- mat-wg - mailman.ripe.net

Full BGP full view
by Pavel V. Veselovskiy 30 Apr '13

30 Apr '13

Hello, I'm validating a new technique for finding the route between autonomous systems with the least number of transitions. This method is came from the wireless sensor networks. To compare the efficiency of this method, and BGP algorithms, we need a full BGP routing table that reflects the configuration of all the neighbors for all AS on the Internet. At first I took the BGP Full View from O-IX site http://www.routeviews.org/ And that's specifically from herehttp://archive.routeviews.org/oix-route-views/ Already in the first few tests, it was found out that these tables are incomplete, since a number of traceroutes, we have given from the servers is not suitable neighbors and a method results mismatched with the actual path, or the path is longer than the traceroute outputs. Besides knowing the total number of announced AS and counting the number of unique AS numbers for these log files (http://archive.routeviews.org/oix-route-views/), we found that these logs contains references to only about 60% of the number All advertised by AS. Recommend, please, where we can find a really complete picture of all the neighboring AS? -- Kind Regards, Pavel Veselovskiy, Samara State Aerospace University

2 1

New on RIPE Labs: New Dashboard View and More New Feature on RIPE Atlas
by Mirjam Kuehne 26 Apr '13

26 Apr '13

Dear colleagues, Our latest RIPE Atlas release includes a lot of new features, including completely new opening pages on the website for logged in users and the general public. We also have one-off measurements, APIs, new maps, probe sharing and more! Please find all the details described here: https://labs.ripe.net/Members/kistel/new-ripe-atlas-features-april-2013 Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: The BGP Visibility Scanner
by Mirjam Kuehne 24 Apr '13

24 Apr '13

[apologies for duplicates] Dear colleagues, Please find some interesting research by Andra Lutu, Marcelo Bagnulo and Olaf Maennel on RIPE Labs: "The BGP Visibility Scanner" https://labs.ripe.net/Members/andra_lutu/the-bgp-visibility-scanner The authors developed a tool that checks if prefixes have limited visibility. The article describes some of the results found after analysing many months of global routing table data. Please also note the call for feedback at the end of the article. Kind regards, Mirjam Kuehne RIPE NCC

1 0

Preliminary agenda for MAT @ RIPE66
by Richard Barnes 23 Apr '13

23 Apr '13

Hello All, This is the draft agenda for the Measurement, Analysis and Tools Working Group session at RIPE66: A. Introduction Welcome, Scribe, Jabber, Agenda B. Interconnection density in IPv4 / IPv6 - Christian Kaufmann (unconfirmed) B. IETF LMAP - Philip Eardley (BT) (unconfirmed) C. RPKI measurements - Arturo Servin (LACNIC) (unconfirmed) D. RIPE Atlas update - Vesna Manojlovic (RIPE NCC) E. RIPEstat update - Vesna Manojlovic (RIPE NCC) Z. AOB Timings are approximate. There is still some time left in our agenda and we would welcome any late submissions. Please email them to mat-wg-chairs(a)ripe.net. The session will take place at 16:00 local time on Thursday 16th May. See you in Dublin! Richard & Christian

1 0

Measuring IP address hijacking with RIPE Atlas?
by Anatole Shaw 19 Apr '13

19 Apr '13

Currently I work with Greenhost, which is a RIPE LIR that was recently the recipient of a malicious route advertisement, as described here: https://greenhost.nl/2013/03/21/spam-not-spam-tracking-hijacked-spamhaus-ip/ IP address hijacking is a real problem. How often does it happen? Which networks are being spoofed, and which networks are the victims? My sense is that we don't have solid up-to-date answers to these questions. I have some thoughts about how to detect successful IP hijacking, using empirical measurements taken from multiple network vantagepoints. I'll hold off on details for now, but I'm aware that the answer is *not* simple analysis of AS paths or traceroute output, both of which are increasingly spoofed. It seems like the RIPE Atlas probe network would be an ideal platform for this type of study. Does such a study already exist? How does one begin to propose a RIPE Atlas project? Regards, Anatole Shaw

4 6

Verifying the deployability of Multipath TCP
by Olivier Bonaventure 17 Apr '13

17 Apr '13

Dear colleagues, During RIPE66, I will present a tutorial on Multipath TCP, a major TCP extension that has recently been approved by the IETF (RFC6824). The design of Multipath TCP has been heavily influenced by various types of middleboxes that process/modify/... various fields of the IP/TCP packets. Multipath TCP is in theory capable of handling these middleboxes and either go through or at worst fallback to regular TCP. In order to check this fallback mechanism, we ask your help to perform test behing as many real middleboxes as possible. To ease the testing, we have placed a modified Linux kernel that includes Multipath TCP inside a virtualbox image, added several measurement scripts to automate the test and collect packet traces. The tests run on Linux and MacOS. They do not currently work on Windows. You can download the virtualbox image from : http://multipath-tcp.org/pmwiki.php?n=Users.AboutMeasures The script needs about 15 minutes to complete and you will have access to a trace of all the packets sent and received by your virtualbox and our server if you'd like to check the interference caused by your middleboxes. We'd appreciate tests in networks that are more likely to include middlboxes such as entreprise networks, WiFi hotspots or cellular networks. From a technical viewpoint, the tests use various applications including traceroute, ftp (to trigger NAT ALG), http, https, scp. We use multipath subflows (1 and 4) and a modified Multipath TCP kernel that provides more debugging and also three different schedulers. The first scheduler is the standard MPTCP scheduler that sends packets over the best subflows, a second scheduler that sends packets in strict round robin and a scheduler that copies each packet over all subflows to detect the impact of retransmissions. Since Multipath TCP has never been deployed/tested on a large scale, these tests might trigger some alarms from firewalls/IPS/DPI boxes that could detect unknown behaviour. If this happens, please send a report to Fabien Duchene indicating the type of alarm. All the data collected will be analysed and I plan to report on these results during the tutorial at RIPE66 Thanks for your help, Olivier Bonaventure

1 0

Recent RIPE Atlas features and developments
by Vesna Manojlovic 08 Apr '13

08 Apr '13

Dear colleagues, Please find a description of the recent RIPE Atlas features n RIPE Labs: https://labs.ripe.net/Members/suzanne_taylor_muzzin/ripe-atlas-april-2013-u… Highlights: - one-off measurements & REST API for UDMs released to testers - new web-site navigation - we started shipping 3rd generation of probes We also have new ways to take part in the community, by: - adding your code to GitHub Community repository - submitting your photos of probes - meeting RIPE Atlas Ambassadors at some of the upcoming conferences We are looking forward to your feedback and questions. Regards, Vesna

1 0

RIPE66 - Call for presentations in the MAT-WG
by Christian Kaufmann 02 Apr '13

02 Apr '13

Dear Working Group Colleagues, RIPE 66 will take place from 13rd - 17th May 2013 in Dublin. (http://ripe66.ripe.net/) The MAT-WG session is scheduled to run between 16:00 - 17:30 on Thursday 16th May. My co-chair and I invite you to submit presentations or suggestions for content you would like to see in this session. As a reminder, the working group charter states: "The purpose of the working group is to provide a forum in which the RIPE NCC and the community can collaborate in the areas of data, tools and analysis relating to the Internet and its infrastructure, with a loose focus on monitoring, diagnosis, analysis and forecasting. It is not the purpose of the working group to compare the performance of networks for marketing purposes." If you would like to contribute anything to our session at the next RIPE meeting please email mat-wg-chairs(a)ripe.net Best regards, CK & Richard Co-chair's MAT Working Group

1 0

New on RIPE Labs: Cable Disruption as Seen in RIPEstat
by Mirjam Kuehne 27 Mar '13

27 Mar '13

Dear colleagues, We were curious to see what RIPEstat tells us about the recent cable disruption off the coast of Egypt. Please see the recent post on RIPE Labs: https://labs.ripe.net/Members/mirjam/mediterranean-cable-disruption-as-seen… Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: RIPEstat March Update
by Mirjam Kuehne 06 Mar '13

06 Mar '13

Dear colleagues, Many new features and improved functionality have been made available in RIPEstat since the last update. Users can now retrieve Internet number resource-related information by querying for hostnames and countries in RIPEstat. There are also five new widgets: Country Routing Statistics, Abuse Contact Finder, Forward DNS, DNS Chain, and RIPE Atlas Measurement Targets. In addition, we have created a new site tailored specifically for mobile users, and we released a new Apple mobile app. Please find more details on RIPE Labs: https://labs.ripe.net/Members/suzanne_taylor_muzzin/ripestat-march-update Kind regards, Mirjam Kuehne RIPE NCC

1 0

[MAT-WG]: Attributing inbound traffic from an IX
by Steve Nash 25 Feb '13

25 Feb '13

[This email has also gone to the EIX-WG ] Bad traffic is coming into my IX Peering interface. How do I find out where that bad traffic is coming from? How do I get it to stop? Customers of Internet Exchanges get a good deal on peering. Life is easy. Until something goes wrong. DDoS traffic starts coming into the IX interface.. I work for Arbor Networks and I have seen such questions many times. cFlow, Netflow, IPFIX can show that there is anomalous traffic arriving, but not where it is coming from (last hop). I have a suggestion and I would like to know if it is already in use, or considered of any use.. The answers are in Layer-2, of course. The MAC addresses identify which of the routers of my Peers actually transmitted a packet to my router. Problems: 1/ I could try to tap off the interface and get a packet trace, but I have to capture and identify a sample of the offending traffic, 2/ My peering router generates Netflow/IPFIX, but only populates Layer-3 data. Even if it did populate field 56 - Src MAC.. 3/ In either case I need to get into the ARP cache to figure out which IP address the MAC address belongs to.. Suggestion: Ask all IX customers to Embed the ASN into a Locally Administered MAC address on each peering interface. First byte for Local flag, second byte for interface number, others for four-byte ASN 02:00:00:00:01:00 for ASN 256 02:00:00:00:04:F9 for ASN 1273 (first interface) 02:01:00:00:04:F9 for ASN 1273 (second interface) Now, if all peers have their router interfaces configured with these Local MAC Addresses, then a customer can capture the traffic and very quickly extract the identity of each Peer that is sending packets. And peers can change their router hardware and still transmit from the same MAC address. Also, if I can get a peering Router to populate the Src MAC field of IPFIX and Netflow then I can start monitoring it all with flow reporting tools. Such MAC level encoding of ASN could be part of the peering agreement between organisations, or part of the requirement to connect to an IX RouteReflector. Even as a voluntary recommendation it could cut down the workload of identifying where traffic is coming from. I would appreciate your comments. I'll be in Dublin too, if a discussion is worthwhile. Regards Steve Nash

1 0

Call for Papers: RIPE 66, 13-17 May 2013 in Dublin, Ireland
by Benno Overeinder 22 Feb '13

22 Feb '13

Call for Papers: RIPE 66 A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 66 will take place on 13-17 May 2013 in Dublin, Ireland. https://ripe66.ripe.net/ The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the Plenary, BoF and Tutorial sessions at RIPE 66. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity in operations - Commercial transactions of IPv4 addresses - Data center technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange Submissions Attendees of the RIPE meetings are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters who are proposing a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. In addition to presentations selected in advance for the Plenary, the RIPE PC also offers several time slots for “lightning talks” which are selected immediately before or during the conference. The following requirements apply: - Proposals for Plenary talks, BoFs, Panels and Tutorials must be submitted for full consideration no later than 24 February 2013, using the meeting submission system at: https://meetings.ripe.net/pc/ Proposals submitted after this date will be considered on a space-available basis. - Presenters should indicate how much time they will require (30 minutes for talks is a common maximum duration, although some talks can be longer). - Proposals for talks will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For BoFs and panels, proposals must contain a clear description as well as names of invited panelists/presenters. - Due to potential technical issues, it is expected that most if not all presenters/panelists will be physically present at the RIPE meeting. - Lightning talks should be submitted using the meeting submission system. They must be short (10 minutes maximum) and often involve more timely topics. They can be submitted at any time. The allocation of lightning talk slots will be announced one day prior to the relevant session. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. -- Benno J. Overeinder NLnet Labs http://www.nlnetlabs.nl/

1 0

New on RIPE Labs: Finding Abuse Contact Information Using RIPEstat
by Mirjam Kuehne 19 Feb '13

19 Feb '13

[apologies for duplicates] Dear colleagues, We implemented a new widget in RIPEstat that allows you to find abuse contact information registered in the RIPE Database. Please find more information on RIPE Labs: https://labs.ripe.net/Members/cteusche/finding-anti-abuse-contact-informati… Kind regards, Mirjam Kuehne RIPE NCC

1 0

Phase 1 of RIPE Atlas Anchors pilot - report on RIPE Labs
by Vesna Manojlovic 15 Feb '13

15 Feb '13

Dear community, [apologies for the duplicates] we just published an article on RIPE Labs with the status & features available for the hosts of RIPE Atlas Anchor boxes after the Phase 1: https://labs.ripe.net/Members/becha/ripe-atlas-anchors-pilot-update-on-phas… Share and enjoy :) Vesna

1 0

New on RIPE Labs: Country Specific Graphs in RIPEstat
by Mirjam Kuehne 06 Feb '13

06 Feb '13

[apologies for duplicates] Dear colleagues, We developed additional functionality in RIPEstat that shows various datasets by country. A new widget called Country Routing Statistics is now available, along with the ability to compare the situation in different countries side by side. Please find more details on RIPE Labs: https://labs.ripe.net/Members/cteusche/country-specific-graphs-in-ripestat Kind regards, Mirjam Kuehne RIPE NCC

1 0

New RIPE Atlas features released in January, and other news
by Vesna Manojlovic 01 Feb '13

01 Feb '13

Dear colleagues, today's RIPE Labs article describes new release of RIPE Atlas, as well as other community news: https://labs.ripe.net/Members/becha/ripe-atlas-january-2013-achievements Looking forward to hear from you, regards, Vesna -- Vesna Manojlovic BECHA(a)ripe.net Senior Community Builder @Ms_Measurements for Measurements Tools RIPE NCC http://ripe.net

1 0

New on RIPE Labs: Access RIPE Atlas via LIR Portal
by Mirjam Kuehne 22 Jan '13

22 Jan '13

[apologies for duplicates] Dear colleagues, You can now access RIPE Atlas via the LIR Portal. Please find more information on RIPE Labs: https://labs.ripe.net/Members/becha/ripe-atlas-via-lir-portal Kind Regards, Mirjam Kuehne RIPE NCC

1 0

RIPE Atlas in 2012: achievements and acknowledgments
by Vesna Manojlovic 16 Jan '13

16 Jan '13

Dear colleagues, thanks to the involvement of RIPE Atlas community, we have reached many milestones this year, and enabled RIPE NCC membership, and Internet community to use RIPE Atlas in order to measure speed and performance of their networks, and to look at the "health of the Internet" in this eventful year. We are grateful to the members, hosts, sponsors and all users. Please see the story of the RIPE Atlas achievements in this RIPE Labs article: https://labs.ripe.net/Members/becha/ripe-atlas-2012-a-year-in-review Regards, Vesna -- Vesna Manojlovic BECHA(a)ripe.net Senior Community Builder @Ms_Measurements for Measurements Tools RIPE NCC http://ripe.net

1 0

New on RIPE Labs: RIPEstat 2012 Year in Review
by Suzanne Taylor Muzzin 07 Jan '13

07 Jan '13

Dear colleagues, Please find on RIPE Labs a review of all the developments that took place with RIPEstat during 2012: https://labs.ripe.net/Members/suzanne_taylor_muzzin/ripestat-2012-year-in-r… This includes new widgets developed, the new user interface, the new text service, better data integration, improved functionality and more. In addition, we give a sneak peak of the developments we'll be working on during 2013. Kind regards, Suzanne Taylor Muzzin RIPE NCC

1 0

Deadline Extension: TRAC 2013 4th International Workshop on Traffic Analysis and Classification
by Sandrine VATON 29 Dec '12

29 Dec '12

******************************************************************************* CALLFORPAPERS ******************************************************************************* TRAC2013 4th International Workshop on TRaffic Analysis and Classification IEEE sponsored July 1-5, 2013, Cagliari, Italy http://netgroup.iet.unipi.it/trac2013 co-located with IWCMC 2013 (http://iwcmc.org/2013/) CALLFORPAPERS Brief description ----------------- The evolution of the Internet in the last few years has been characterized by dramatic changes to the way users behave, interact and utilize the network. The rapid introduction of new categories of applications such as network games and peer-to-peer, the increasing presence of malicious traffic, and the widespread use of encryption techniques, make the measurement, analysis and classification of Internet traffic a challenging task. The research community and many network operators are responding to these changes by designing and deploying traffic measurement and classification architectures of increasing complexity. Such activities are pivotal for researchers, developers, service managers and providers, as well as for end users involved in the evolution of the networks. Traffic classification and analysis mechanisms belong to the wide set of tools that helps the allocation, control and management of resources in IP networks. Following the development and the evolution of Internet applications, new efficient classification techniques are highly desirable to support advanced capabilities as regards network monitoring, network resource management, anomaly detection, and network auditing. This workshop is intended to serve as a forum for scientists and engineers in academia and industry to exchange and discuss their experiences and research results about all aspects of traffic classification and analysis. Topics of interest ------------------ The workshop is soliciting high quality papers discussing original and innovative experimental activities, unpublished and not currently submitted for publication elsewhere, on topics, including but not limited to, the following: # Traffic classification algorithms and techniques # Detection, analysis, and classification of network anomalies # Distributed algorithms for anomaly detection # Platforms for on-line, real-time traffic classification # Comparisons among traffic classification techniques # Privacy-preserving classification techniques # Identification and classification of encrypted traffic # Classification algorithms for anomaly detection # Impact of sampling on network traffic classification # Applications of traffic classification # Data-reduction techniques for traffic traces # Anonymization tools and their effects on traffic classification # Traffic measurements, analysis and modeling # Packet classification at ultra-high link rates (terabits) # Fast table look-up # Internet measurements and accounting support in switches/routers # Advanced algorithms for deep packet inspection at high speed # High speed packet processing Important Dates --------------- Papers submission deadline: December 15, 2012 Notification of decision: March 15, 2013 Camera-ready deadline: April 1, 2013 Instructions for Authors ------------------------ Perspective authors are invited to submit using the EDAS system a full paper of not more than six (6) IEEE style pages including results, figures and references. Papers will be reviewed with the standard reviewing procedure. Accepted papers will be published on IEEE Digital Library. TRAC2013 co-Chairs -------------------------------------- Christian Callegari, University of Pisa, Italy (christian.callegari(a)iet.unipi.it <mailto:christian.callegari@iet.unipi.it>) Sandrine Vaton, Telecom Bretagne, France (Sandrine.Vaton(a)telecom-bretagne.eu <mailto:Sandrine.Vaton@telecom-bretagne.eu>) -- Dr Sandrine VATON Maître de Conférences (HDR) Institut Mines-Télécom, Télécom Bretagne Brest, France Téléphone: +33 2 29 00 10 29 http://perso.telecom-bretagne.eu/sandrinevaton

1 0

New on RIPE Labs: RIPEstat December Update
by Mirjam Kuehne 21 Dec '12

21 Dec '12

Dear colleagues, Please find on RIPE Labs an update of the most recent RIPEstat developments: https://labs.ripe.net/Members/suzanne_taylor_muzzin/ripestat-2012-december-… This includes new widgets, the new text service, support for single IP address querying, and information about when database objects were last updated. Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: RIPE Atlas Roadmap - November/December Update
by Mirjam Kuehne 18 Dec '12

18 Dec '12

Dear colleagues, Please find a short report of the new developments around RIPE Atlas on RIPE Labs: https://labs.ripe.net/Members/becha/ripe-atlas-roadmap-november-2012-update Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Superstorm Sandy and the Global Internet
by Mirjam Kuehne 03 Dec '12

03 Dec '12

Dear colleagues, Following on from an earlier article by Emile Aben on the global effects of the storm Sandy, please see this new post on RIPE Labs contributed by Geoff Huston: https://labs.ripe.net/Members/gih/superstorm-sandy-and-the-global-internet Kind regards, Mirjam Kuehne RIPE NCC

1 0

New Statistics Dashboard on RIPE Labs
by Mirjam Kuehne 26 Nov '12

26 Nov '12

[apologies for duplicates] Dear colleagues, Following up from the list of statistics we published on RIPE Labs recently, we created a statistics dashboard that shows many automatically updated graphs and allows you to search for certain topics by tags: https://labs.ripe.net/statistics/ If you have any comments or suggestions, please do not hesitate to let me know. Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Global Effect of Hurricane Sandy as Seen in RIPE Atlas
by Mirjam Kuehne 12 Nov '12

12 Nov '12

Dear colleagues, In this new RIPE Labs article we look at some of the effects Hurricane Sandy had on the Internet data plane, as we can see them in traceroutes done by RIPE Atlas: https://labs.ripe.net/Members/emileaben/ripe-atlas-hurricane-sandy-global-e… Kind regards, Mirjam Kuehne RIPE NCC

1 0