What s going on in /8. George Michaelson Geoff Huston
|
|
|
- Lucinda Howard
- 5 years ago
- Views:
Transcription
1 What s going on in /8 George Michaelson ggm@apnic.net Geoff Huston gih@apnic.net
2 Standard Address TesCng IANA assigns /8 to APNIC RIPE NCC, on APNIC s behalf, announces selected subnets to test reachability RIS, other tests applied. Encourage operaconal community to test reachability APNIC releases /8 to registracon services Assignments and allocacons proceed APNIC gratefully acknowledges the assistance of the RIPE NCC and community supporcng tests on AP ranges!
3 Except.. IANA allocates Net /8 to APNIC in January 2010 We had some sense this was going to be different Just how different wasn t clear.
4 (Not unexpected) First Warning RIPE announces 4 /24s for normal tescng at AMS- IX Link floods announcements withdrawn. Report wri^en up on RIPE labs.
5 Lets Get Serious about Bad Traffic There is an issue here about 1/8 accng as a traffic magnet for unsolicited traffic Just how bad is 1/8? Are some bits REALLY bad? What sort of badness are we seeing in the traffic? So we commenced a program to analyze the badness in 1/8
6 Bigger Badder Faster Need mulc- gig collectors and large disk space Exceeds APNIC s transit capacity Sought collaborators in R&D & Ops community Many responses, for which we thank everyone We worked with Merit, AARNet, Google and Youtube for this exercise Rapid deployment possible, Tb file systems available with good IX conneccvity within a couple of days thanks! Long announcements. 1 week+ Explore >24h traffic pa^erns, diurnal behaviours
7 Tickling Badness Simple code to ACK all incoming TCP SYNs If any follow up packet sent, that s interescng! See if we can draw traffic out of the woodwork DisCnguish one- way probes and DDoS engines, scanners from real uses of the network Based on Geoff s lightweight TCP experimental very bad idea code Not such a bad idea amer all then! PCAP filter to collect all traffic, dump to disk Applicable to passive and accve/cckled capture
8 Traffic to /8
9 Traffic to /8 Peak Burst at 860Mbps 150 Mbps! UDP TCP No strong diurnal pa^ern
10 Packet Rate to /8
11 Packet Rate to /8 Peak Burst at 220Kpps UDP TCP Marked UDP diurnal pa^ern
12 Per subnet Sum packet counts seen per second, running average, promote to /16 and /24 counts Rapidly idencfies sub- spaces of the /8 range which have high traffic Establishes baseline load across encre net But is it uniform?
13 Traffic Spread by /16
14 Traffic Spread by /16 Very Bad Bad Normal
15 Traffic Spread by /16 Yes, that s a Log Scale! The hot spots appear to lie in the low /16s
16 What is in all these packets?
17 Packet Size DistribuCon Most packets are very small (< 120 bytes) BUT 31% of the packets are exactly 200 bytes in length
18 Packet Size DistribuCon
19 IP Protocol DistribuCon 76% UDP 20% TCP 2.5% ICMP 0.6% 6in4 (proto 41) 0.1% GRE This high concentracon of UDP is unusual. Other networks see 55% TCP and 40% UDP in their levels of unsolicited incoming traffic.
20 UDP Port DistribuCon Port Count Descrip/on % SIP response with RTP payload % some form of DNS? 0 6% huh? 514 4% syslog 80 3% looks like firewall probing % pseudo- DNS again % and more of the same % real DNS
21 port 15206? 08:48: IP (tos 0x8, ttl 55, id 0, offset 0, flags [DF], proto UDP (17), length 200) > : [udp sum ok] UDP, length 172 0x0000: c fe7 d030 f103 0x0010: f3e 3b66 00b4 878c 8008 dbba...>;f... 0x0020: cc7b dd 8ce2 7a63 677b 7e66 6b14.{..U...zcg{~fk. 0x0030: d d4 9d8c 8dea ib... 0x0040: 6617 ef83 8d9e eee5 f85d a 9758 f...]`p...x 0x0050: 6c66 49d6 5b4d dac5 c3d c2d5 4d7a lfi.[m...ds..mz 0x0060: 647f f d14 111f 0404 d.yfogs`... 0x0070: e8f ce 9b84 859b 93ef 6510 d...f...e. 0x0080: c 5b6e 626d 7b4b 4ece d64d 4f7f D...[nbm{KN..MO. 0x0090: 5ac4 555d b67 7b7c e15 6c15 Z.U]Iv{g{ psn.l. 0x00a0: 141b b15 dd86 8e9b c514 d x00b0: 9e9c 9de0 637a e693 91d9 617b 7f4c cz...a{.Lwd 0x00c0: 47d5 5e45 7c46 f7c4 G.^E F.. UDP packets of 172 bytes in size, appears to point to some kind of audio streaming going on here
22 And SIP as well.. 08:48: IP > : SIP, length: 486 0x0000: bf3e b 4da E...>..4.P{M.%. 0x0010: c4 13c4 01ee b REGI 0x0020: a31 2e31 2e31 2e31 STER.sip: x0030: f32 2e30 0d0a f6d 3a20.SIP/2.0..From:. 0x0040: 3c a47 6c6f c x0050: 2e31 2e31 2e31 3a e 3b :5060>;tag 0x0060: 3d d =80ae7e00-c0a801 0x0070: d d d 3533 fe-13c x0080: d d 3533 bdb4-406f x0090: d0a 546f 3a20 3c a47 bdb4..to:.<sip:g 0x00a0: 6c6f c e31 2e31 2e31 0x00b0: 3a e 0d0a c6c 2d49 443a :5060>.
23 TCP Port DistribuCon Port Count Descrip/on 21 40% mp 80 9% h^p % ms- sql (slammer lives!) 455 3% ms- ds (slammer again!) %? 25 2% smtp
24 Who s Bad? /16 Address Prefix Average Traffic(AS35361) Average Traffic(AS237) /16 86,757 kbps 79,981 kbps /16 19,714 kbps 12,564 kbps /16 10,241 kbps 8,816 kbps /16 3,656 kbps 3,320 kbps /16 3,611 kbps 12,010 kbp?
25 Bad, or Hanlon s Razor: Never a^ribute to malice that which can be adequately explained by stupidity. (or cock- up before conspiracy! ) A lot of this traffic appears to be leakage from private network domains Some traffic is scanning, some is virus and worms, but the majority of traffic is leakage
26 Outcomes Holdback on the worst 5 /16s of net- 1 recommended for the moment Subject to ongoing tescng Parts of these blocks may become viable to release to community Some parts clearly unusable for foreseeable future Ongoing tests of all new nets now part of APNIC s process
27 VisualizaCon Look at the data in Cme- series, convert to movie see the pa^erns of usage, idencfy subnets for futher work Applicable to net address and port Allows side- by- side comparison of src, dst behaviours Easy to do, easy to understand
28 What does the net look like? Map of /16s, as {x,y} points Colour denotes density of the /24 in use for that /16 Thick Black stripes: IANA reserve White stripe MulCcast/Reserved
29 /16s Listed VerCcally The last /8s MulCcast/Reserved space / /
30 What does net /8 look like? Map of /24s as {x,y} points. /16 run verccally Colour denotes intensity of traffic directed to the /24
31 /24s Listed VerCcally What Ranges does of /24 net- 1 inside /16 under look higher traffic like? Hotspot: /24, /24 etc DisCnct /24 under high traffic
32 Lets go to the movies
33
Background Traffic to Network /8
Background Traffic to Network 103.0.0.0/8 April 2010 Geoff Huston George Michaelson APNIC R&D research@apnic.net APNIC is now regularly examining the unused state of IPv4 address blocks before they are
Traffic in Network /8. Background. Initial Experience. Geoff Huston George Michaelson APNIC R&D. April 2010
Traffic in Network 1.0.0.0/8 Geoff Huston George Michaelson APNIC R&D April 2010 Background The address plan for IPv4 has a reservation for Private Use address space. This reservation, comprising of 3
Background Traffic to Network /8
Background Traffic to Network 39.0.0.0/8 March 2010 Geoff Huston George Michaelson APNIC R&D research@apnic.net APNIC is now regularly examining the unused state of IPv4 address blocks before they are
"Dark" Traffic in Network /8
"Dark" Traffic in Network 49.0.0.0/8 September 2010 Geoff Huston George Michaelson APNIC R&D research@apnic.net APNIC is now regularly examining the unused state of IPv4 address blocks before they are
CIS-331 Exam 2 Fall 2014 Total of 105 Points. Version 1
Version 1 1. (20 Points) Given the class A network address 119.0.0.0 will be divided into a maximum of 15,900 subnets. a. (5 Points) How many bits will be necessary to address the 15,900 subnets? b. (5
Background Traffic to Quarantined Network Blocks administered by APNIC
Background Traffic to Quarantined Network Blocks administered by APNIC March 2011 Geoff Huston George Michaelson APNIC R&D research@apnic.net APNIC is now regularly examining the unused state of IPv4 address
CIS-331 Exam 2 Fall 2015 Total of 105 Points Version 1
Version 1 1. (20 Points) Given the class A network address 117.0.0.0 will be divided into multiple subnets. a. (5 Points) How many bits will be necessary to address 4,000 subnets? b. (5 Points) What is
CIS-331 Fall 2014 Exam 1 Name: Total of 109 Points Version 1
Version 1 1. (24 Points) Show the routing tables for routers A, B, C, and D. Make sure you account for traffic to the Internet. Router A Router B Router C Router D Network Next Hop Next Hop Next Hop Next
CIS-331 Fall 2013 Exam 1 Name: Total of 120 Points Version 1
Version 1 1. (24 Points) Show the routing tables for routers A, B, C, and D. Make sure you account for traffic to the Internet. NOTE: Router E should only be used for Internet traffic. Router A Router
CIS-331 Spring 2016 Exam 1 Name: Total of 109 Points Version 1
Version 1 Instructions Write your name on the exam paper. Write your name and version number on the top of the yellow paper. Answer Question 1 on the exam paper. Answer Questions 2-4 on the yellow paper.
CIS-331 Exam 2 Spring 2016 Total of 110 Points Version 1
Version 1 1. (20 Points) Given the class A network address 121.0.0.0 will be divided into multiple subnets. a. (5 Points) How many bits will be necessary to address 8,100 subnets? b. (5 Points) What is
CIS-331 Final Exam Spring 2015 Total of 115 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
CIS-331 Final Exam Spring 2018 Total of 120 Points. Version 1
Version 1 Instructions 1. Write your name and version number on the top of the yellow paper and the routing tables sheet. 2. Answer Question 2 on the routing tables sheet. 3. Answer Questions 1, 3, 4,
CIS-331 Final Exam Fall 2015 Total of 120 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
4. Specifications and Additional Information
4. Specifications and Additional Information AGX52004-1.0 8B/10B Code This section provides information about the data and control codes for Arria GX devices. Code Notation The 8B/10B data and control
The cache is 4-way set associative, with 4-byte blocks, and 16 total lines
Sample Problem 1 Assume the following memory setup: Virtual addresses are 20 bits wide Physical addresses are 15 bits wide The page size if 1KB (2 10 bytes) The TLB is 2-way set associative, with 8 total
! ' ,-. +) +))+, /+*, 2 01/)*,, 01/)*, + 01/+*, ) 054 +) +++++))+, ) 05,-. /,*+), 01/-*+) + 01/.*+)
! "#! # $ %& #! '!!!( &!)'*+' '(,-. +) /,*+), 01/-*+) + 01/.*+) ) 05,-. +))+, /+*, 2 01/)*,, 01/)*, + 01/+*, ) 054 +) +++++))+,3 4 +. 6*! ) ) ) ) 5 ) ) ) ) + 5 + + ) ) ) 5 9 + ) ) + 5 4 ) ) + ) 5, ) )
UNH-IOL MIPI Alliance Test Program
DSI Receiver Protocol Conformance Test Report UNH-IOL 121 Technology Drive, Suite 2 Durham, NH 03824 +1-603-862-0090 mipilab@iol.unh.edu +1-603-862-0701 Engineer Name engineer@company.com Panel Company
CIS-331 Final Exam Spring 2016 Total of 120 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
Technical Specification. Third Party Control Protocol. AV Revolution
Technical Specification Third Party Control Protocol AV Revolution Document AM-TS-120308 Version 1.0 Page 1 of 31 DOCUMENT DETAILS Document Title: Technical Specification, Third Party Control Protocol,
ID: Cookbook: urldownload.jbs Time: 23:23:00 Date: 11/01/2018 Version:
ID: 42417 Cookbook: urldownload.jbs Time: 23:23:00 Date: 11/01/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature
RS 232 PINOUTS. 1. We use RJ12 for all of our RS232 interfaces (Link-2-Modbus & Link-2-PC- Serial/RS232). The diagram below shows our pin out.
RS 232 PINOUTS 1. We use RJ12 for all of our RS232 interfaces (Link-2-Modbus & Link-2-PC- Serial/RS232). The diagram below shows our pin out. 2. A DB9 Female to RJ12 Female Serial/Terminal Modular Adaptor
ZN-DN312XE-M Quick User Guide
ZN-DN312XE-M Quick User Guide This manual provides instructions for quick installation and basic configuration of your IP device. Step1. Connect cables to IP device Connect required cables to the device
6.1 Combinational Circuits. George Boole ( ) Claude Shannon ( )
6. Combinational Circuits George Boole (85 864) Claude Shannon (96 2) Signals and Wires Digital signals Binary (or logical ) values: or, on or off, high or low voltage Wires. Propagate digital signals
Gateway Ascii Command Protocol
Gateway Ascii Command Protocol Table Of Contents Introduction....2 Ascii Commands.....3 Messages Received From The Gateway....3 Button Down Message.....3 Button Up Message....3 Button Maintain Message....4
Datagram. Source IP address. Destination IP address. Options. Data
Datagram Version H. len Service Datagram length Datagram identifier FR-FR FR-FR-FR-FR Time-to-live Transp. prot. H. Checksum Source IP address Destination IP address Options Data Each line represents a
Understanding IPv6 Internet Background Radia6on
Understanding IPv6 Internet Background Radia6on Jakub Czyz*, Kyle Lady*, Sam Miller*, Michael Kallitsis, Manish Karir, Michael Bailey* *University of Michigan Merit Network Dept. of Homeland Security S&T
Author: Prof Bill Buchanan
Data Loss Prevention 2. Data in-motion Magic Numbers/Discriminators. Detecting from network traffic. Regular Expressions. Extracting Content from traces. Converted formats. http://asecuritysite.com/dlp
Our Narrow Focus Computer Networking Security Vulnerabilities. Outline Part II
Our Narrow Focus 15-441 15-441 Computer Networking 15-641 Lecture 22 Security: DOS Peter Steenkiste Fall 2016 www.cs.cmu.edu/~prs/15-441-f16 Yes: Creating a secure channel for communication (Part I) Protecting
Advanced Computer Networking. Please make sure now that you received a complete copy of the exam.
Chair of Network Architectures and Services Department of Informatics Technical University of Munich Note: During the attendance check a sticker containing a unique code will be put on this exam. This
C1098 JPEG Module User Manual
C1098 JPEG Module User Manual General Description C1098 is VGA camera module performs as a JPEG compressed still camera that can be attached to a wireless or PDA host. Users can send out a snapshot command
6.1 Font Types. Font Types
6 Font This chapter explains basic features of GP-Pro EX's "Font" and basic ways of placing text with each font. Please start by reading "6.1 Font Types" (page 6-2) and then turn to the corresponding page.
Problem 3. (12 points):
Problem 3. (12 points): This problem tests your understanding of basic cache operations. Harry Q. Bovik has written the mother of all game-of-life programs. The Game-of-life is a computer game that was
K2289: Using advanced tcpdump filters
K2289: Using advanced tcpdump filters Non-Diagnostic Original Publication Date: May 17, 2007 Update Date: Sep 21, 2017 Topic Introduction Filtering for packets using specific TCP flags headers Filtering
Introduction to Netflow
Introduction to Netflow Campus Network Design & Operations Workshop These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International license (http://creativecommons.org/licenses/by-nc/4.0/)
DBK24. Isolated Digital Output Chassis. Overview
DBK24 Isolated Digital Output Chassis Overview 1 Power Requirements 2 Hardware Setup 2 Card Connection 2 Card Configuration 3 DaqBook and DaqBoard Connection 4 DaqBoard/2000 Series Board Connection 5 DaqBook
DDoS Testing with XM-2G. Step by Step Guide
DDoS Testing with XM-G Step by Step Guide DDoS DEFINED Distributed Denial of Service (DDoS) Multiple compromised systems usually infected with a Trojan are used to target a single system causing a Denial
Measuring IPv6 Deployment
Measuring IPv6 Deployment Geoff Huston George Michaelson research@apnic.net Available data sets We have access to dual stack data for: Available data sets We have access to dual stack data for: BGP Route
network security s642 computer security adam everspaugh
network security s642 adam everspaugh ace@cs.wisc.edu computer security today Announcement: HW3 to be released WiFi IP, TCP DoS, DDoS, prevention 802.11 (wifi) STA = station AP = access point BSS = basic
Network Management and Monitoring
Network Management and Monitoring Introduction to Netflow These materials are licensed under the Creative Commons Attribution-Noncommercial 3.0 Unported license (http://creativecommons.org/licenses/by-nc/3.0/)
Troubleshooting Communication in WebSphere MQ
IBM Software Group Troubleshooting Communication in WebSphere MQ Rick Armstrong (rickied@us.ibm.com) Advisory Software Engineer 27 October 2010 WebSphere Support Technical Exchange Agenda TCP/IP networking
Measuring IPv6 Deployment
Measuring IPv6 Deployment Geoff Huston George Michaelson research@apnic.net The story so far In case you hadn t heard by now, we appear to be running quite low on IPv4 addresses! IANA Pool Exhaustion Prediction
Network Interconnection
Network Interconnection Covers different approaches for ensuring border or perimeter security Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 Lecture
Digital Projector X30N/X35N
Digital Projector X30N/X35N Operator's Guide TECHNICAL Warranty 3M warrants that when the 3M Product is used according to 3M s Intended Use Statement (www.3m.com/meetings), it will perform satisfactorily
Here is a C function that will print a selected block of bytes from such a memory block, using an array-based view of the necessary logic:
Pointer Manipulations Pointer Casts and Data Accesses Viewing Memory The contents of a block of memory may be viewed as a collection of hex nybbles indicating the contents of the byte in the memory region;
IPv6 Pollution Traffic Analysis
IPv6 Pollution Traffic Analysis Manish Karir (DHS S&T Cyber Security Division) Jake Czyz, Kyle Lady, Sam Miller, Michael Kallitsis, Michael Bailey (University of Michigan) Internet Pollu+on Darknet sensors
July Registration of a Cyrillic Character Set. Status of this Memo
Network Working Group Request for Comments: 1489 A. Chernov RELCOM Development Team July 1993 Status of this Memo Registration of a Cyrillic Character Set This memo provides information for the Internet
FOCUS on Intrusion Detection: Intrusion Detection Level Analysis of Nmap and Queso Page 1 of 6
FOCUS on Intrusion Detection: Intrusion Detection Level Analysis of Nmap and Queso Page 1 of 6 Intrusion Detection Level Analysis of Nmap and Queso by Toby Miller last updated Wednesday, August 30, 2000
Scan Results - ( Essentials - Onsharp )
Scan Results - www.onsharp.com ( Essentials - Onsharp ) Overview Open Ports (18) Scan ID: 7675527 Target: www.onsharp.com Max Score: 2.6 Compliance: Passing PCI compliance, Expires undefined Profile: 15
10. RS-232C communication
10. RS-232C communication PB9200(P5XMLA) Connecting the cable (1) Turn off the projector and the computer power supplies. (2) Connect the CONTROL port of the projector with a RS-232C port of the computer
Some Lacunae in APNIC DNS Measurement. George Michaelson CAIDA WIDE Workshop Marina Del Ray 2006
Some Lacunae in APNIC DNS Measurement George Michaelson CAIDA WIDE Workshop Marina Del Ray 2006 Backtracking Same DNS measurement since 2001/2.. Re-installation of nameservers forced reinstallation of
CS 537: Introduction to Operating Systems Fall 2015: Midterm Exam #1
CS 537: Introduction to Operating Systems Fall 2015: Midterm Exam #1 This exam is closed book, closed notes. All cell phones must be turned off. No calculators may be used. You have two hours to complete
Internet Noise: a tale of two subnets
Internet Noise: a tale of two subnets Tim Obezuk Cloudflare Who am I? Tim Obezuk Solutions Engineer at Cloudflare Helping Australian organisations build faster and more secure internet properties 10%
Addressing and Routing
Addressing and Routing Andrew Scott a.scott@lancaster.ac.uk Physical/ Hardware Addresses Aka MAC* or link(-layer) address Can only talk to things on same link Unique ID given to every network interface
Advanced Computer Networking. CYBR 230 Jeff Shafer University of the Pacific. IPv6
CYBR 230 Jeff Shafer University of the Pacific IPv6 2 IP Versions Version Description 0-3 Unused: Development versions of IP 4 Current network-layer protocol 5 Unused: Experimental stream protocol ST 6
How to use IP Tables
How to use IP Tables ******************************************************************* *** IPTABLES TUTORIAL I. Definitions and similarities to ipchains II. Chain types and options III. Command line
DoS Mitigation Strategies
DoS Mitigation Strategies Chris Morrow - Google NSF Workshop on Unwanted Traffic July 18, 2008, George Mason University (Fairfax, VA) DoS Attack Definition Too many bytes bandwidth exhaustion Too many
CSE Computer Architecture I Fall 2011 Homework 07 Memory Hierarchies Assigned: November 8, 2011, Due: November 22, 2011, Total Points: 100
CSE 30321 Computer Architecture I Fall 2011 Homework 07 Memory Hierarchies Assigned: November 8, 2011, Due: November 22, 2011, Total Points: 100 Problem 1: (30 points) Background: One possible organization
CSE 1 23: Computer Networks
CSE 1 23: Computer Networks Homework 3 Out: 11/08, Due: 11/15 Instructions 1. Turn in a physical copy at the beginning of the class on 11/15 2. Ensure the top page of the HW has the following information
Tyre Kicking the DNS. Testing Transport Considerations of Rolling Roots. Geoff Huston APNIC
Tyre Kicking the DNS Testing Transport Considerations of Rolling Roots Geoff Huston APNIC Five Years Ago The US KSK Repository The Amsterdam KSK Repository George Michaelson Five Years Ago Five Years Ago
George Kuo ARIN XXIII
APNIC Update George Kuo Member Services Manager ARIN XXIII 28 APR 2009 Overview APNIC 27 policy outcomes APNIC Member and Stakeholder Survey IPv6 Program Research and development activities New APNIC website
B: Modbus Map and Retrieving Logs
B: Modbus Map and Retrieving Logs B.: Introduction Communicator EXT User Manual B.: Modbus Register Map Sections B.3: Data Formats # B.4: Floating Point Values The formula to interpret a Floating Point
DDoS Protection in Backbone Networks
DDoS Protection in Backbone Networks The Czech Way Pavel Minarik, Chief Technology Officer Holland Strikes Back, 3 rd Oct 2017 Backbone DDoS protection Backbone protection is specific High number of up-links,
Triple DES and AES 192/256 Implementation Notes
Triple DES and AES 192/256 Implementation Notes Sample Password-to-Key and KeyChange results of Triple DES and AES 192/256 implementation For InterWorking Labs customers who require detailed information
(DNS, and DNSSEC and DDOS) Geoff Huston APNIC
D* (DNS, and DNSSEC and DDOS) Geoff Huston APNIC How to be bad 2 How to be bad Host and application-based exploits abound And are not going away anytime soon! And there are attacks on the Internet infrastructure
DNS root server deployments. George Michaelson DNS operations SIG APNIC17/APRICOT 2004 Feb KL, Malaysia
DNS root server deployments George Michaelson DNS operations SIG APNIC17/APRICOT 2004 Feb 23-27 2004 KL, Malaysia Why deploy an anycast node? Increase resistance against DDoS Attacks on the root Improve
RMIT University. Data Communication and Net-Centric Computing COSC 1111/2061. Lecture 2. Internetworking IPv4, IPv6
RMIT University Data Communication and Net-Centric Computing COSC 1111/2061 Internetworking IPv4, IPv6 Technology Slide 1 Lecture Overview During this lecture, we will understand The principles of Internetworking
ECHO Process Instrumentation, Inc. Modbus RS485 Module. Operating Instructions. Version 1.0 June 2010
ECHO Process Instrumentation, Inc. Modbus RS485 Module Operating Instructions Version 1.0 June 2010 ECHO Process Instrumentation, Inc. PO Box 800 Shalimar, FL 32579 PH: 850-609-1300 FX: 850-651-4777 EM:
Layered Networking and Port Scanning
Layered Networking and Port Scanning David Malone 22nd June 2004 1 IP Header IP a way to phrase information so it gets from one computer to another. IPv4 Header: Version Head Len ToS Total Length 4 bit
VM7000A PAPERLESS RECORDER COMMUNICATION FUNCTION OPERATION MANUAL
VM7000A PAPERLESS RECORDER COMMUNICATION FUNCTION OPERATION MANUAL WXPVM70mnA0002E October, 2009(Rev.1) All Rights Reserved, Copyright 2009, Ohkura Electric Co.,Ltd. To use this equipment safely Thank
Configuring Anomaly Detection
CHAPTER 12 This chapter describes how to create multiple security policies and apply them to individual virtual sensors. It contains the following sections: Understanding Policies, page 12-1 Anomaly Detection
Interested in learning more? Global Information Assurance Certification Paper. Copyright SANS Institute Author Retains Full Rights
Global Information Assurance Certification Paper Copyright SANS Institute Author Retains Full Rights This paper is taken from the GIAC directory of certified professionals. Reposting is not permited without
Secure Telephony Enabled Middle-box (STEM)
Report on Secure Telephony Enabled Middle-box (STEM) Maggie Nguyen 04/14/2003 Dr. Mark Stamp - SJSU - CS 265 - Spring 2003 Table of Content 1. Introduction 1 2. IP Telephony Overview.. 1 2.1 Major Components
CP-X253. User's Manual (detailed) Technical. Example of PC signal. Projector
Projector CP-X253 User's Manual (detailed) Technical Example of PC signal Resolution (H x V) H. frequency (khz) V. frequency (Hz) Rating Signal mode 720 x 400 37.9 85.0 VESA TEXT 640 x 480 31.5 59.9 VESA
Identifying Operating System Using Flow-based Traffic Fingerprinting
Identifying Operating System Using Flow-based Traffic Fingerprinting Tomáš Jirsík, Pavel Čeleda {jirsik celeda}@ics.muni.cz Institute of Computer Science, Masaryk University EUNICE 2014 September, 1. 5.,
9/5 9/13 9/14 9/25 (CKPT) 10/6 (P1.A) 10/16 (P1.B) 10/2 10/12 9/12 9/23. All of these dates are tentative! 10/18. Real-world systems
Communication Synchronization RPC Application of concepts Distributed Synchronization WAL 2PC Paxos Raft Real-world systems DS Basics DFS DS Basics Fault-tolerance DNS/CDN P0 9/5 9/13 P1 (Communication
Digital Lighting Systems, Inc.
Digital Lighting Systems, Inc. Four Channel Dry Contacts Relays Switch Pack DMX512 compatible USER'S MANUAL -UM User's Manual - Page 1 GENERAL DESCRIPTION The is a 4-channel DMX-512 compatible electro-mechanical
Network Awareness and Network Security
Network Awareness and Network Security John M c Hugh Canada Research Chair in Privacy and Security Director, oratory 12 October 2005 Overview The internet has grown to the point where observational approaches
Overview. Computer Network Lab, SS Security. Type of attacks. Firewalls. Protocols. Packet filter
Computer Network Lab 2017 Fachgebiet Technische Informatik, Joachim Zumbrägel Overview Security Type of attacks Firewalls Protocols Packet filter 1 Security Security means, protect information (during
ELEC / COMP 177 Fall 2015
ELEC / COMP 177 Fall 2015 Thursday, December 10 th 8am- 11am Same format as midterm Open notes, open computer, open internet 1 programming problem using Python Time limited 3 hours max Bring your Linux
ID: Cookbook: browseurl.jbs Time: 19:37:50 Date: 11/05/2018 Version:
ID: 59176 Cookbook: browseurl.jbs Time: 19:37:50 Date: 11/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
The Tic-Tac-Toe Game with the NST (Not-So-Tiny) CPU Introduction
The Tic-Tac-Toe Game with the NST (Not-So-Tiny) CPU Introduction The entire project file can be downloaded from the ELE405 FTP site as TTT2.ZIP (needless to say that this is version 2 of the TTT line).
CS155 Firewalls. Simon Cooper CS155 - Firewalls 23 May of 30
CS155 Firewalls Simon Cooper CS155 - Firewalls 23 May 2002 1 of 30 Plug! Building Internet Firewalls 2nd Edition, O Reilly Elizabeth D. Zwicky, Simon Cooper, D. Brent Chapman 2 of 30 What
Worldwide Detection of Denial of Service (DoS) Attacks
Worldwide Detection of Denial of Service (DoS) Attacks David Moore, Geoff Voelker and Stefan Savage August 15, 2001 dmoore @ caida.org www.caida.org Outline The Backscatter Analysis Technique Observations
Cisco Nexus 7000 Series Architecture: Built-in Wireshark Capability for Network Visibility and Control
White Paper Cisco Nexus 7000 Series Architecture: Built-in Wireshark Capability for Network Visibility and Control What You Will Learn The Cisco Nexus 7000 Series Switches combine the highest levels of
APNIC Update. RIPE 60 May Geoff Huston Chief Scientist, APNIC
APNIC Update RIPE 60 May 2010 Geoff Huston Chief Scientist, APNIC Overview Services Update APNIC 29 Policy Outcomes APNIC Activities R&D Technical Developments IPv6 Program Training Other News Upcoming
Networking Fundamentals
Networking Fundamentals Network Startup Resource Center www.nsrc.org These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International license (http://creativecommons.org/licenses/by-nc/4.0/)
Subnet Masks. Address Boundaries. Address Assignment. Host. Net. Host. Subnet Mask. Non-contiguous masks. To Administrator. Outside the network
Subnet Masks RFCs 917 922 925 (1984) 932 936 940 950 (1985) First major change to IP after RFC791 Net Host Subnet Mask 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Net Bits set indicate net number Bits clear indicate
ECE 4450:427/527 - Computer Networks Spring 2017
ECE 4450:427/527 - Computer Networks Spring 2017 Dr. Nghi Tran Department of Electrical & Computer Engineering Lecture 6.2: IP Dr. Nghi Tran (ECE-University of Akron) ECE 4450:427/527 Computer Networks
The trace file is here: https://kevincurran.org/com320/labs/wireshark/trace-udp.pcap
Lab Exercise UDP Objective To look at the details of UDP (User Datagram Protocol). UDP is a transport protocol used throughout the Internet as an alternative to TCP when reliability is not required. It
Encoder Software Implementation
1 of 7 12/10/2009 8:29 AM Encoder Software Implementation Updated 8/27/09 The Caption Encoder connects to the Digital Cinema Server over Ethernet. Commands are sent by the DCS using SMPTE 430-10 v 0.91.
6. Specifications & Additional Information
6. Specifications & Additional Information SIIGX52004-3.1 Transceier Blocks Table 6 1 shows the transceier blocks for Stratix II GX and Stratix GX deices and compares their features. Table 6 1. Stratix
ENGI 8868/9877 Computer and Communications Security III. BLOCK CIPHERS. Symmetric Key Cryptography. insecure channel
(a) Introduction - recall symmetric key cipher: III. BLOCK CIPHERS k Symmetric Key Cryptography k x e k y yʹ d k xʹ insecure channel Symmetric Key Ciphers same key used for encryption and decryption two
CSE 123: Computer Networks
CSE 123: Computer Networks Homework 2 Out: 10/18, Due: 10/25 Total points - 50 Question 1 Consider the network shown below, wherein horizontal lines represent transit providers and numbered vertical lines
Security in inter-domain routing
DD2491 p2 2011 Security in inter-domain routing Olof Hagsand KTH CSC 1 Literature Practical BGP pages Chapter 9 See reading instructions Beware of BGP Attacks (Nordström, Dovrolis) Examples of attacks
Digital Lighting Systems, Inc. CD400-DMX DMX512 Four Channel Dimmer and Switch module
, Inc. DMX512 Four Channel Dimmer and Switch module Input: 5 Amps @ 6-24 VDC Outputs: 5 Amps Maximum each, total 4 outputs 8 Amps Maximum. FRONT BACK USER'S MANUAL -UM User's Manual - Page 1 GENERAL DESCRIPTION
University of Toronto Faculty of Applied Science and Engineering. Final Exam, December ECE 461: Internetworking Examiner: J.
University of Toronto Faculty of Applied Science and Engineering Final Exam, December 2009 ECE 461: Internetworking Examiner: J. Liebeherr Exam Type: A Calculator: Type 2 There are a total of 10 problems.
Hash Constant C Determinants leading to collisionfree
Hash Constant C Determinants leading to collisionfree (Ernst Erich Schnoor) eschnoor@multi-matrix.de Addendum to article: Core of the CypherMatrix Method http://www.telecypher.net/corecyph.htm#z6 Object
Course Contents. The TCP/IP protocol Stack
Course Contents PART 1 Overview and Introduction PART 2 Communication Reference Models PART 3 Data Communication Fundamentals and Physical Layer PART 4 Datalink Layer and Emerging Network Technologies
Cisco Stealthwatch. Internal Alarm IDs 7.0
Cisco Stealthwatch Internal Alarm IDs 7.0 Stealthwatch Internal Alarm IDs Some previously used alarms are now obsolete and no longer listed in this file. 1 Host Lock Violation 5 SYN Flood 6 UDP Flood 7