- mat-wg - mailman.ripe.net

[Fwd: Community suggestion for ATLAS spoof test]
by Vesna Manojlovic 21 May '13

21 May '13

Dear colleagues, please take a look at the suggestion from Alexander Isavnin. Since he is here in Dublin, we can talk about it during MAT-WG or, if there is not enough time, at the RIPE Atlas community BoF. However, the opinion of the rest of the community counts too, so I ask you to comment on the mailing list, if you are interested. Regards, Vesna -------- Original Message -------- Subject: Community suggestion for ATLAS spoof test Date: Wed, 15 May 2013 21:16:30 +0200 From: Alexander Isavnin <isavnin(a)netline.ru> To: Vesna Manojlovic <BECHA(a)ripe.net> Dear Vesna! Could you forward this suggestion to mat-wg mailing list (and other appropriate lists). Due to high requirements to mitigate spoofing there is need to detect one. RIPE community have great distributed networking tool - ATLAS. As first step i suggest to select address from RIPE NCC network and allow all probes (if probe is not behind NAT) to send spoofed packet with this address as source. As first and a half step - allow to send packets with source addresses of anchors (if anchor's host agrees) As second step - allow probe host to permit use his address as spoofed source. Best regards, Alexander Isavnin

6 5

Re: [mat-wg] [Fwd: Community suggestion for ATLAS spoof test]
by k claffy 20 May '13

20 May '13

From: Antoin Verschuren <antoin.verschuren(a)sidn.nl> If all we want to know is an oversight of the state of spoofing now, and in a year's time, can't we just ask the Atlas users (AKA the mailinglist) that want to know to do a 1 time spoofing test on http://spoofer.csail.mit.edu/summary.php from their atlas probe network? IMHO that is less work than to ask Atlas users for permission. Antoin, Thanks for suggesting that, we agree that Atlas nodes are a terrific way to increase the scope of visibility of spoofing. I should note that we have spent the last few months updating the 7-year old spoofer code and web site (btw, it's now at http://spoofer.cmand.org/ , jointly managed by Rob Beverly at nps.edu and CAIDA) including adding tests for IPv6 spoofing ability, making graphs on the summary page clearer, classifying spoofing-capable networks into types, and allowing probing to multiple (CAIDA Ark) destintations (which also increases visibility into spoofing, but not nearly as much as 1000+ Atlas nodes would..) we plan to deploy and announce an updated version by 1 June. so if you're going to encourage Atlas nodes to try our spoofer test, it would be ideal to have them do it shortly after 1 June. we will send an announcement to this list when we release the new version. after june we will still be working on better techniques to filter tests for representativeness, and other methodology improvements. please do send us requests for other changes/additions you would like to see. ( http://spoofer.cmand.org/contact.php ) thanks, k (and Rob Beverly and Ryan Koga, current team)

1 0

New on RIPE Labs: RIPE Atlas Code for Analysis and Statistics Reporting
by Mirjam Kuehne 13 May '13

13 May '13

Dear colleagues, We are releasing the code we use to analyse RIPE Atlas measurements and produce summary statistics. This will make processing these measurement results easier for the community. We're also inviting you to participate in improving this further. Please find more information on RIPE Labs: https://labs.ripe.net/Members/wilhelm/ripe-atlas-code-for-analysis-and-stat… Kind regards, Mirjam Kuehne RIPE NCC

1 0

[Fwd: [ipv6-wg] New on RIPE Labs: Implementing Fifth Start IPv6 RIPEness]
by Vesna Manojlovic 13 May '13

13 May '13

Sorry for the cross-posting -- I think the IPv6 measurements that we are doing for the 5th star in IPv6 RIPEness are of interest to MAT-WG. I'll be presenting about this at IPv6-WG in Dublin, and if there is interest & questions from this group I can mention it too. Regards, Vesna -------- Original Message -------- Subject: [ipv6-wg] New on RIPE Labs: Implementing Fifth Start IPv6 RIPEness Date: Mon, 13 May 2013 07:09:34 +0200 From: Mirjam Kuehne <mir(a)ripe.net> To: ipv6-wg(a)ripe.net Dear colleagues, In this new article on RIPE Labs we present the first results of a fifth star for IPv6 RIPEness. This is a way to measure real IPv6 deployment in the RIPE NCC service region: https://labs.ripe.net/Members/emileaben/ipv6-ripeness-implementing-the-5th-… We would like to receive your feedback on a number of open question raised in the article. We also hope to see many of you at the IPv6 WG meeting in Dublin later this week where these results will be presented. Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: BGPlay now integrated in RIPEstat
by Mirjam Kuehne 08 May '13

08 May '13

[apologies for duplicates] Dear colleagues, We are proud to present a newly revamped version of the well-known BGPlay tool. It is now integrated into RIPEstat and was developed in partnership with the Compunet Research Lab of Roma Tre University. Please find more information on RIPE Labs: https://labs.ripe.net/Members/vastur/bgplay-v2-integrated-in-ripestat Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Introduction of RIPE Atlas Quick Looks
by Mirjam Kuehne 07 May '13

07 May '13

[apologies for duplicates] Dear colleagues, A new RIPE Atlas feature is now available to RIPE NCC members: Quick Look measurements. Members can use this service for a quick, real-time assessment of connectivity without hosting a RIPE Atlas probe. This feature is based on one-off measurements that are available to all RIPE Atlas probe hosts. Please find more information on RIPE Labs: https://labs.ripe.net/Members/kistel/ripe-atlas-quick-look-for-members Kind Regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Releasing RIPE Atlas Measurements Source Code
by Mirjam Kuehne 06 May '13

06 May '13

Dear colleagues, This new article on RIPE Labs introduces the RIPE Atlas measurement source code. The measurement code is the part that runs on the RIPE Atlas probes to schedule and execute particular measurements, and thereby forms the core of the RIPE Atlas system. https://labs.ripe.net/Members/philip_homburg/ripe-atlas-measurements-source… Kind regards, Mirjam Kuehne RIPE NCC

1 0

More roadmaps added to RIPE NCC Roadmap
by Mirjam Kuehne 06 May '13

06 May '13

Dear colleagues, We added roadmaps for DNSMON and RIPEstat to the RIPE NCC Roadmap: htps://roadmap.ripe.net Please let us know if you find this useful or if you have any questions or suggestions. Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Using RIPE Atlas to find most popular DNS anycast instances
by Mirjam Kuehne 03 May '13

03 May '13

Dear colleagues, Please find a new article on RIPE Labs, contributed by Stephane Bortzmeyer: Using RIPE Atlas User Defined Measurements to Find the Most Popular Instances of a DNS Anycast Name Server https://labs.ripe.net/Members/stephane_bortzmeyer/using-atlas-udm-to-find-t… Kind regards, Mirjam Kuehne RIPE NCC

1 0

Re: [mat-wg] Full BGP full view
by Pietro Marchetta 02 May '13

02 May '13

Dear, while a complete and exhaustive view of the BGP global routing would be a milestone for the whole networking research, all the available datasets provide just a partial view, since, as already pointed out by Sebastian Castro, the current datasets are typically obtanied through a set of vantage points with a limited visibility. You might find a recent and well-done analysis on the incompleteness of the BGP view as well as the root causes in this paper: Enrico Gregori, Alessandro Improta, Luciano Lenzini, Lorenzo Rossi, and Luca Sani. On the incompleteness of the AS-level graph: a novel methodology for BGP route collector placement. IMC 2012 At the same time, there several severe sources of inaccuracy to take into account when you use Traceroute to infer the AS level topology/transitions/neighborhood. A good starting reference in this case could be the following paper: Yu Zhang, Ricardo V. Oliveira, Hongli Zhang, Lixia Zhang. Quantifying the Pitfalls of Traceroute in AS Connectivity Inference. PAM 2010 Furthermore, we have recently demonstrated how Third-party addresses cause the inference of a significant percentage of false AS-level links and bogus AS-level loops when Traceroute is used to investigate the AS level connectivity. While this specific limitation has been largely ignored, you may find many more details in this paper: Pietro Marchetta, Walter de Donato, Antonio Pescapé. Detecting Third-party Addresses in Traceroute Traces with IP Timestamp Option. PAM 2013. I hope this helps. Best regards. Pietro Marchetta On 01/05/13 00:43, Pavel V. Veselovskiy wrote: Hello, Hi, I'm validating a new technique for finding the route between autonomous systems with the least number of transitions. This method is came from the wireless sensor networks. To compare the efficiency of this method, and BGP algorithms, we need a full BGP routing table that reflects the configuration of all the neighbors for all AS on the Internet. At first I took the BGP Full View from O-IX site http://www.routeviews.org/ And that's specifically from here http://archive.routeviews.org/oix-route-views/ Already in the first few tests, it was found out that these tables are incomplete, since a number of traceroutes, we have given from the servers is not suitable neighbors and a method results mismatched with the actual path, or the path is longer than the traceroute outputs. Besides knowing the total number of announced AS and counting the number of unique AS numbers for these log files (http://archive.routeviews.org/oix-route-views/) we found that these logs contains references to only about 60% of the number All advertised by AS. I've came across the same issue while doing some research for CAIDA. You have to bear in mind the locations where the BGP dumps are taken are "vantage point", so you will get a view of the network from that point. If you collect enough vantage point, you will reach a state when you can "see" mostly everything. What I did at that time was combine various sources from RouteViews and RIPE RIS (http://www.ripe.net/data-tools/stats/ris/ris-raw-data) until reaching an acceptable level of coverage. Recommend, please, where we can find a really complete picture of all the neighboring AS? Cheers, -- Kind Regards, Pavel Veselovskiy, Samara State Aerospace University -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 -- Pietro Marchetta, PhD student Dipartimento di Ingegneria Elettrica e delle Tecnologie dell'Informazione University of Napoli ''Federico II'' Via Claudio, 21 - 80125, Napoli (Italy) WebSite: http://wpage.unina.it/pietro.marchetta Phone: +390817683821 - Fax: +390817683816

2 1