NR/RTSP",1192753338
"/Inbound/Voice-Video-NR/StreamWorks",303276705
"/Inbound/Mgmt-Config/DHCP",199456
"/Inbound/Mgmt-Config/Finger",161358010
"/Inbound/Mgmt-Config/Gopher",19767154
"/Inbound/Mgmt-Config/Ident",3623912937
"/Inbound/Mgmt-Config/LDAP",17738909
"/Inbound/Mgmt-Config/NTP",37189109
"/Inbound/Mgmt-Config/rwho",816106
"/Inbound/Mgmt-Config/SNMP",258365063
"/Inbound/Mgmt-Config/SSDP",5410276
"/Inbound/Mgmt-Config/WHOIS",27594742
"/Inbound/Mgmt-Config/DNS",7160927105
"/Inbound/Mgmt-Config/RIP",940
"/Inbound/Mgmt-Config/TimeServer",40068210
"/Inbound/Mgmt-Config/WINS",2033834
"/Inbound/Mgmt-Config/ICMP",4915621504
"/Inbound/Mgmt-Config/IGMP",4182013
"/Inbound/Mgmt-Config/PIM",2774971
"/Inbound/Mgmt-Config/RSVP",110842
"/Inbound/Other/AFP",3261755738
"/Inbound/Other/AFS",20149893
"/Inbound/Other/BackWeb",68923333
"/Inbound/Other/CIFS-TCP",1070910074
"/Inbound/Other/Citrix/Citrix-PEOPLESOFT_PRODUCTION_DA",1432935
"/Inbound/Other/Citrix/Default",1254622907
"/Inbound/Other/DLS",422361044
"/Inbound/Other/EntryPoint",306163563
"/Inbound/Other/FileMaker",419281730
"/Inbound/Other/Groupwise",171144212
"/Inbound/Other/IPP",6133630
"/Inbound/Other/JavaRMI",250210653
"/Inbound/Other/lockd",15256654
"/Inbound/Other/LotusNotes",243453067
"/Inbound/Other/Marimba",1663752640
"/Inbound/Other/MCK-Signaling",3147468916
"/Inbound/Other/MSSQL",4934473941
"/Inbound/Other/NNTP",165197409450
"/Inbound/Other/NW5-CMD",193272579
"/Inbound/Other/Oracle",6439139954
"/Inbound/Other/OracleClient",1850262
"/Inbound/Other/OracleEM",781280692
"/Inbound/Other/PEPGate",75526543
"/Inbound/Other/Persona",1407059954
"/Inbound/Other/RTCP-I",100031287
"/Inbound/Other/SHARESUDP",22626230
"/Inbound/Other/SMS",2015088000
"/Inbound/Other/Syslog",158154
"/Inbound/Other/WebEx",16375494
"/Inbound/Other/Webshots",225729690
"/Inbound/Other/CU-DEV",8582064
"/Inbound/Other/CVSup",135652966
"/Inbound/Other/Day-Time",457296360
"/Inbound/Other/DCOM",243349498
"/Inbound/Other/Echo",66498263
"/Inbound/Other/Groove",0
"/Inbound/Other/Kontiki",262235573
"/Inbound/Other/Microsoft-ds",2448955998
"/Inbound/Other/MSSQ",3136758804
"/Inbound/Other/NetBIOS-IP",10578716436
"/Inbound/Other/NFS",4563586138
"/Inbound/Other/NW5-NCP",685715
"/Inbound/Other/Printer",509311
"/Inbound/Other/SLP",5361827
"/Inbound/Other/SunRPC",20601707
"/Inbound/Other/Protocol_169",154688786
"/Inbound/Other/Protocol_54",19650
"/Inbound/Secure_Services/GRE",698221509
"/Inbound/Secure_Services/Kerberos",6740318
"/Inbound/Secure_Services/L2TP",45452570
"/Inbound/Secure_Services/PPTP",159828631
"/Inbound/Secure_Services/RADIUS",79169233
"/Inbound/Secure_Services/RC5DES",886491949
"/Inbound/Secure_Services/SSH",7067717369
"/Inbound/Secure_Services/ISAKMP",91169932
"/Inbound/Secure_Services/IPSec",1354534608
"/Inbound/DiscoveredPorts/Mcast2",110659904373
"/Inbound/DiscoveredPorts/Mcast1",2914334549589
"/Inbound/Default",865118208331

PacketShaper# me dump class all outbound by element 14d bytes
"time:28-Oct-2002 23:00:01"
"class","bytes"
"/Outbound/Localhost",14198894
"/Outbound/SameSide",13155495
"/Outbound/Critical_Applications/FTP",159401337555
"/Outbound/Critical_Applications/HTTP",705941567579
"/Outbound/Critical_Applications/SSL",44009854795
"/Outbound/Mail/ccMail",13139129198
"/Outbound/Mail/IMAP",1797914739
"/Outbound/Mail/POP3",11685778046
"/Outbound/Mail/SMTP",33806379893
"/Outbound/P2P1/Gnutella-Cmd",278224811847
"/Outbound/P2P1/Gnutella-Download",1785967822
"/Outbound/P2P1/Gnutella-Init",5482315153
"/Outbound/P2P1/Gnutella-Upload",139227207983
"/Outbound/P2P1/KaZaA-Cmd",135458453344
"/Outbound/P2P1/KaZaA-Download",48175541015
"/Outbound/P2P1/KaZaA-Query",9645843514
"/Outbound/P2P1/KaZaA-Upload",2698416692078
"/Outbound/P2P3/Aimster-Cmd",47752928
"/Outbound/P2P3/Aimster-Data",516471222
"/Outbound/P2P3/Aimster-Init",91244
"/Outbound/P2P3/Audiogalaxy",49475045
"/Outbound/P2P3/DirectConnect",85999241138
"/Outbound/P2P3/FileRogue",0
"/Outbound/P2P3/Hotline-TCP",128545654
"/Outbound/P2P3/Hotline-UDP",44388
"/Outbound/P2P3/iMesh",0
"/Outbound/P2P3/Scour-CSC",24749143
"/Outbound/P2P3/Scour-Web",12805
"/Outbound/Voice-Video-R/MPEG-Audio",4457607886
"/Outbound/Voice-Video-R/MPEG-Video",5429672257
"/Outbound/Voice-Video-R/QuickTime",24608217860
"/Outbound/Voice-Video-R/Real",9241093420
"/Outbound/Voice-Video-R/Shoutcast",8815243651
"/Outbound/Voice-Video-R/WinMedia",13078855054
"/Outbound/Games/AsheronsCall",729297960
"/Outbound/Games/Half-Life",16766466096
"/Outbound/Games/Kali",13637492
"/Outbound/Games/LucasArts",146672792
"/Outbound/Games/Quake",722884583
"/Outbound/Games/Unreal",3026783769
"/Outbound/Games/YahooGames",777825438
"/Outbound/Games/Battle.net",1259995159
"/Outbound/Games/Mythic",515990629
"/Outbound/Games/SonyOnline",491783925
"/Outbound/Games/Tribes",1033421305
"/Outbound/Messaging/AOL-IM-File",124982598262
"/Outbound/Messaging/IRC",802178325
"/Outbound/Messaging/IRC-DCC",193715086500
"/Outbound/Messaging/MSN-Messenger",1386353439
"/Outbound/Messaging/YahooMsg",130472695
"/Outbound/Messaging/AOL-IM-ICQ",41319025869
"/Outbound/P2P2/eDonkey-Ping",179635282
"/Outbound/P2P2/eDonkey-TCP",58939538563
"/Outbound/P2P2/Furthurnet",18919044613
"/Outbound/P2P2/Napster-Cmd",127819141
"/Outbound/P2P2/Napster-Data",187973086595
"/Outbound/P2P2/Napster-Init",9142
"/Outbound/P2P2/Blubster",15553891452
"/Outbound/Terminal_Services/ATSTCP",65349387
"/Outbound/Terminal_Services/RDP",1841530538
"/Outbound/Terminal_Services/rlogin",8139631
"/Outbound/Terminal_Services/rsh",6921
"/Outbound/Terminal_Services/Telnet",2740337650
"/Outbound/Terminal_Services/Timbuktu",2869905944
"/Outbound/Terminal_Services/tn3270",103053680
"/Outbound/Terminal_Services/tn5250",0
"/Outbound/Terminal_Services/VNC",286801914
"/Outbound/Terminal_Services/XWindows",583468837
"/Outbound/Terminal_Services/pcANYWHERE",1380988898
"/Outbound/Voice-Video-NR/CUSeeMe",44294395
"/Outbound/Voice-Video-NR/Net2Phone",16521949
"/Outbound/Voice-Video-NR/RTP-I",11565149219
"/Outbound/Voice-Video-NR/T.120",1274733567
"/Outbound/Voice-Video-NR/VDOPhone",31913037
"/Outbound/Voice-Video-NR/Dialpad",320676
"/Outbound/Voice-Video-NR/H.323",1398552398
"/Outbound/Voice-Video-NR/RTSP",30824299
"/Outbound/Voice-Video-NR/StreamWorks",259466827
"/Outbound/Mgmt-Config/DHCP",187226
"/Outbound/Mgmt-Config/Finger",46933433
"/Outbound/Mgmt-Config/Gopher",12158005
"/Outbound/Mgmt-Config/Ident",1022086235
"/Outbound/Mgmt-Config/LDAP",37414658
"/Outbound/Mgmt-Config/NTP",45333565
"/Outbound/Mgmt-Config/rwho",643075
"/Outbound/Mgmt-Config/SNMP",245673903
"/Outbound/Mgmt-Config/SSDP",4455344
"/Outbound/Mgmt-Config/WHOIS",11296617
"/Outbound/Mgmt-Config/DNS",5013694369
"/Outbound/Mgmt-Config/RIP",2115
"/Outbound/Mgmt-Config/TimeServer",22610473
"/Outbound/Mgmt-Config/WINS",1934785
"/Outbound/Mgmt-Config/ICMP",4402154519
"/Outbound/Mgmt-Config/IGMP",47
"/Outbound/Mgmt-Config/PIM",20038759
"/Outbound/Mgmt-Config/RSVP",4018640
"/Outbound/Other/AFP",5758205932
"/Outbound/Other/AFS",1329119
"/Outbound/Other/BackWeb",46629700
"/Outbound/Other/CIFS-TCP",5493656659
"/Outbound/Other/Citrix/Citrix-PEOPLESOFT_PRODUCTION_DA",1043542
"/Outbound/Other/Citrix/Default",6549402393
"/Outbound/Other/DLS",351288673
"/Outbound/Other/EntryPoint",22829385
"/Outbound/Other/FileMaker",19612477
"/Outbound/Other/Groupwise",197184078
"/Outbound/Other/IPP",7966920
"/Outbound/Other/JavaRMI",772115683
"/Outbound/Other/lockd",7477052
"/Outbound/Other/LotusNotes",444379993
"/Outbound/Other/Marimba",41286924
"/Outbound/Other/MCK-Signaling",522352061
"/Outbound/Other/MSSQL",1450217652
"/Outbound/Other/NNTP",4385415598
"/Outbound/Other/NW5-CMD",146933443
"/Outbound/Other/Oracle",12248175121
"/Outbound/Other/OracleClient",458100
"/Outbound/Other/OracleEM",935022106
"/Outbound/Other/PEPGate",33915851
"/Outbound/Other/Persona",5657514773
"/Outbound/Other/RTCP-I",90980936
"/Outbound/Other/SHARESUDP",10069919
"/Outbound/Other/SMS",3450585966
"/Outbound/Other/Syslog",3113597
"/Outbound/Other/WebEx",6890878
"/Outbound/Other/Webshots",13242133
"/Outbound/Other/CU-DEV",3707084
"/Outbound/Other/CVSup",170607389
"/Outbound/Other/Day-Time",121763417
"/Outbound/Other/DCOM",360778893
"/Outbound/Other/Echo",32334156
"/Outbound/Other/Groove",0
"/Outbound/Other/Kontiki",2155729412
"/Outbound/Other/Microsoft-ds",2716185498
"/Outbound/Other/MSSQ",7853181085
"/Outbound/Other/NetBIOS-IP",5909575896
"/Outbound/Other/NFS",4259797440
"/Outbound/Other/NW5-NCP",1697189
"/Outbound/Other/Printer",1359127
"/Outbound/Other/SLP",2332423
"/Outbound/Other/SunRPC",882013
"/Outbound/Other/Protocol_169",162564754
"/Outbound/Other/Protocol_54",1329230
"/Outbound/Secure_Services/GRE",2021284179
"/Outbound/Secure_Services/Kerberos",6307162
"/Outbound/Secure_Services/L2TP",55637355
"/Outbound/Secure_Services/PPTP",200182016
"/Outbound/Secure_Services/RADIUS",28323008
"/Outbound/Secure_Services/RC5DES",8658857277
"/Outbound/Secure_Services/SSH",10545423361
"/Outbound/Secure_Services/ISAKMP",89158267
"/Outbound/Secure_Services/IPSec",551933351
"/Outbound/DiscoveredPorts/UDP_Port_8481",98394209
"/Outbound/Default",912266811316

At 08:47 AM 11/10/2002 -0800, Bill Woodcock wrote:

>Any really rough guess what portion of Internet traffic is VoIP or live
>video?
>
>                                 -Bill
>
>
>---------- Forwarded message ----------
>Date: Sun, 10 Nov 2002 08:28:05 -0500
>From: RJ Atkinson <[email-masked]>
>To: "Nguyen, An" <[email-masked]>
>Cc: ieprep <[email-masked]>
>Subject: [Ieprep] network congestion, VoIP, NCS contracting approach, etc.
>
>
>On Saturday, Nov 9, 2002, at 20:00 America/Montreal, Nguyen, An wrote:
> > When the 9/11 happened last year, the internet traffic was fine in
> > general
> > according to you and others. Do you have any rough number on how much
> > of it
> > was time-sensitive ( e.g., voiceIP, video, etc.) traffic?
>
>I haven't seen any *good* measured statistics on which applications
>consume
>what % of (packets, bytes) since I stopped working for an ISP.
>
> > I guess the percentage of time-sensitive must have been very little
> > compared to
> > time-insensitive data traffic such as web, email, and others. My
> > thinking is
> > when people surf the web or send an email, they don't care much if
> > there are
> > congestions in the networks because they commonly accept it as the way
> > the
> > internet works.
>
>Ah.   The measured data from 9/11 did measure potential congestion.  It
>was
>miniscule inside the Internet.  The measured data indicates that there
>WERE
>problems with server performance of some popular web servers; -- those
>content
>providers ripped graphics off their web pages moving to HTML only, then
>reconfigured/added servers, and eventually solved those content server
>issues
>on that day.
>
> > But when it comes to voice traffic, it is a totally
> > different matter ( very noticeable as you and I experience it with the
> > cellular phone).
>
>I used inter-domain VoIP on the morning of 9/11 and did not experience
>any problems.  Note that one end of that link was in the Reston area,
>transiting MAE-East on its way to MAE-West, with the other end in
>Silicon
>Valley.  That's only one sample, admittedly, but it is a sample that is
>entirely consistent with the actual measured data on network behaviour
>during 9/11.
>
>If the Internet had broken on 9/11, which it emphatically did not (as
>measured data clearly shows), then an argument to change the way ISPs
>deploy their network might be more persuasive.  Since that did NOT
>happen,
>there is very good reason to continue to use what clearly worked well
>under unusual circumstances.   (Since it isn't broken, why change it.)
>
> > This leads me to ask you, Bill, and others another
> > question: do you foresee that the Internet will be use to  transport
> > most of
> > voice traffic and other time-sensitive applications and eventually will
> > replace POTS network because of its ubiquity?
>
>I seriously doubt that the PSTN will ever be replaced by a VoIP network.
>I think VoIP is more likely to be used within a campus or to build
>relatively small-scale (compared with PSTN) intra-organisational
>cost-optimised
>toll bypass.  And I think those campus phone switches will continue
>to have traditional PSTN interfaces.  If nothing else, that will be
>needed
>to contact folks who are off-the-VoIP-network (e.g. customers, mobile
>phone
>users) and take incoming calls from the PSTN.
>
>My employer uses VoIP and lease-lines to bypass long-distance toll
>charges
>on some intra-company links, but we use a huge amount of PSTN also.
>The DoD's
>AutoVON/DSN does the same (no VoIP, due to JCS directive, but private
>connectivity
>for sure), yet DoD still uses a huge amount of PSTN.  So does GE's
>corporate
>phone network.  Bypasses such as the one that GE built/uses have been
>around
>for many many years, yet have not affected growth of the PSTN.
>
>[Aside: I'm aware of DISA's use of VoIP at Skyline and also that not all
>residents of Skyline like it;  (ironic quote of the day from earlier in
>2002
>from someone who works there:  "The beauty of VoIP is that when the
>data network
>is down, one can't report the outage to the network support staff.")]
>
>The PSTN has the advantage that it is overwhelmingly one application,
>voice,
>which is well characterised and predictable, so it can (and does)
>optimise its
>network design/deployment for that one application.
>
>The Internet will never have the luxury of only supporting a single
>application
>in that way, so the Internet will need to continue to have a different
>kind
>of design approach.
>
> > NCSs's mission is to ensure that communications are available during
> > emergency and crisis. We need to communicate with others when emergency
> > occurs. And when emergency happens in an area, traffic congestions are
> > likely to occur. So, without some sort of priority treatment for NS/EP
> > traffic, it's extremely hard for us to fulfill our mission.
>
>Prioritisation is a mechanism.  The NCS mission, as you state, is to
>ensure communications availability.  NCS ought not care which mechanism
>is used, provided that communications remain available.
>
>Over-provisioning is a different mechanism, commonly used today (max
>link
>utilisation equal to 30% of link capacity is typical among the ISPs I
>was talking
>with last Thursday),  to ensure that packets don't get lost in the
>network,
>because it is cheaper than deploying something like DiffServ.  Other
>mechanisms
>also exist.
>
>[ASIDE:         So far, each time there has been a press release or article
>claiming that ISP <x> has deployed DiffServ throughout its network,
>when I
>have tracked down the facts of the matter it has turned out to be
>marketing
>or press confusion unrelated to the actual operational network.  It
>would be
>VERY helpful if any ISP would make a public presentation at NANOG/RIPE
>about
>their deployment.  So if anyone is at such a place and is listening,
>please
>consider making such a public presentation in detail.]
>
>An alternative perspective is that NCS ought to focus on talking with
>ISPs about
>contracts that have *performance-based* metrics for ensuring network
>availability,
>rather than contracts that require particular mechanisms to be deployed
>(whether or not those mechanisms work in a particular situation).
>
>After all, as long as an ISP that has chosen to provide contracted
>services
>to NCS can provide those services, why should NCS care which
>mechanism(s)
>are used to provide those services ?
>
>This alternative view is consistent with more recent USG contracting
>practices,
>such as the USN outsourcing of its LANs to EDS, where EDS is given
>performance
>metrics to achieve, but has total flexibility in how to meet those
>metrics.
>
>Ran
>[email-masked]
>
>_______________________________________________
>Ieprep mailing list
>[email-masked]
>https://www1.ietf.org/mailman/listinfo/ieprep

_______________________________________________
Ieprep mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ieprep