DocumentCode :
2094806
Title :
SPIE-IPv6: single IPv6 packet traceback
Author :
Strayer, W. Timothy ; Jones, Christine E. ; Tchakountio, Fabrice ; Hain, Regina Rosales
Author_Institution :
BBN Technol., Cambridge, MA, USA
fYear :
2004
fDate :
16-18 Nov. 2004
Firstpage :
118
Lastpage :
125
Abstract :
The source path isolation engine (SPIE), developed at BBN, provides accurate tracing of single IP packets through a network. The SPIE system calculates several small hash values for each packet as it traverses a router, then stores these values in a data structure called a Bloom filter. Given a packet and an approximate time that packet was in the network, the SPIE system queries routers along the potential reverse path; a packet was "seen" at a router if the Bloom filter has stored the packet\´s hash values. The SPIE system has been proven to work effectively and efficiently for IP version 4, largely because an IPv4 packet has sufficient entropy in the first 28 bytes to allow the hash functions to "uniquely" identify each packet. We extend the traceback architecture to IP version 6, with the interesting result that the packet structure of IPv6 does not provide as much entropy in the field values as IPv4.
Keywords :
auditing; computer network management; data structures; local area networks; routing protocols; telecommunication traffic; BBN; Bloom filter; IP version 6; SPIE-IPv6; data structure; entropy; hash values; potential reverse path; router querying; single IPv6 packet traceback; source path isolation engine; traceback architecture; Data structures; Entropy; Filters; Hardware; Internet; Isolation technology; Routing; Search engines; Service oriented architecture; Telecommunication traffic;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Local Computer Networks, 2004. 29th Annual IEEE International Conference on
ISSN :
0742-1303
Print_ISBN :
0-7695-2260-2
Type :
conf
DOI :
10.1109/LCN.2004.118
Filename :
1367209
Link To Document :
بازگشت