Skip to main content

A Hands-on Look at Active Probing Using the IP Prespecified Timestamp Option

  • Conference paper
Passive and Active Measurement (PAM 2012)

Part of the book series: Lecture Notes in Computer Science ((LNCCN,volume 7192))

Included in the following conference series:

Abstract

In the last years, network measurements have shown a growing interest in active probing techniques. Recent works propose approaches based on the IP prespecified timestamp option and consider its support to be enough for their purposes. On the other hand, other works found that IP options are usually filtered, poorly implemented, or not widely supported. In this paper, to shed light on this controversial topic, we investigate the responsiveness obtained targeting more than 1.7M IPs using several probes (ICMP, UDP, TCP, and SKIP ), with and without the IP prespecified timestamp option. Our results show that: (i) the option has a significant impact on the responsiveness to the probes; (ii) a not−negligible amount of targeted addresses return several categories of non RFC−compliant replies; (iii) by considering only the RFC−compliant replies which preserve the option, the probes ranking by responsiveness considerably changes. Finally, we discuss the large−scale applicability of two proposed techniques based on the IP prespecified timestamp option.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 54.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 69.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Su, Z.S.: Rfc 781: A specification of the internet protocol (ip) timestamp option (May 1981)

    Google Scholar 

  2. Postel, J.: Internet Protocol. RFC 791 (Standard) (September 1981)

    Google Scholar 

  3. Sherry, J., Katz-Bassett, E., Pimenova, M., Madhyastha, H.V., Anderson, T., Krishnamurthy, A.: Resolving ip aliases with prespecified timestamps. In: Proc. of IMC 2010, pp. 172–178. ACM, New York (2010)

    Google Scholar 

  4. Katz-Bassett, E., Madhyastha, H.V., Adhikari, V.K., Scott, C., Sherry, J., van Wesep, P., Anderson, T.E., Krishnamurthy, A.: Reverse traceroute. In: Proc. of NSDI 2010, pp. 219–234. USENIX (2010)

    Google Scholar 

  5. Ferguson, A.D., Fonseca, R.: Inferring router statistics with ip timestamps. In: Proc. of CoNEXT 2010 Student Workshop. ACM, New York (2010)

    Google Scholar 

  6. Medina, A., Allman, M., Floyd, S.: Measuring the evolution of transport protocols in the internet. SIGCOMM Comput. Commun. Rev. 35, 37–52 (2005)

    Article  Google Scholar 

  7. Fonseca, R., Porter, G.M., Katz, R.H., Shenker, S., Stoica, I.: Ip options are not an option. Technical report (2005)

    Google Scholar 

  8. Gunes, M.H., Sarac, K.: Analyzing Router Responsiveness to Active Measurement Probes. In: Moon, S.B., Teixeira, R., Uhlig, S. (eds.) PAM 2009. LNCS, vol. 5448, pp. 23–32. Springer, Heidelberg (2009)

    Chapter  Google Scholar 

  9. Claffy, K., Hyun, Y., Keys, K., Fomenkov, M., Krioukov, D.: Internet mapping: From art to science. In: Proc. of CATCH 2009, pp. 205–211. IEEE Computer Society, Washington, DC (2009)

    Google Scholar 

  10. Huang, M.: VNET: PlanetLab Virtualized Network Access. Technical Report PDN–05–029, PlanetLab Consortium (June 2005)

    Google Scholar 

  11. Marchetta, P., Mérindol, P., Donnet, B., Pescapé, A., Pansiot, J.J.: Topology discovery at the router level: a new hybrid tool targeting ISP networks. IEEE JSAC, Special Issue on Measurement of Internet Topologies 29(6) (October 2011)

    Google Scholar 

  12. Pusateri, T.: Distance vector multicast routing protocol version 3 (DVMRP). Internet Draft (Work in Progress) draft-ietf-idmr-dvmrp-v3-11, Internet Engineering Task Force (October 2003)

    Google Scholar 

  13. Lyon, G.F.: Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning. Insecure, USA (2009)

    Google Scholar 

  14. Sundaresan, S., de Donato, W., Feamster, N., Teixeira, R., Crawford, S., Pescapé, A.: Broadband Internet Performance: A View From the Gateway. In: Proc. of SIGCOMM 2011. ACM (2011)

    Google Scholar 

  15. Dainotti, A., Squarcella, C., Aben, E., Claffy, K.C., Chiesa, M., Russo, M., Pescapé, A.: Analysis of Country-wide Internet Outages Caused by Censorship. In: Proc. of IMC 2011. ACM, Berlin (2011)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2012 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

de Donato, W., Marchetta, P., Pescapé, A. (2012). A Hands-on Look at Active Probing Using the IP Prespecified Timestamp Option. In: Taft, N., Ricciato, F. (eds) Passive and Active Measurement. PAM 2012. Lecture Notes in Computer Science, vol 7192. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-28537-0_19

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-28537-0_19

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-28536-3

  • Online ISBN: 978-3-642-28537-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics