A Hands-on Look at Active Probing Using the IP Prespecified Timestamp Option

Donato, Walter de; Marchetta, Pietro; Pescapè, Antonio

doi:10.1007/978-3-642-28537-0_19

Cited by 12 publications

(15 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The large-scale applicability of the IP timestamp option has been evaluated and it has been shown that using this option is only effective for 12.9% of the destinations [111]. Note that it seems that using the IP timestamp option is a little bit more effective in the context of reverse traceroute (see Sec.…”

Section: Active Methodsmentioning

confidence: 99%

Internet Topology Discovery

Donnet

2013

Data Traffic Monitoring and Analysis

View full text Add to dashboard Cite

Abstract. Since the nineties, the Internet has seen an impressive growth, in terms of users, intermediate systems (such as routers), autonomous systems, or applications. In parallel to this growth, the research community has been looking for obtaining and modeling the Internet topology, i.e., how the various elements of the network interconnect between themselves. An impressive amount of work has been done regarding how to collect data and how to analyse and model it. This chapter reviews main approaches for gathering Internet topology data. We first focus on hop limited probing, i.e., traceroute-like probing. We review large-scale tracerouting projects and discuss traceroute limitations and how they are mitigated by new techniques or extensions. Hop limited probing can reveal an IP interface vision of the Internet. We next focus on techniques for aggregating several IP interfaces of a given router into a single identifier. This leads to a router level vision of the topology. The aggregation can be done through a process called alias resolution. We also review a technique based on IGMP probing that silently collect all multicast interfaces of a router into a single probe. We next refine the router level topology by adding subnet information. We finish this chapter by discussing the AS level topology, in particular the relationships between ASes and the induced hierarchy.

show abstract

Section: Active Methodsmentioning

confidence: 99%

Internet Topology Discovery

Donnet

2013

Data Traffic Monitoring and Analysis

View full text Add to dashboard Cite

show abstract

“…In a previous work [11], thanks to a large-scale measurement campaign targeting more than 1.7M IP addresses, we observed that the routers managing the TS option in the Internet can be classified in the two main categories reported below (interested readers may also refer to a CAIDA online report [26] for more details).…”

Section: Ts Option and Router Behaviorsmentioning

confidence: 99%

“…In this work, inspired by a previous technique [9] and the experience gathered by experimenting with IP options [10][11][12], we present, evaluate and release Pythia, a novel alias resolution technique based on active probing. Pythia exploits a combination of (i) IP Prespecified Timestamp option [13] and (ii) UDP packet probes to reconstruct a specific category of routers, we named any-interface stamping routers, representing about one tenth of the devices in the Internet according to previous works [10,11] (Sec.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Pythia

Marchetta

Persico

Pescapè

2013

Proceedings of the Ninth ACM Conference on Emerging Networking Experiments and Technologies

Self Cite

View full text Add to dashboard Cite

An accurate and exhaustive knowledge of the Internet topology is essential for a deep understanding of such a complex and ever-evolving ecosystem. In this context, a wellknown key challenge is represented by alias resolution, i.e. the process of grouping under a unique identifier the addresses owned by the same network layer device. While several techniques exist, each solution shows specific limitations such that the alias resolution problem appears far from being definitively solved. In this work, inspired by a previous technique and the lessons learned by experimenting with IP options, we present, evaluate and release Pythia, a novel active probing-based alias resolution technique. Pythia exploits a combination of (i) UDP packet probes and (ii) the IP Prespecified Timestamp option and it is purposely designed to reconstruct a specific category of routers. By using the reliable topological information provided by IGMP probing as a reference, we experimentally evaluate Pythia and compare it to previously proposed techniques according to multiple performance metrics. Experimental results show how Pythia reaches higher performance in terms of applicability and trustworthiness.

show abstract

“…This option has 2 been used to identify the addresses owned by the same network device [31], to develop a reverse Traceroute [32], to estimate the network delay [33] and to detect third-party addresses in Traceroute IP paths [26]. A deep study on the level of support for this option is reported in [34]. While we foresee more and more applications, in this work we use the TS option to count the IP modules managing the IP option on the path: DRAGO exploits the TS option to identify incongruities between the number of IP modules decrementing the TTL and those managing the option.…”

Section: Introductionmentioning

confidence: 99%

DRAGO: Detecting, quantifying and locating hidden routers in Traceroute IP paths

Marchetta

Pescapè

2013

2013 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)

Self Cite

View full text Add to dashboard Cite

Traceroute is probably the most famous networking tool widely adopted in both industry and research. Despite its long life, however, measurements based on Traceroute are potentially inaccurate, misleading or incomplete due to several unresolved issues. In this paper, we face the limitation represented by hidden routers -devices that do not decrement the TTL, being thus totally invisible to Traceroute. We present, evaluate and release DRAGO, a novel active probing technique composed of three main steps. First, a novel Traceroute enhanced by the IP Timestamp option is launched toward a destination. Second, a procedure is applied to quantify the hidden routers contained in the path, if any. Third, a last procedure is performed to identify the exact position in the path of the detected hidden routers. Experimental results demonstrate that the phenomenon is not uncommon: DRAGO detects the presence of hidden routers in at least 6% of the considered Traceroute IP paths and limits the affected area to one fifth of the trace containing these devices.

show abstract

A Hands-on Look at Active Probing Using the IP Prespecified Timestamp Option

Cited by 12 publications

References 10 publications

Internet Topology Discovery

Internet Topology Discovery

Pythia

DRAGO: Detecting, quantifying and locating hidden routers in Traceroute IP paths

Contact Info

Product

Resources

About