Re: [hackathon] IETF 118 Hackathon: Are long-lived TCP sessions a problem for (DNS) statistics?

Houda CHIHI <houda.chihi@supcom.tn> Wed, 01 November 2023 17:47 UTC

Return-Path: <houda.chihi@supcom.tn>
X-Original-To: hackathon@ietfa.amsl.com
Delivered-To: hackathon@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46D3AC14CF09 for <hackathon@ietfa.amsl.com>; Wed, 1 Nov 2023 10:47:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, T_SCC_BODY_TEXT_LINE=-0.01, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=supcom.onmicrosoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7khjXZznbY4c for <hackathon@ietfa.amsl.com>; Wed, 1 Nov 2023 10:47:15 -0700 (PDT)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on2080.outbound.protection.outlook.com [40.107.8.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D43D2C151996 for <hackathon@ietf.org>; Wed, 1 Nov 2023 10:47:11 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ODPjDaZiMrn2ekJ0qU8pHrhu46CTlg8cbYe/4CvwoHzzRe5qTTJTjqtvEuUzu++Gjk9WVB433bYg9tWheC8aIHrLsf7/5Ls22KnCMZbEXwEr9MTX6hKi/HbK1jQa+NzPmbrhJCrxbW17nTCv1dq20gQVDpcuNmBTaGddPwvbTb8CH9Vt7YIJzGeV3t6eV8IshRHU+MM1ivpZt9XigK62CypQ2dXrbnxizZ0tu7o0f0MP1RMur3ZP4L/wy7Y9VH3CKUFMvWnwYyt6cq5iNBdug0rqntq2oNT+o/JEpMmxzDA2nfVSLA6QqkiJP8HMGT+6iR8XuwNh3aEha640215SYw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=9jLV3jJGRHmNBCNx0Y/D2dZmol77/3HHwJ5Sa9ylnVk=; b=nGVvSj3QmIs7McXV5+FMHINV8R/CDpNJWzL7pqsrPEZEf8JygoQGOfKRTqvuAoAD9HYxzC3X9sH1smS62iYvQhiwbpVkf0ggCBj3y6F7aRD2o6/5t90Z0H+bJKr26r3REFb5Ktp77KVLuGBXhdLhL5Rg9oJ9ntNS3C2gvPX+6HCLTHbgl4MsdrHQsAc96j5/m42xS0XpcbsEA02HYhIiJv5gJnz+ZK0CiKP5ozzGcV3X7ZYfWS4D/vL86dQ8RpBXinVWWU7MdzqKjsqyBhVYoV89SdJeVoxsDbwQe2AgvoNxD5ptZCuwC+DPdHN/nFrYSWi4wxuD/k1COfFbW+BVcA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=supcom.tn; dmarc=pass action=none header.from=supcom.tn; dkim=pass header.d=supcom.tn; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=supcom.onmicrosoft.com; s=selector2-supcom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9jLV3jJGRHmNBCNx0Y/D2dZmol77/3HHwJ5Sa9ylnVk=; b=DLqFphI4up9vXLh3WVjKFTSWwTkBSf4b3lDjwVJ+yumnuLER8jRVuvBqpuu9Fbpq6GPLcurSWjiTAtVeLvC/FaMY9FAS7hybl3qUQaQvhEPKfZ6s9US2IP0NzjgR2i9vD2tspNvHJM+ezeTD5l7YAVO6O/wDsh46i6T/mzkB4HU=
Received: from AS8PR04MB8022.eurprd04.prod.outlook.com (2603:10a6:20b:28a::24) by VI1PR04MB7039.eurprd04.prod.outlook.com (2603:10a6:800:12b::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6954.17; Wed, 1 Nov 2023 17:47:07 +0000
Received: from AS8PR04MB8022.eurprd04.prod.outlook.com ([fe80::f5ef:4f89:3a9d:397]) by AS8PR04MB8022.eurprd04.prod.outlook.com ([fe80::f5ef:4f89:3a9d:397%6]) with mapi id 15.20.6933.018; Wed, 1 Nov 2023 17:47:06 +0000
From: Houda CHIHI <houda.chihi@supcom.tn>
To: John Scudder <jgs=40juniper.net@dmarc.ietf.org>, "jerry@dns-oarc.net" <jerry@dns-oarc.net>
CC: "rs.ietf@gmx.at" <rs.ietf@gmx.at>, "hackathon@ietf.org" <hackathon@ietf.org>, Warren Kumari <warren@kumari.net>
Thread-Topic: [hackathon] IETF 118 Hackathon: Are long-lived TCP sessions a problem for (DNS) statistics?
Thread-Index: AQHZ+CbXXMHj+xBwS0yOCpu86YkocLA8bmgAgAB8iICAKNS/gIAAJq9P
Date: Wed, 01 Nov 2023 17:47:06 +0000
Message-ID: <AS8PR04MB8022A122E5A24633A73EFBC0E3A7A@AS8PR04MB8022.eurprd04.prod.outlook.com>
References: <622eef00-5802-437c-bf6e-26b523bf5df5@dns-oarc.net> <abf0f8b0-76eb-4b06-9faf-6c8119f1405e@gmx.at> <CAHw9_iJifEf8J+7mg0xh6WYnF11jeTRS-ow9JTRgzVuswt7bCA@mail.gmail.com> <CE588850-5D7E-4CD0-9EA3-DE245AA7FCC6@juniper.net>
In-Reply-To: <CE588850-5D7E-4CD0-9EA3-DE245AA7FCC6@juniper.net>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=supcom.tn;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS8PR04MB8022:EE_|VI1PR04MB7039:EE_
x-ms-office365-filtering-correlation-id: 7e6020e8-74d4-467f-5c72-08dbdb0290d8
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AS8PR04MB8022.eurprd04.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(346002)(136003)(39840400004)(396003)(366004)(376002)(230922051799003)(186009)(64100799003)(1800799009)(451199024)(110136005)(76116006)(91956017)(2906002)(4326008)(8936002)(8676002)(786003)(66446008)(66476007)(26005)(53546011)(64756008)(66946007)(66556008)(66574015)(478600001)(52536014)(5660300002)(41300700001)(316002)(83380400001)(7696005)(19627405001)(166002)(71200400001)(6506007)(9686003)(966005)(122000001)(54906003)(86362001)(55016003)(76236004)(38070700009)(38100700002)(66899024)(33656002)(41320700001)(5006899006)(1406899027); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_AS8PR04MB8022A122E5A24633A73EFBC0E3A7AAS8PR04MB8022eurp_"
MIME-Version: 1.0
X-OriginatorOrg: supcom.tn
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS8PR04MB8022.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 7e6020e8-74d4-467f-5c72-08dbdb0290d8
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2023 17:47:06.9247 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8f85f528-6195-4e97-8e41-f5a9ad3bed4a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ZaGe1VHIEftyQU85J3JFjkIPDDa4gCt059jmyDmRh2Fiq7DTpZPVXu3UPYCutILMQkaxns0buDJ8rpGxtZZdig==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR04MB7039
Archived-At: <https://mailarchive.ietf.org/arch/msg/hackathon/-FS_Q0xvyCX7EI1taL9vAac7A4A>
Subject: Re: [hackathon] IETF 118 Hackathon: Are long-lived TCP sessions a problem for (DNS) statistics?
X-BeenThere: hackathon@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Discussion regarding past, present, and future IETF hackathons." <hackathon.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hackathon>, <mailto:hackathon-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hackathon/>
List-Post: <mailto:hackathon@ietf.org>
List-Help: <mailto:hackathon-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hackathon>, <mailto:hackathon-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Nov 2023 17:47:21 -0000

Hello,


any whatsapp group for IETF 118 newcomers ?


Thanks in advance !
________________________________
De : hackathon <hackathon-bounces@ietf.org> de la part de John Scudder <jgs=40juniper.net@dmarc.ietf.org>
Envoyé : mercredi 1 novembre 2023 16:27
À : jerry@dns-oarc.net <jerry@dns-oarc.net>
Cc : rs.ietf@gmx.at <rs.ietf@gmx.at>; hackathon@ietf.org <hackathon@ietf.org>; Warren Kumari <warren@kumari.net>
Objet : Re: [hackathon] IETF 118 Hackathon: Are long-lived TCP sessions a problem for (DNS) statistics?

And for that matter, BGP runs over TCP and it’s not unusual to see BGP sessions that are up for months. I wouldn’t be surprised if there were ones that stayed up for more than a year. I didn’t reply earlier because the question seemed to be specific to DNS/TCP, but since someone else jumped first… :-)

I regret to say I don’t have hard data to offer, just anecdote.

—John

> On Oct 6, 2023, at 11:56 AM, Warren Kumari <warren@kumari.net> wrote:
>
>
> On Fri, Oct 06, 2023 at 4:30 AM, <rs.ietf@gmx.at> wrote:
> I don't have data ready to share, but i want to point out that in the storage space (NFS; SMB; iSCSI; NVMe/TCP; iWARP) - which is not necessarily on the public internet though, it is the norm rather then the exception to have TCP sessions being active for days and weeks at a time - typcially only reestablished after some more or less severe disruption (hosts rebooting, ports failing, excessive packet discards...).
>
>
>
> I think that this is also true for a bunch of VPN / tunneling technologies.
>
> For example, I've had a number of enterprise site-to-site "SSL Tunnels" which have been up for many many months, as well as a bunch of SSH tunnels (and just sessions) for similar times. In fact, I recently stumbled across an SSH connection to a terminal server which had been up for a few years — someone had SSHed from a console server to a termserver, and then disconnected, leaving the session up indefinitely.
>
> W
>
>
>
> I can not comment on DNS/TCP sessions though.
>
> Best regards,
> Richard
>
> Am 06.10.2023 um 09:27 schrieb Jerry Lundström:
>
> Hi all,
>
> Some tools uses packet capturing to do statistics for DNS and some of them needs to see the beginning of the TCP sessions. If resolver systems out there start keeping TCP session against authorities open for a very long time (days or weeks) then it might become a problem for these tools.
>
> We would like to look at two things;
> 1) First to poke at data to see if there are very long-lived TCP sessions out there today, or not(!) which is equally interesting to know.
> 2) Second to survey DNS statistics tools out there to see how they handle long-lived TCP sessions to understand how wide a problem this might be, if any. And maybe fix some of them if issues are spotted when doing this.
>
> Sounds interesting? Do you have data to poke at? Hope to see you at the hackathon then! :)
>
> Cheers,
> Jerry Lundström & Roy Arends
>
> _______________________________________________
> hackathon mailing list
> hackathon@ietf.org
> https://www.ietf.org/mailman/listinfo/hackathon
> Unsubscribe: mailto:hackathon-request@ietf.org?subject=unsubscribe
>
> _______________________________________________
> hackathon mailing list
> hackathon@ietf.org
> https://www.ietf.org/mailman/listinfo/hackathon
> Unsubscribe: mailto:hackathon-request@ietf.org?subject=unsubscribe
>
>
> _______________________________________________
> hackathon mailing list
> hackathon@ietf.org
> https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/hackathon__;!!NEt6yMaO-gk!C5cszFscM6tI6kNzCMFJW1rcvh82rEQl7j3LVB-rfHmJJP3x7tUqWs5hshga0Pie03Z6-fSDa-OK$
> Unsubscribe: mailto:hackathon-request@ietf.org?subject=unsubscribe

_______________________________________________
hackathon mailing list
hackathon@ietf.org
https://www.ietf.org/mailman/listinfo/hackathon
Unsubscribe: mailto:hackathon-request@ietf.org?subject=unsubscribe