Is AIM Really a Bandwidth Hog?
Crispen asks: "A mess of schools, especially K-12 schools in the US, have banned instant messaging, claiming that it is a huge bandwidth hog. Is it? If you block ports 4443 (images) and 5190 (file transfers), how much bandwidth does AIM really take?"
Depends on how much bandwidth the schools have. A lot of K-12 schools are running on a single DSL line that may or may not be throttled to something less than 1.5mbit. If the line pipe is always full, it makes sense to close the ports for all services that are generally used for recreational rather than academic purposes.
Then again, given the amount of time most my teachers spent just trying to figure out how to work a computer during my classes' time in the computer labs because they were never trained, I'd say having computers in the classrom is more of a bandwidth hog.
I briefly worked IT for a local high school district, and while AIM doesn't consume much resource wise, it's an enormous productivity-sink for the student/employee.
Instant Messaging can allow excellent, speedy communication in teams, but it can also utterly destroy productivity during lectures. AIM et all should be banned from installation on institution owned student computers, or at the very least, used in a very selective manner.
"Inattention makes clowns of us all" -Bean
There's two main reasons we've taken to blocking any form of IM, or in fact anything that isn't HTTP/FTP, to student desktops. First, of course, is the somewhat limited bandwidth, although this was the least of our reasons. Secondly, and far more importantly, is the element of control: with a transparent proxy through which all HTTP and FTP traffic is routed, we can (a) cut down the amount of input bandwidth needed, and (b) implement a certain amount of filtering (well known porn sites, ads, etc).
Not having IM installed on each desktop also means that there's not configuration problems. Realistically schools have to support one environment, and IM systems, with the number that there are, complicate this no end (imagine the arguments if AIM is the only one supported by a school, but a large percentage of kids use MSN...).
Realistically, if kids want to use IM, they're welcome to do so at home on their own (usually dialup) time. Likewise with any other non-HTTP access. I personally don't see it at that disabling; if kids want to IM each other, they can go back to "pass-it-on" notes. :-)
I have a net admin friend at a school who helps manage the dorm network. Amazingly, he claims that it is really those tiny ads (150x40pix). I guess AIM is very lazy and is constantly refreshing them (If you're using the computer or not) and doesn't do much caching.
To fix it, they rerouted ads.aol.com (i just made up that DNS) to their own servers and sent their own images back localally.
You could just access AIM through a box set up to connect w/ AIM and send it to you via telnet. An example is a box w/ Bonim. It is self explainitory. I honestly don't believe that blocking ports and firewalls do too much, if you are determined, smart and want to break out.
void
Who ever said there wasn't an aim sniffer? 10 seconds on freshmeat was all it took
http://www.aimsniff.com/
The problem is NOT the ability to monitor and filter AIM message content. Hell, you can do that with a combination of the packetsocket module and a perl script.
The problem is that MOST commonly used IM systems (AIM, Yahoo and MSN Messenger) are server-centric making it impossible to track the actual origin of messages to an IP address without the server owner's cooperation. It appears, in this instance, that AOL rather oddly decided to defy a federal subpoena rather than reveal the identity of an AIM user who had clearly violated federal law.
What good does it do the authorities to know that the school received a bomb threat if they can't find out who it came from? I think that the school district did the right thing in this instance.
utter rubbish
It ain't hard to setup an FTP server at home, and most Universities (Colleges for the yanks) allow FTP access to their students.
Why not just use that?
Because FTP isn't designed for this. FTP is great if you have an always-on machine at the same IP (or at least hostname). It was originally designed to let a user work with files in *his* account's disk space.
AIM and other IM programs with file-transfer capabilites are far better suited to most home users. The IP of the user may change. The user may only come online at some time. The remote user is made aware of this ("Oh, John's on. I can send him that presentation file."), since an IM program handles registering and retransmitting this information.
Furthermore, FTP exposes a whole collection of directories, and generally (unless you hack things up) grants write and list access to *other* things in an upload directory. The user wants to make available a *single file*, and wants to know when the transfer is done, so that they can get offline. IM clients do a better job of providing this functionality than do FTP server/clients.
Often, file transfer is done at the same time people are talking to each other. This combines two frequently-used-together services, since an IM client would likely be necessary anyway.
Finally, even setting up an FTP system to approximate the model desired is *much* more work. You'd need a dynamic hostname, need to run a daemon to keep it up to date, the remote person would need to have a program that keeps trying to log in to tell when you're online, you'd need to set up permissions so that your server didn't let people see files that other people uploaded, you'd need some monitor for people logging in...
FTP was designed in an era where people didn't have goddamn filewalls or NAT all over. Frankly, they do now, and pose a major irritation if someone's trying to send a file. AIM is quite good at dealing with firewalls.
Also, FTP security sucks. Kerberized FTP is *very* rarely used, as is SSL-tunneled FTP. Plaintext passwords...not even MD5 support. Ick. Granted, most popular messaging protocols aren't much better, but they are improving.
So while FTP is better for the task that it was designed for, for the kind of thing this guy is doing, he's better off with IM.
May we never see th
EXACTLY.
The whole notion that we need computers in every classroom is pointless.
Pointless.
I graduated in 2000, and I learned more from my at-home computer than the locked-down computers in my high school.
They restrict any real use, defeating the whole purpose of having it hooked up to the 'net! The web filter was absolutely painful. I remember this one time where a friend was trying to research marijuana for a school paper covering drug use. The teacher glanced at my friend's computer screen and after getting over the initial surprise of the website managing to slip through the webfilter's cracks, automatically banned him from the computer lab.
Nope... American schools aren't in trouble. No sir.
In general AIM doesn't use hardly any bandwidth. Myself and my two roommates each have clients running 24/7 and traffic to and from AIM servers barely shows up in the statistics on our router.
However, one of my roommates has a sister that has recently discovered AIM's DirectIM feature. She seems to like it because she can see if the remote party is typing or not. That's nice, but these connections seem to use quite a large amount of bandwidth even when completely idle. I didn't get exact numbers, but I thought a file transfer of some kind was going on until I went and checked with my roommate. Needless to say, it was causing a measurable difference in latency on our cable modem (which is kind of shaky anyway) or I probably wouldn't have noticed in the first place.
Anyway, I added a pf rule blocking direct connections on the ports AIM uses from the network she's on at Auburn and haven't seen any problems since then. I don't know if this has anything to do with the claims this story is referring to, but I guess it could.
Game... blouses.