IGPPM: interface grouped probabilistic packet marking scheme for IP traceback

Abstract

The Data Packet Marking method is a classic and effective approach for Internet Protocol (IP) traceback, and it has two traditional implementations -Deterministic Packet Marking (DPM) and Probabilistic Packet Marking (PPM). However, these two methods have certain shortcomings: DPM appends routing information for each hop to the packet header to achieve single-packet traceback, which results in oversized packet headers and fragmentation issues. PPM, on the other hand, includes only a single router's information in each marked packet, requiring a large number of marked packets for IP traceback. The IGPPM approach proposed in this article overcomes these limitations by marking multiple router interface numbers within a single packet. This allows recording multiple routing information within a single packet, effectively reducing the number of packets and the time required for traceback. Furthermore, it doesn't increase packet header size, avoiding fragmentation problems, and enhancing the efficiency of traceback.