- mat-wg - mailman.ripe.net

New on RIPE Labs: Dealing with the Undercurrent of Unwanted Traffic
by Alun Davies 06 Jul '22

06 Jul '22

Dear colleagues, Leslie Daigle and her colleagues over at the Global Cyber Alliance have been collecting data from hundreds of sensors to get a clearer picture of how much unwanted traffic there is out there. How much counts as too much? Read more on RIPE Labs: https://labs.ripe.net/author/leslie-daigle/dealing-with-the-undercurrent-of… Best regards, Alun Davies RIPE Labs Editor RIPE NCC

3 3

RIPE Atlas, RIPEstat and RIS Quarterly Planning Q3 2022
by Robert Kisteleki 30 Jun '22

30 Jun '22

Dear colleagues, We’ve now published our quarterly for RIPE Atlas, RIPEstat and RIS. These are available at: https://www.ripe.net/support/documentation/quarterly-planning We hope that by providing these plans, we can better inform the community of the ongoing work on the services we operate and get feedback on our work. If you have any input on our plans or want to let us know what you would like to see us work on, please let us know. Kind regards, Robert Kisteleki Research and Development Manager RIPE NCC

1 0

Request: Provide a simple API to get user's network info.
by Darvari 28 Jun '22

28 Jun '22

Hello, One of the main problems in tools that intend to measure censorship or want to measure the quality and security of the user's network is access to a simple API that has several important information of the user's network: - AS Namber - AS Name - Country Code - and if possible, City Name Also the user's IP to be completely erased from the data. To do this, I use an unofficial Cloudflare service that may change or be restricted at any time: https://speed.cloudflare.com/meta <https://speed.cloudflare.com/meta> I am aware that many other tools and projects need this. Because either their backend server is blocked or other services such as ipinfo, ipconfig, avast, etc, are not available in all countries due to sanctions. Therefore, I ask you to provide such a service because you have the most accessibility in the world. Best Regards, Hossein Darvari

1 0

RIPE Atlas, RIPEstat and RIS Quarterly Planning Q2 2022
by Robert Kisteleki 17 Jun '22

17 Jun '22

Dear colleagues, We are now publishing our quarterly plans for RIPE Atlas, RIPEstat and RIS. These are available at: https://www.ripe.net/support/documentation/quarterly-planning The goals of publishing our plans are to be transparent about the work we will be carrying out in the coming months, to get your input on those plans, and to hear what you would like to see us work on going forward. We will provide status updates as the work progresses and add input from the community to the pages. We will also archive previous plans so you can track how we progress with our work. If you have any input on our plans or want to let us know what you would like to see us work on, please let us know. Kind regards, Robert Kisteleki Research and Development Manager RIPE NCC

2 1

Join our Open House on the RIPE NCC Internet Country Report – Bulgaria, Moldova and Romania
by Alastair Strachan 14 Jun '22

14 Jun '22

Dear colleagues, We are organising an Open House on the Internet Country Report we recently published on Bulgaria, Moldova and Romania. The event will be on Wednesday, 15 June from 10:00-11:30 UTC. Note that the Open House is not limited to people from these three countries but is open to anyone interested in learning about how the region’s Internet is developing. You can find the country report at: https://labs.ripe.net/documents/292/RIPE_NCC_Internet_Country_Report_Bulgar… <https://labs.ripe.net/documents/292/RIPE_NCC_Internet_Country_Report_Bulgar…> Register for free at: https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in… <https://www.ripe.net/participate/meetings/open-house/ripe-ncc-open-house-in…> I hope to see many of you at there! Best regards, Alastair Strachan RIPE NCC Communtiy Development Officer

1 0

RIPE IPmap v1.1.0: reverse-dns engine
by Chris Amin 18 May '22

18 May '22

Dear colleagues, In November of last year, we released version 1.0.0 of RIPE IPmap. The main feature of that version was the new latency engine, but we also included a prototype of the “reverse-dns” engine, which used very basic pattern matching of hostnames from PTR to provide location guesses. We are pleased to announce that with v1.1.0 the reverse-dns engine has received a major upgrade, allowing it to provide much better geolocation answers through pattern analysis of the entire IPmap “latency” and “worlds” datasets, with daily analysis performed mostly thanks to the sc_hoiho tool from CAIDA’s scamper toolkit. More information about the new engine, as well as links to information on the sc_hoiho tool and its theoretical underpinnings can be found at: https://ipmap.ripe.net/docs/01.manual/#reverse-dns As well as the new and improved reverse-dns engine, the suggestion system has been improved to better combine results from the various geolocation engines. As always, you can get started with the API with the IPmap docs at: https://ipmap.ripe.net/docs/ Note: this mail was sent to ipmap(a)ripe.net yesterday, but I'm aware that not many people have subscribed to that list (yet). If you're interested in IPmap you can sign up to that list at: https://lists.ripe.net/mailman/listinfo/ipmap Kind regards, Chris Amin RIPE NCC

1 0

MAT-WG Agenda RIPE 84
by Brian Trammell (RIPE) 10 May '22

10 May '22

Greetings, all, Here’s the agenda for MAT-WG at RIPE 84, 12:00-13:00 Wednesday 18 May 2022 in Berlin: * Welcome and Agenda Bashing * Data, Data Everywhere, And Now We Stop to Think (Leslie Daigle, 15 min) * Anomaly Alerting for RIPE Atlas (Wolfram Friele, 10 min) * Flow Monitoring in bwNet (Daniel Nägele, 10 min) * Tools Update (Robert Kisteleki, 15 min) * Co-Chair Welcome and Farewell (MAT-WG chairs, 10 min) Cheers, Brian, for the RIPE MAT-WG co-chairs

1 0

[TMA 2022 PhD School] Network Intelligence and Measurements - SIGCOMM Travel Grants Available
by Giovane C. M. Moura 20 Apr '22

20 Apr '22

TL;DR: * PhD school in Internet Measurements in Network Intelligence * SIGCOMM travel grants available! (please send to your students) * Application deadline: April 22nd, 2022 * School dates: June 27th and 28th, 2022 * Location Enschede, NL. * https://tma.ifip.org/2022/phd-school/ ===== 10th TMA PhD School Network Intelligence and Measurements June 27th and 28th, 2022 Enschede, The Netherlands https://tma.ifip.org/2022/phd-school/ After the interruption of the last two editions of the TMA PhD school due to the COVID pandemic, we are extremely happy to announce the 10th TMA PhD School, organized by the University of Twente in Enschede, The Netherlands, together with the 6th Network Traffic Measurement and Analysis Conference. Under the theme Network Intelligence and Measurements, the 10th TMA PhD School will include 4 tutorials, by 5 distinct lecturers, over a 2 days program. Lectures are accompanied by related practical lab sessions, where students have the opportunity to put into practice learned notions. Thanks to SIGCOMM, we will offer a significant number of travel grants, see the details below. Registration and Deadlines Registrations are now open, you can apply at https://hotcrp.info.ucl.ac.be/tma2022phd/. As the PhD school is popular, we encourage students to register early. Our goal is to admit as many students as possible but we do note that we have limited room availability. Application deadline: April 22nd at 23:59 UTC Tentative decision notification: April 29th PhD School Speakers The list of speakers for the 10th TMA PhD school includes: Anna Brunstorm is a Full Professor and Research Manager for the Distributed Systems and Communications Research Group at Karlstad University. She will familiarize the students with experimentation and measurements methodologies for next generation mobile networks, based on her vast experience on applied research. She will also give hands-on training on testbeds and analytics approaches, stemming from her numerous contributions in projects such as H2020 MONROE, NEAT or 5GENESIS. Emile Aben is a System architect at the RIPE NCC, Netherlands. The lecture will provide an overview of the RIPE Atlas Internet data collection system along with a review of the addressed use-cases. In the related lab students will be asked to design and lunch experiments on the Atlas measurement platform, and to process the collected data to address some given problem. Thymen Wabeke and Thijs van den Hout are research engineers with SIDN Labs (.nl registry). They research how machine learning (ML) applications can increase the security of the internet and the Domain Name System (DNS). The lecture will focus on operationalizing a ML model. There are several challenges involved in this process, such as efficiently collecting ground truth labels, analysts needing to understand model inferences, and monitoring model performance so you know when it fails and needs updating. The lecture will include a hands-on training, so that participants can try out some techniques immediately. Pedro Casas is a Senior Scientist at the Austrian Institute of Technology, where he acts as Research Lead in AI4NETS (AI/ML for Networking). He will present a broad overview on the application of AI/ML to network data analysis problems, including network security, anomaly detection, and Quality of Experience (QoE) monitoring. The lecture provides an introduction to the basics of AI/ML, going from more traditional applications to newer paradigms, including deep learning, graph-based learning, generative models, explainable AI, learning in adversarial scenarios, and more. The ultimate goal of the lecture is to motivate – for the newcomers, and to strengthen – for those already in the field, the research in AI4NETS. The PhD School program will include 4 poster sessions where students can present their own (ongoing) PhD work to other students and to the lecturers, and receive individual feedback from them. Poster sessions will take place during breaks. The program will also include an informal interactive session between students and the speakers, with the explicit goal of fostering “vertical” interaction between students and the speakers, and “horizontal” interaction between the students themselves. Students will have the opportunity to interview the speakers, asking for their expert opinion on general aspects (non-technical) of the current research dynamics in the field of traffic monitoring and analysis (e.g., how they see the prospective development of a particular research topic in the near future, or what are the key ingredients that drive the success of an experimental measurement platform, etc). The PhD school program will include social activities on both days, where students, lecturers and attendees of the main TMA conference will have the opportunity to interact informally. A social dinner would be organized on the second day. How to apply and Travel Grants The price for registration for the TMA 2022 PhD school will be fixed soon and will be below 250 Euro. This fee will be levied on all attending students, also those receiving travel grants, as the travel grant rules from our sponsors require us to ask for a small own investment. In order to apply, please submit the following as a single PDF document: the title and abstract of your poster (in the fields required by the submissions system) a current CV with contact information and e-mail address a short personal statement, including: i) a description of the research subject followed by the student, and (ii) information that the applicant feels is relevant to support his/her application, e.g., why the PhD School attendance is important to the applicant’s research and career development; In case you also want to apply for optional travel support, we ask you to also include: a letter from your advisor which should: (i) confirm the applicant’s good standing in the institution; (ii) explain why the applicant would benefit from attending the TMA PhD School the estimated expenses for attending the TMA PhD School (total, and breakdown by travel and lodging), and an indication of which cost items would need to be covered by the grant; if the applicant will be unable to attend the school without a travel grant, they should explain why this is the case (in this case the advisor’s letter should additionally explain the current funding status of the applicant and why the applicant is in need of the travel grant) The organization will prioritize awarding of travel grants to students who will be unable to attend without a grant, and additionally based on diversity and the region from which the applicant has to travel, to ensure representation from traditionally underrepresented regions. In special cases, where the registration fee is also prohibitive, the organization may decide to waive the fee at its discretion. Any decision made by the organization regarding attendance and awarding of travel grants is final. We note that reimbursements of travel grants may take up to several months to complete. Important Notes Please pay attention to the following details about the student travel grant application and reimbursement process: The School will admit a limited number of students. Students enrolled in PhD study programs will receive preference both in the admission to the School and the travel grant awarding. Students admitted to the school are encouraged to attend the TMA conference. We expect a student travel grant will significantly offset air fare and shared hotel accommodation. However, it may not fully cover these expenses, since our desire is to maximize participation by students. In order to obtain reimbursement, you must provide original receipts for air fare and hotel expenses, along with boarding passes (plane or train) for both outbound and inbound journeys. All students participating in the School are required to present a poster describing their research and to actively engage with all activities. Failing to do so will lead to admission rejection. Please provide complete contact information. You will be notified via email, so make sure your email address is correct on your application. Hope to see you all in Enschede for a fantastic TMA PhD School!

1 0

New on RIPE Labs: Detecting DNS Root Manipulation
by Alun Davies 19 Apr '22

19 Apr '22

Dear colleagues, In 2021, when reports emerged that hosts in Mexico were unable to reach whatsapp.net, it was determined that middleboxes were to blame. These devices were intercepting the queries to the root instance hosted in China and sending a bogus reply. Taking this as their starting point, Qasim Lone and colleagues have been investigating the prevalence of middleboxes using RIPE Atlas: https://labs.ripe.net/author/qasim-lone/detecting-dns-root-manipulation/ Best regards, Alun Davies RIPE Labs Editor RIPE NCC

1 0

MAT WG chair selection
by Brian Trammell (RIPE) 15 Apr '22

15 Apr '22

Greetings, all, It has been a while since we have run our chair selection process (see https://www.ripe.net/ripe/mail/archives/mat-wg/2015-February/000559.html); as we look to returning to in-person meetings in Berlin it occurred to us that now would be a good time to do so. To save you the fun of clicking through to the list archives, the process is as follows: > 1. A call for interested parties is made on the WG mailing list at three yearly intervals, or as needed > 2. Interested parties have 2 weeks to make their interest known via the mailing list > 3. The MAT-WG chairs issue a call for discussion as per normal. WG members express their approval or otherwise of the presented candidates. > 4. After two weeks the chairs declare consensus as they would do for a policy proposal Following steps 1 and 2 of this process: If you are interested in co-chairing MAT WG, please make your intent known by sending a message to mat-wg(a)ripe.net by Monday 28 March 2022; once we have a candidate list, wi’ll issue a call for discussion on the list. Many thanks, cheers, Nina + Brian (MAT WG chairs)

10 20