research-article

Public Access

Identifying and Aggregating Homogeneous IPv4 /24 Blocks with Hobbit

Authors:

Neil SpringAuthors Info & Claims

IMC '16: Proceedings of the 2016 Internet Measurement Conference

Pages 151 - 165

https://doi.org/10.1145/2987443.2987448

Published: 14 November 2016 Publication History

Abstract

Addresses in the Internet are typically measured as if they represent larger aggregates. These larger blocks may be based on prefixes advertised through BGP, with larger prefixes broken into "/24s." Such an approach is typical in network mapping and other research, and tries to balance the detail available by probing more addresses with the efficiency available by probing only as many as will discover new information.

In this paper, we consider prefix homogeneity: the extent to which addresses within the same prefix are co-located in topology and have similar performance. We consider whether "24" is the right unit of homogeneity, whether additional efficiency is possible by using larger or even discontiguous address aggregates in some cases, and in what situations additional detail may be missed by treating addresses as representative of /24 blocks. With these results, we present a map of homogeneous address aggregates in the network.

References

[1]

L. Quan, J. Heidemann, and Y. Pradkin, "Trinocular: Understanding Internet reliability through adaptive probing," in SIGCOMM, 2013.

Digital Library

[2]

L. Quan, J. Heidemann, and Y. Pradkin, "When the internet sleeps: correlating diurnal networks with external factors," in IMC, 2014.

Digital Library

[3]

CAIDA, "The CAIDA UCSD IPv4 Routed /24 Topology Dataset." http://www.caida.org/data/active/ipv4 routed 24 topology dataset.xml.

[4]

C. Contavalli, W. van der Gaast, D. Lawrence, and W. Kumari, "IETF Draft: Client subnet in DNS requests," Nov. 2014.

[5]

S. v. Dongen, Graph clustering by flow simulation. University of Utrecht, 2000.

[6]

B. Augustin, T. Friedman, and R. Teixeira, "Measuring load-balanced paths in the internet," in IMC, 2007.

Digital Library

[7]

ZMap, "FULL IPv4 ICMP Echo Request." https://scans.io/series/0-icmp-echo request-full ipv4.

[8]

Z. Durumeric, D. Adrian, A. Mirian, M. Bailey, and J. A. Halderman, "A search engine backed by Internet-wide scanning," in CCS, 2015.

Digital Library

[9]

"Cisco Load-Balancing." http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/5212-46.html\#perper.

[10]

S. K. Thompson, Sampling. John Wiley & Sons, 2012.

[11]

Y.-C. Chen, Y. Liao, M. Baldi, S.-J. Lee, and L. Qiu, "OS fingerprinting and tethering detection in mobile networks," in IMC, 2014.

Digital Library

[12]

B. Augustin, X. Cuvellier, B. Orgogozo, F. Viger, T. Friedman, M. Latapy, C. Magnien, and R. Teixeira, "Avoiding traceroute anomalies with paris traceroute," in IMC, 2006.

Digital Library

[13]

Cisco, "TTL Expiry Attack Identification." http://www.cisco.com/c/en/us/about/security-center/ttl-expiry-attack.html.

[14]

B. Augustin, T. Friedman, and R. Teixeira, "Multipath tracing with paris traceroute," in E2EMON, 2007.

[15]

MaxMind, Inc., "Geolite databases." http://dev.maxmind.com/geoip/legacy/geolite/

[16]

KRNIC, "WHOIS services." http://whois.kisa.or.kr/eng/.

[17]

KRNIC, "IPv4 address holdings." http://krnic.or.kr/jsp/eng/ipas/statistics/ipV4.jsp.

[18]

Amazon, "AWS regions and endpoints." http://docs.aws.amazon.com/general/latest/gr/ rande.html.

[19]

R. Padmanabhan, P. Owen, A. Schulman, and N. Spring, "Timeouts: Beware surprisingly high delay," in IMC, 2015.

Digital Library

[20]

Q. Xu, J. Huang, Z. Wang, F. Qian, A. Gerber, and Z. M. Mao, "Cellular data network infrastructure characterization and implication on mobile content placement," in SIGMETRICS, 2011.

Digital Library

[21]

K. Zarifis, T. Flach, S. Nori, D. Choffnes, R. Govindan, E. Katz-Bassett, Z. M. Mao, and M. Welsh, "Diagnosing path inflation of mobile client traffic," in PAM, 2014.

Digital Library

[22]

"BITNODES." https://bitnodes.21.co/nodes/.

[23]

Cox, "PHOENIX NAP." http://www.coxbusinessaz.com/assets/docs/BusinessContinuitySheet.pdf.

[24]

Cisco, "Load Balancing with CEF." http://www.cisco.com/en/US/products/hw/modules/ps2033/prod technical reference09186a00800afeb7.html.

[25]

X. Cai and J. Heidemann, "Understanding block-level address usage in the visible internet," in SIGCOMM, 2010.

Digital Library

[26]

D. Dueck, Affinity propagation: clustering data by passing messages. University of Toronto, 2009.

[27]

"MCL." http://micans.org/mcl/.

[28]

S. Brohee and J. Van Helden, "Evaluation of clustering algorithms for protein-protein interaction networks," BMC bioinformatics, vol. 7, no. 1, p. 1, 2006.

[29]

Time Warner Cable, "RDNS naming schemes." http://postmaster.rr.com/reverse dns.

[30]

M. J. Freedman, M. Vutukuru, N. Feamster, and H. Balakrishnan, "Geographic locality of ip prefixes," in IMC, 2005.

Digital Library

[31]

M. Gharaibeh, H. Zhang, C. Papadopoulos, and J. Heidemann, "Assessing co-locality of ip blocks," in IEEE Global Internet Symposium, 2016.

[32]

F. Chen, R. K. Sitaraman, and M. Torres, "End-user mapping: Next generation request routing for content delivery," in SIGCOMM, 2015.

Digital Library

[33]

T. Flach, E. Katz-Bassett, and R. Govindan, "Quantifying violations of destination-based forwarding on the internet," in IMC, 2012.

Digital Library

[34]

C. Pelsser, L. Cittadini, S. Vissicchio, and R. Bush, "From paris to tokyo: On the suitability of ping to measure latency," in IMC, 2013.

Digital Library

Cited By

Raman PFlores M(2021)Building Out the Basics with HopletsPassive and Active Measurement10.1007/978-3-030-72582-2_21(355-370)Online publication date: 30-Mar-2021
https://doi.org/10.1007/978-3-030-72582-2_21
Pi YJamin SDanzig PQian F(2020)Latency Imbalance Among Internet Load-Balanced PathsProceedings of the ACM on Measurement and Analysis of Computing Systems10.1145/33921504:2(1-29)Online publication date: 12-Jun-2020
https://dl.acm.org/doi/10.1145/3392150
Schlinker BCunha IChiu YSundaresan SKatz-Bassett E(2019)Internet Performance from Facebook's EdgeProceedings of the Internet Measurement Conference10.1145/3355369.3355567(179-194)Online publication date: 21-Oct-2019
https://dl.acm.org/doi/10.1145/3355369.3355567
Show More Cited By

Index Terms

Identifying and Aggregating Homogeneous IPv4 /24 Blocks with Hobbit
1. Networks

Recommendations

RFC 8114: Delivery of IPv4 Multicast Services to IPv4 Clients over an IPv6 Multicast Network
IPv6 Addressing Architecture in IPv4 Network
ICCSN '10: Proceedings of the 2010 Second International Conference on Communication Software and Networks

In the Internet, nodes are identified using IP addresses that depend on their topological location. IPv4/IPv6 translation technology involves address mapping between IPv6 and IPv4 nodes and the methods used to translate protocols, where nodes are in ...
Identifying devices across the IPv4 address space
2016 IEEE Conference on Intelligence and Security Informatics (ISI)
Many of today's devices are internet-enabled with IPv4 internet addresses, exposing them to internet threats. To determine the true scale of vulnerabilities being introduced, particularly in the IPv4 internet address space, a new methodology of scanning ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

cover image ACM Conferences

IMC '16: Proceedings of the 2016 Internet Measurement Conference

November 2016

570 pages

ISBN:9781450345262

DOI:10.1145/2987443

General Chairs:
Phillipa Gill
University of Massachusetts--Amherst
,
John Heidemann
USC/ISI
,
Program Chairs:
John W. Byers
Boston University
,
Ramesh Govindan
USC

Copyright © 2016 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Sponsors

SIGMETRICS: ACM Special Interest Group on Measurement and Evaluation
SIGCOMM: ACM Special Interest Group on Data Communication
USENIX Assoc: USENIX Assoc

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 14 November 2016

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Funding Sources

NSF

Conference

IMC 2016

Sponsor:

SIGMETRICS
SIGCOMM
USENIX Assoc

IMC 2016: Internet Measurement Conference

November 14 - 16, 2016

California, Santa Monica, USA

Acceptance Rates

IMC '16 Paper Acceptance Rate 48 of 184 submissions, 26%;

Overall Acceptance Rate 277 of 1,083 submissions, 26%

Upcoming Conference

IMC '24

Sponsor:
sigcomm
sigcomm

ACM Internet Measurement Conference

November 4 - 6, 2024

Madrid , AA , Spain

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

9
Total Citations
View Citations
649
Total Downloads

Downloads (Last 12 months)100
Downloads (Last 6 weeks)9

Reflects downloads up to 01 Oct 2024

Other Metrics

View Author Metrics

Citations

Cited By

Raman PFlores M(2021)Building Out the Basics with HopletsPassive and Active Measurement10.1007/978-3-030-72582-2_21(355-370)Online publication date: 30-Mar-2021
https://doi.org/10.1007/978-3-030-72582-2_21
Pi YJamin SDanzig PQian F(2020)Latency Imbalance Among Internet Load-Balanced PathsProceedings of the ACM on Measurement and Analysis of Computing Systems10.1145/33921504:2(1-29)Online publication date: 12-Jun-2020
https://dl.acm.org/doi/10.1145/3392150
Schlinker BCunha IChiu YSundaresan SKatz-Bassett E(2019)Internet Performance from Facebook's EdgeProceedings of the Internet Measurement Conference10.1145/3355369.3355567(179-194)Online publication date: 21-Oct-2019
https://dl.acm.org/doi/10.1145/3355369.3355567
Jin YRenganathan SAnanthanarayanan GJiang JPadmanabhan VSchroder MCalder MKrishnamurthy AWu JHall W(2019)Zooming in on wide-area latencies to a global cloud providerProceedings of the ACM Special Interest Group on Data Communication10.1145/3341302.3342073(104-116)Online publication date: 19-Aug-2019
https://dl.acm.org/doi/10.1145/3341302.3342073
Yuan FLiu FHuang DLiu YLuo X(2019)A High Completeness PoP Partition Algorithm for IP GeolocationIEEE Access10.1109/ACCESS.2019.29023377(28340-28355)Online publication date: 2019
https://doi.org/10.1109/ACCESS.2019.2902337
Beverly RDurairajan RPlonka DRohrer J(2018)In the IP of the BeholderProceedings of the Internet Measurement Conference 201810.1145/3278532.3278559(308-321)Online publication date: 31-Oct-2018
https://dl.acm.org/doi/10.1145/3278532.3278559
Pi YJamin SDanzig PShaha J(2018)AP-AtomsIEEE/ACM Transactions on Networking10.1109/TNET.2018.287801926:6(2748-2761)Online publication date: 1-Dec-2018
https://dl.acm.org/doi/10.1109/TNET.2018.2878019
Lee YSpring N(2017)Identifying and Analyzing Broadband Internet Reverse DNS NamesProceedings of the 13th International Conference on emerging Networking EXperiments and Technologies10.1145/3143361.3143392(35-40)Online publication date: 28-Nov-2017
https://dl.acm.org/doi/10.1145/3143361.3143392
Rula JBustamante FSteiner MUhlig SMaennel O(2017)Cell spottingProceedings of the 2017 Internet Measurement Conference10.1145/3131365.3131402(191-204)Online publication date: 1-Nov-2017
https://dl.acm.org/doi/10.1145/3131365.3131402

View Options

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

Media

Figures

Other

Tables

View Table of Contents