IPv6 Multimedia Services and Analysis of the User GroupsShanghai Jiao Tong UniversityKaida Jiang2008.12.19

SJTUs IPv6 multimedia websitehttp://video6.sjtu.edu.cn IPv6 address 2001:da8:a4:ff::84

Network traffic graphs of a media server1 Day1 Week1 Year

Maximum appears during Olympic Games in Beijing: Max IPv6 traffic>3Gbps compared with Campus Network at the same time: Max IPv4 traffic>18Gbps

High video proportion in CERNET2 IPv6 traffic2008.11.2711.28 CERNET2ShanghaiNanjing2008.11.2711.28 CERNET2A media servers traffic

2 main IPv6 Stream Media PlatformsMicrosoft Windows Media Service

Opensource VLC http://www.videolan.org/

Windows Media Service StructureMedia ServerSatelliteCATVLiveNetwork streamMedia EncoderIPv6

Large-scale encoder of TV signalEmploy many PCs Rely on CPU encoding (software compression) each PC with 23 pieces of video capture card

TV Multi-channel A/V demodulator Input: one RF signal (CATV) Output: Multi A/V to several video capture cards

Acquisition hardware compression card Directly output network streams

Windows Media Encoder

Windows Media: mature and stable

High performance: Windows Media Serverwith 2 Quad-core Processors

VLC http://download.videolan.org/pub/vlc/Unicast and Multicast

Support IPv4 and IPv6

Receive, forward and double compress network streams

HDTV Broadcastlow delayseconds

Open Sourcesupport multiple OS

A media server provide tens of TV channelIPv6 unicast (http output)

IPv6 multicast convert to IPv4 multicast

Web browser (support IE/Firefox/Opera)19201080

VLC Player (TV Playlist)

IPv6 Multicast

High performance: VLC ServerWindows and LinuxSDTV and HDTVA Server with Intel(R) Xeon(R) CPU 5130 2.0G 4G Memorycan support 2.5G+ traffic

Dual-quad-core Xeon 1.6Goutput 3.1G bps

IPv6 Multicast in SJTUs Campus Network We provide 94 TV signals in Campus Network Cover 5000 usersHuawei Switch Access layer S3026 Convergence layer EMD Core Layer NE80E

CCTV Olympic High-Definition TV(1920*1080)2008.8.8

Analysis of IPv6 websites Log filesWeb Log file format date time s-sitename cs-method cs-uri-stem cs-username c-ip cs-version s(User-Agent) cs(Referer) sc-status sc-bytes 2008-07-20 07:02:06 W3SVC1 GET /Default.asp - 2001:da8:224:c054:f454:bc10:e212:459d HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1) - 200 36656

Time 2008.6.24 ~ 2008.11.24 From latest five months

Involving 1,156,040 different IPv6 addresses and 31,446,310 records

MotivationUnderstand the usage state of server, and optimize the hardware and software settings.

Understand the composition of IPv6 users, and provide more focused service.

How to filter non-relevant data1,935 records are from the search engine and Network Scanningaccounting for 0.006% of all the records.

20,697,103 IPv6 addresses ended with %0 are double recordedaccounting for 65.8% of all the records.

Rest 10,749,207 records are selected as sample for analysis.

Analysis of IPv6 users source

IPv6 address allocationbelow is a portion

1ISATAP TunnelIPv6 address format Prefix64bit:0:5efe:IPv4ADDR e.g. 2001:da8:207:1:0:5efe:59.64.34.188 from Beijing Normal University

ISATAP Tunnel Found 3,100,652 records in the log, accounting for 28.8% of total access. Found 89,910 different IPv6 addressesaccounting for 7.78%. On average, each IPv6 address contributes 34.5 records.

ISATAP Tunnel active Top20

ISATAP Tunnel active Top20-40

Deviation analysisDHCP IPv4 address will change even for the same user

More more than one ISATAP tunnel server in a university 71 users converge to top 20 tunnel servers 96 users converge to top 50 tunnel servers

ISATAP Tunnel ServerShanghai Jiao Tong University isatap.sjtu.edu.cnTsinghua University isatap.tsinghua.edu.cnZhejiang University 10.10.5.56 China Agricultural University isatap.cau.edu.cnSouth China Agricultural University isatap.scau.edu.cnHuazhong University of Science and Technology isatap.hust.edu.cnZhongnan University of Economics and Law isatap.znufe.edu.cn Xi'AN University of Architecture and Technology isatap.xauat.edu.cn National Tunnel Server Number: >100

2 6to4 TunnelIPv6 address format 2002:IPv4ADDR::/48 e.g. 2002:dbe4:6fe6::dbe4:6fe6 from 219.228.111.230 (Shanghai Jiao Tong University)

6to4 Tunnel Found 240,161 records in the log, accounting for 2.23% of total access. Found 22,641 IPv6 addressesaccounting for 1.96%. On average, each IPv6 address contributes 10.6 records. Found 20,898 different IPv4 addresses.

6to4 Tunnel active Top20

3 IPv6 ProxyIPv6 Address: 2001:638:902:1::11 Found 381,429 records in the log, accounting for 3.55% of total access. Number of different User-Agents: 2654

Domain name proxy.ipv6.uni-leipzig.de IPv6 http and ftp proxy provided by German Leipzig University, which is the most popular proxy in IPv6 network.

4Native IPv6Found 7,026,820 records in the logaccounting for 65.37% of total access. Found 1,043,468 IPv6 addressesaccounting for 90.26%. On average, each IPv6 address contributes 6.7 records.

Map IPv6 addresses to corresponding users, then produce statistics.

Native IP active organization Top20

Native IP active organization Top20-40

Deviation analysisFor securityNative IPv6 address in Windows Operation System will change as time goes bythus log will record different IPv6 address for the same user visit the same website in different time. Refer to top organization in preceding ppt, the actual users number may be less than IPv6 address number, we just want to show its relative big user population and high visit frequency.

5Teredo TunnelIPv6 address format 2001:0000::/32

Found 145 records in the log, accounting for 0.001% of total access. Found 20 different IPv6 addresses , accounting for 0.002%. On average, each IPv6 address contributes 7.25 records.

Found 4 Teredo servers.

Analysis of OperationSystem

User-Agent string in web log filesMozilla/5.0+(Windows;+U;+Windows+NT+6.0;+zh-CN;+rv:1.9)+Gecko/2008052906+Firefox/3.0

Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+TheWorld)

Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Maxthon;+.NET+CLR+2.0.50727)

Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+QQDownload+1.7;+.NET+CLR+1.1.4322;+IE7Pro)

Mozilla/5.0+(X11;+U;+Linux+i686;+zh-CN;+rv:1.9)+Gecko/2008052912+Firefox/3.0

Opera/9.50+(X11;+Linux+i686;+U;+zh-cn)

Mozilla/5.0+(Windows;+U;+Windows+NT+6.0;+en-US)+AppleWebKit/525.13+(KHTML,+like+Gecko)+Chrome/0.2.149.29+Safari/525.13

Mozilla/5.0+(Macintosh;+U;+Intel+Mac+OS+X;+zh-cn)+AppleWebKit/523.15.1+(KHTML,+like+Gecko)+Version/3.0.4+Safari/523.15

Analysis of users Web Browser

Analysis of users Operation System

SummaryIPv6 prevalence is still low, but growing by the day.

Universities and scientific research institutions are dominant users of IPv6.

ISATAP Tunnel and NativeIP are the most common access.

IPv6 Proxy made a hit.

Windows and IE are dominant OS and Browser.

Thanks!

kaida@sjtu.edu.cn

http://comic.sjtu.edu.cn/tv/wall/