{"action":"created","issue":{"url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/615","repository_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon","labels_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/615/labels{/name}","comments_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/615/comments","events_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/615/events","html_url":"https://github.com/pavel-odintsov/fastnetmon/issues/615","id":195807499,"number":615,"title":"Possible bug with long file downloads","user":{"login":"mcflyspb","id":23476959,"avatar_url":"https://avatars.githubusercontent.com/u/23476959?v=3","gravatar_id":"","url":"https://api.github.com/users/mcflyspb","html_url":"https://github.com/mcflyspb","followers_url":"https://api.github.com/users/mcflyspb/followers","following_url":"https://api.github.com/users/mcflyspb/following{/other_user}","gists_url":"https://api.github.com/users/mcflyspb/gists{/gist_id}","starred_url":"https://api.github.com/users/mcflyspb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mcflyspb/subscriptions","organizations_url":"https://api.github.com/users/mcflyspb/orgs","repos_url":"https://api.github.com/users/mcflyspb/repos","events_url":"https://api.github.com/users/mcflyspb/events{/privacy}","received_events_url":"https://api.github.com/users/mcflyspb/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":18,"created_at":"2016-12-15T13:38:22Z","updated_at":"2016-12-26T11:30:14Z","closed_at":null,"body":"Павел, добрый день! \r\n\r\nНет ли тут бага ? \r\n\r\nIP: 82.112.190.49 - наш клиент.\r\nIP: 91.231.235.65 - CDN-сервис.\r\n\r\nОтвет CDN_сервиса на вопрос:\r\nПровели проверку, и выявили, что 82.112.190.49 в течении 22 часов тянул с 91.231.235.65 аудиопоток. Первичная диагностика ничего подозрительного не выявила. \r\n\r\n\r\nIP: 82.112.190.49\r\nAttack type: unknown\r\nInitial attack power: 125995 packets per second\r\nPeak attack power: 125995 packets per second\r\nAttack direction: incoming\r\nAttack protocol: tcp\r\nTotal incoming traffic: 1262 mbps\r\nTotal outgoing traffic: 0 mbps\r\nTotal incoming pps: 125995 packets per second\r\nTotal outgoing pps: 0 packets per second\r\nTotal incoming flows: 0 flows per second\r\nTotal outgoing flows: 0 flows per second\r\nAverage incoming traffic: 1262 mbps\r\nAverage outgoing traffic: 0 mbps\r\nAverage incoming pps: 125995 packets per second\r\nAverage outgoing pps: 0 packets per second\r\nAverage incoming flows: 0 flows per second\r\nAverage outgoing flows: 0 flows per second\r\nIncoming ip fragmented traffic: 0 mbps\r\nOutgoing ip fragmented traffic: 0 mbps\r\nIncoming ip fragmented pps: 0 packets per second\r\nOutgoing ip fragmented pps: 0 packets per second\r\nIncoming tcp traffic: 1262 mbps\r\nOutgoing tcp traffic: 0 mbps\r\nIncoming tcp pps: 125994 packets per second\r\nOutgoing tcp pps: 0 packets per second\r\nIncoming syn tcp traffic: 0 mbps\r\nOutgoing syn tcp traffic: 0 mbps\r\nIncoming syn tcp pps: 0 packets per second\r\nOutgoing syn tcp pps: 0 packets per second\r\nIncoming udp traffic: 0 mbps\r\nOutgoing udp traffic: 0 mbps\r\nIncoming udp pps: 0 packets per second\r\nOutgoing udp pps: 0 packets per second\r\nIncoming icmp traffic: 0 mbps\r\nOutgoing icmp traffic: 0 mbps\r\nIncoming icmp pps: 0 packets per second\r\nOutgoing icmp pps: 0 packets per second\r\n\r\nAverage packet size for incoming traffic: 1313.3 bytes\r\nAverage packet size for outgoing traffic: 0.0 bytes\r\nIncoming\r\n\r\nTCP flows: 3\r\n82.112.190.49:52922 < 217.69.133.145:80 400 bytes 10 packets\r\n82.112.190.49:60690 < 92.122.93.50:443 710 bytes 10 packets\r\n82.112.190.49:62909 < 91.231.235.65:443 1738257470 bytes 1323450 packets"},"comment":{"url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/comments/269202610","html_url":"https://github.com/pavel-odintsov/fastnetmon/issues/615#issuecomment-269202610","issue_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/615","id":269202610,"user":{"login":"pavel-odintsov","id":2744166,"avatar_url":"https://avatars.githubusercontent.com/u/2744166?v=3","gravatar_id":"","url":"https://api.github.com/users/pavel-odintsov","html_url":"https://github.com/pavel-odintsov","followers_url":"https://api.github.com/users/pavel-odintsov/followers","following_url":"https://api.github.com/users/pavel-odintsov/following{/other_user}","gists_url":"https://api.github.com/users/pavel-odintsov/gists{/gist_id}","starred_url":"https://api.github.com/users/pavel-odintsov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pavel-odintsov/subscriptions","organizations_url":"https://api.github.com/users/pavel-odintsov/orgs","repos_url":"https://api.github.com/users/pavel-odintsov/repos","events_url":"https://api.github.com/users/pavel-odintsov/events{/privacy}","received_events_url":"https://api.github.com/users/pavel-odintsov/received_events","type":"User","site_admin":false},"created_at":"2016-12-26T11:30:14Z","updated_at":"2016-12-26T11:30:14Z","body":"Для Junios у вас есть крутая фича - sampled mirror (maximum-packet-length 110; для mirror ифейса). Вы можете легко влить десятку в гигабитный порт для анализа и обработать трафик там. Учитывая что трафика у вас не так много - это, имхо, идеальный способ для анализа. "}}
{"actor":{"display_login":"pavel-odintsov"}}