Unusual Bandwidth Usage From LLNW.NET
I have been watching a bit of web traffic occurring regularly on our servers; the traffic points to a domain of llnw.net. All of the connections resolve to various addresses under Limelight Networks Inc. One interesting observation is they are, per machine, all at the same number of minutes per day, e.g. 15:55, 16:55,20:55, 21:55. The website at www.llnw.net brings up a 403 access error.
There is some information about Limelight networks on the Wiki page http://en.wikipedia.org/wiki/Limelight_Networks. An observation on the Wiki is that in August 2007 Limelight signed a content delivery agreement with Microsoft. More details of their services can be found in High-Performance CDN For Digital Media.
So, it looks like some kind of content delivery from Microsoft, possibly Microsoft Update (but the times don’t seem to tally). I will post more about this if I find anything further.
Tags
Curiosities-
I see this site all the time on my network from Xboxes and computers. It’s mainly Netflix users and HD Netflix sucks up a lot of bandwidth. Another popular one here is Hulu and live365.com which uses edgecastcdn.net servers. All of these streaming media content sites have many, many subdomains that they use to store video content for users so just because a main page throws an error doesn’t mean it’s a bad site or doesn’t exist. If you google around you will find many helpful sites like quantcast.com and others that will help you figure out what the user is doing.
-
You know what sucks the most about this “content” being delivered by MS on LLNW? Once I blocked the IP ranges of this site the amount of spam in my email account went from 200 a day down to 1 to 2 spams a day. Just for a test I created another account and did not use it for two months. I logged into that email account for the next week and NEVER sent an email from that address let alone posted that email address, low and behold I started to receive spam email to that very address. Hmmm are we all being duped somehow?
-
Hi, I am having the same type of problem.
I just cannot uninstall WLM because people use it.C:Documents and Settingsgenerico>netstat -b
Conexões ativas
Proto Endereço local Endereço externo Estado
TCP suspects-zbfq0r:1420 cds805.iad.llnw.net:http ESTABLISHED 764
c:windowssystem32WS2_32.dll
c:windowssystem32WINHTTP.dll
— componente(s) desconhecido(s) –
[svchost.exe] -
Typing netstat -b will also show you what program is making the call. At the moment, for example, my AVG Free (avgnsx.exe) is connected to https-203-77-190-65.hkg.llnw.net.
-
You guys manage networks and you don’t know who limelight networks is?
They are the second largestg content delivery network with Akamai being the first. They have 2.5 TERABITS per second of capacity. Some examples of things they deliver that you might be seeing.
Windows updates
netflix streaming movies
downloads from Oracle’s website
Anybody using XBOX live
Playstation 3
and Nintendos WII
streaming video from MSNBC, ABC, NBC, MSN video, Disney, Nickolodean, FoxNews, the 2008 olympics, etc etc etc.The list goes on for about 1400 limelight networks customers.
their website is http://limelightnetworks.com
Comments