Change Details

Since we'll be switched to codfw for a few weeks it'll be useful I think to look at the traffic flows in and out of eqiad and audit for anything unexpected. The list of requirements is as follows (please edit/change at will): * Sampling rate as high as doable * The primary focus I think should be for flows destined to codfw, although the more coverage we have the better * Recording should be as long as we feel comfortable, I'd say no less than 24-48h

Since we'll be switched to codfw for a few weeks it'll be useful I think to look at the traffic flows in and out of eqiad and audit for anything unexpected. The list of requirements is as follows (please edit/change at will): * Sampling rate as high as doable * The primary focus I think should be for flows destined to codfw, although the more coverage we have the better * Recording should be as long as we feel comfortable, I'd say no less than 24-48h === Turnilo links for Jul 21 -> Jul 24 === | direction | proto | flags | link | | ---| ---| ---| ----| | codfw -> eqiad | v4 private | SYN by dst port | https://w.wiki/3fKG | eqiad -> codfw | v4 private | SYN by dst port | https://w.wiki/3fKQ

Since we'll be switched to codfw for a few weeks it'll be useful I think to look at the traffic flows in and out of eqiad and audit for anything unexpected. The list of requirements is as follows (please edit/change at will): * Sampling rate as high as doable * The primary focus I think should be for flows destined to codfw, although the more coverage we have the better * Recording should be as long as we feel comfortable, I'd say no less than 24-48h === Turnilo links for Jul 21 -> Jul 24 === | direction | proto | flags | link | | ---| ---| ---| ----| | codfw -> eqiad | v4 private | SYN by dst port | https://w.wiki/3fKG | eqiad -> codfw | v4 private | SYN by dst port | https://w.wiki/3fKQ