starp communication with BNL systems external to starp

This is a roughhewn list of communication between starp and other networks internal to BNL.  Initially, most of it is pulled from the *limited* sFlow sampling available on some starp network switches during the week of Sept. 12, 2016.  Additional items may be added based on other monitoring or known uses.  Yellow highlighted entries are connections known to originate from outside starp.

External System(s) STARP System(s) Explanation/Notes
 dean.star.bnl.gov  Online Linux Pool (OLP)  subsystem monitoring generating online web content (writing over NFS)
 dean.star.bnl.gov  interactive systems  web browsing
 dean.star.bnl.gov  Windows and Linux systems  OCS inventory agent sending data to dean (I don't recall - is this initiated by dean or the agents?)
 dean.star.bnl.gov  (mostly) Linux systems  Ganglia gmonds sending data to dean
 sun.star.bnl.gov  Linux systems  SKM clients contacting starkeyd
 sun.star.bnl.gov  interactive systems  web browsing
 db0{6,7,8}.star.bnl.gov OLP  offline database servers used by jobs running on OLP
 f5-http-vip.sec.bnl.local  various  BNL outbound web proxy server?
 nx06.rcf.bnl.gov
 xeon-phi-dev
 observed this particular pair, but know there are more widely used RCF NX <--> starp
 scannerXX.bnl.gov everything  not actually seen in sFlow, but of course it is present
 ordo.bnl.gov  Linux systems  Ordo, ITD's Linux/Unix system inventory software
 secadm3.itd.bnl.gov  Linux systems  remote syslog
 stargrid0{2,3,4}.rcf.bnl.gov  OLP  GridFTP transfers initiated on OLP
 stargrid01.rcf.bnl.gov  stargw3  Grid job submission (eg, nightly library tests), not actually seen in sFlow, but known to occur.
 rafs{02,03,21,22,24}.rcf.bnl.gov  Linux systems  AFS - could easily be more AFS servers/services involved
 various
 stargw{4,5}  inbound SSH connections (not actually seen in sFlow, because stargw machines are connected directly to ITD switch)
bnldc1.itd.bnl.gov  Windows systems  Windows Domain Controller (possibly others?)
splunk{2,3,4,6}.itd.bnl.gov  Windows systems  Splunk remote logging, possibly other splunk servers are present
 bnl-dns{1,2}.itd.bnl.gov  Windows systems  NetBIOS name resolution?
 bnldccore.itd.bnl.gov  Windows systems  Windows domain stuff?
 wsus.b459.bnl.gov  Windows systems  ITD's internal MS/Windows update server
 mir.itd.bnl.gov  Windows systems  ?
 itd-trend11.bnl.gov  Windows systems  ITD's TrendMicro server - others?
 sao-ldms.b459.bnl.gov  Windows systems  Landesk
 various ITD backup systems  Various Windows and Linux systems  Legato/Networker and Avamar backup systems
 mirror.bnl.gov  Scientific Linux systems  Scientific Linux repositories
 rhn.bnl.gov  Red Hat servers  Red Hat updates
     


Miscellaneous notes from sFlow observations


The oddest thing seen (and a little worrisome): fmsled.starp.bnl.gov talking to ec2-54-86-95-154.compute-1.amazonaws.com (over https, port 443)

There's also a bunch of multicast and network device chatter.