[31118] in North American Network Operators' Group
Napster.com moved to 64.124.41.0/24?
daemon@ATHENA.MIT.EDU (Dave Plonka)
Mon Sep 11 10:34:50 2000
Date: Mon, 11 Sep 2000 09:31:30 -0500
From: Dave Plonka <plonka@doit.wisc.edu>
To: nanog@merit.edu
Message-ID: <20000911093130.A1475@doit.wisc.edu>
Reply-To: plonka@doit.wisc.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Errors-To: owner-nanog-outgoing@merit.edu
Just FYI,
Last week Friday (2000/09/08 ~0300 CDT), I noticed that Napster.com
moved all of it's advertised server redirectors and servers to a
different network:
64.124.41.0/24
I'm just guessing they're only within the "/24"... the current route
NETBLK-ABOVENET is for 64.124.0.0/16.
The "old" list that I had been working with for detecting Napster flows
was this: 208.49.228.0/24, 208.184.216.0/24, 208.49.239.240/28,
208.178.175.128/29 208.178.163.56/29.
Here's a useful source of info if you want to see where Napster and
work-alike servers are located, a list of "open" servers by IP
address:
http://www.napigator.com/list.php
Anyway, apart from the questionable practice of using these IPs for
access-lists, this information is useful for some of us in the
measurement community to write detectors that are less likely to get
false hits, such as might happen when counting Napster traffic based
solely on TCP port numbers.
There's a post regarding the required change for FlowScan here:
http://net.doit.wisc.edu/~plonka/list/flowscan/archive/0296.html
General FlowScan Napster info is here:
http://net.doit.wisc.edu/data/Napster/
Dave
--
plonka@doit.wisc.edu http://net.doit.wisc.edu/~plonka ARS:N9HZF Madison, WI
