Skip to content

joaoceron/verfploeter-ttl-investigation

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 

verfploeter-ttl-investigation

Explore the TTL values received from verfploeter anycast measurement tool

As part of SAND project [1], we have developed a tool to manage anycast catchment [2]. This tools provided a view of the catchments for each anycast node that we have.

In summary, the tool sends an ICMP request to each (/24) IPv4 over the Internet by using a anycast IP address as src IP. Consequentelly, all the /24 will reply to the same anycast IP that will reach in different anycast node based on the routing. The results provided by this tool can helps us to infer the node load, traffic distribution, and so on.

Recentelly, we are investigating the IP TTL from the packets that each anycast node receive. This projects aims to investigate the TTL distribution and explore anomalies in the value distribution.

[1] http://www.sand-project.nl/
[2] https://ant.isi.edu/software/verfploeter/index.html

TTL clusters

TTL distribution

About

DDoS attacks fingerprints by using IP TTL data analysis

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published