Detection, understanding, and prevention of traceroute measurement artifacts

Traceroute is widely used, from the diagnosis of network problems to the assemblage of internet maps. Unfortunately, there are a number of problems with traceroute methodology, which lead to the inference of erroneous routes. This paper studies particular structures arising in nearly all traceroute measurements. We characterize them as ''loops'', ''cycles'', and ''diamonds''. We identify load balancing as a possible cause for the appearance of false loops, cycles, and diamonds, i.e., artifacts that do not represent the internet topology. We provide a new publicly available traceroute, called Paris traceroute, which, by controlling the packet header contents, provides a truer picture of the actual routes that packets follow. We performed measurements, from the perspective of a single source tracing towards multiple destinations, and Paris traceroute allowed us to show that many of the particular structures we observe are indeed traceroute measurement artifacts.

[1]  Lixin Gao,et al.  Flooding attacks by exploiting persistent forwarding loops , 2005, IMC '05.

[2]  Fred Baker,et al.  Requirements for IP Version 4 Routers , 1995, RFC.

[3]  Ramesh Govindan,et al.  Heuristics for Internet map discovery , 2000, Proceedings IEEE INFOCOM 2000. Conference on Computer Communications. Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societies (Cat. No.00CH37064).

[4]  Michelle Cotton,et al.  Special Use IPv4 Addresses , 2010, RFC.

[5]  Michalis Faloutsos,et al.  On power-law relationships of the Internet topology , 1999, SIGCOMM '99.

[6]  Internet Assigned Numbers Authority Special-Use IPv4 Addresses , 2002, RFC.

[7]  Jon Postel,et al.  Internet Control Message Protocol , 1981, RFC.

[8]  Steven M. Bellovin,et al.  A technique for counting natted hosts , 2002, IMW '02.

[9]  Jia Wang,et al.  Scalable and accurate identification of AS-level forwarding paths , 2004, IEEE INFOCOM 2004.

[10]  Brice Augustin,et al.  Avoiding traceroute anomalies with Paris traceroute , 2006, IMC '06.

[11]  Renata Teixeira,et al.  In search of path diversity in ISP networks , 2003, IMC '03.

[12]  K. Claffy,et al.  Topology discovery by active probing , 2002, Proceedings 2002 Symposium on Applications and the Internet (SAINT) Workshops.

[13]  W. Richard Stevens,et al.  TCP/IP Illustrated, Volume 1: The Protocols , 1994 .

[14]  Ross W. Callon,et al.  Use of OSI IS-IS for routing in TCP/IP and dual environments , 1990, RFC.

[15]  Jia Wang,et al.  Towards an accurate AS-level traceroute tool , 2003, SIGCOMM '03.

[16]  Vern Paxson,et al.  End-to-end Internet packet dynamics , 1997, SIGCOMM '97.

[17]  B. Cheswick,et al.  The Internet mapping project , 1998 .

[18]  John Moy,et al.  OSPF Version 2 , 1998, RFC.

[19]  Damien Magoni,et al.  Internet core topology mapping and analysis , 2005, Comput. Commun..

[20]  T. Mexia,et al.  Author ' s personal copy , 2009 .

[21]  T. Moors,et al.  Streamlining traceroute by estimating path lengths , 2004, 2004 IEEE International Workshop on IP Operations and Management.

[22]  Ramesh Govindan,et al.  Estimating Router ICMP Generation Delays , 2002 .

[23]  Olivier Bonaventure,et al.  Interdomain traffic engineering with BGP , 2003, IEEE Commun. Mag..

[24]  Jürgen Falb,et al.  The Internet Protocol , 2005, The Industrial Information Technology Handbook.

[25]  Ratul Mahajan,et al.  Measuring ISP topologies with Rocketfuel , 2004, IEEE/ACM Transactions on Networking.

[26]  Yuval Shavitt,et al.  DIMES: let the internet measure itself , 2005, CCRV.

[27]  Mira Dontcheva,et al.  How to Resolve IP Aliases , 2008 .

[28]  Christophe Diot,et al.  Detection and analysis of routing loops in packet traces , 2002, IMW '02.