@article {Pap2013, title = {Design of Analysis Modules}, number = {D4.1}, year = {2013}, month = {11/2013}, institution = {mPlane Consortium}, type = {Public Deliverable}, address = {Torino}, keywords = {algorithms, analysis}, isbn = {D4.1}, issn = {D4.1}, author = {Dimitri Papadimitriou and Zied Ben-Houidi and Samir Ghamri-Doudane and D Rossi and M. Milanesio and P. Casas and Alessandro D{\textquoteright}Alconzo and Edion Tego and Francesco Matera and Maurizio Dusi and Tivadar Szemethy and L. M{\'a}th{\'e} and Alessandro Finamore and Stefano Traverso and Ilias Leontiadis and Yan Grunenberger and L. Baltrunas and Benoit Donnet and Guy Leduc and Y. Liao} } @article {Cap2013, title = {First Data Collection Track Record}, number = {D5.1}, year = {2013}, month = {11/2013}, institution = {mPlane Consortium}, type = {Private Deliverable}, address = {Torino}, keywords = {data sets, integration, measurement systems, scenarios, use cases}, author = {Alessandro Capello and Fabrizio Invernizzi and Omar Jabr and Dimitri Papadimitriou and Dario Rossi and YiXi Gong and Brian Trammell and Marco Milanesio and Ernst Biersack and Rolf Winter and Francesco Matera and Arianna Rufini and Edion Tego and Maurizio Dusi and Balazs Szabo and Tivadar Szemethy and Alessandro Finamore and Marco Mellia and Ilias Leontiadis and Benoit Donnet} } @article {Tra2013d, title = {mPlane Architecture Specification}, number = {D1.3}, year = {2013}, month = {11/2013}, institution = {mPlane Consortium}, type = {Public Deliverable}, address = {Torino}, keywords = {architecture, measurement, platform, scenario, use case}, author = {Brian Trammell and Marco Mellia and Alessandro Finamore and Stefano Traverso and Tivadar Szemethy and Balazs Szabo and D Rossi and Benoit Donnet and Fabrizio Invernizzi and Dimitri Papadimitriou} } @inproceedings {Van2013, title = {Network Fingerprinting: TTL-Based Router Signature}, booktitle = {ACM/USENIX Internet Measurement Conference (IMC)}, year = {2013}, month = {10/2013}, address = {Barcelona, Spain}, abstract = {

Fingerprinting networking equipment has many potential applications and benefits\ in network management and security. More generally, it is useful for the\ understanding of network structures and their behaviors. In this paper, we\ describe a simple fingerprinting mechanism based on the initial TTL values used\ by routers to reply to various probing messages. We show that main classes
obtained using this simple mechanism are meaningful to distinguish routers\ platforms. Besides, it comes at a very low additional cost compared to standard\ active topology discovery measurements. As a proof of concept, we apply our\ method to gain more insight on the behavior of MPLS routers and to, thus, more\ accurately quantify their visible/invisible deployment.

}, keywords = {fingerprinting, initial TTL, MPLS router signature, network discovery}, doi = {10.1145/2504730.2504761}, author = {Yves Vanaubel and Jean-Jacques Pansiot and Pascal M{\'e}rindol and Benoit Donnet} } @inproceedings {Van2013a, title = {Network Fingerprinting: TTL-Based Router Signatures}, booktitle = {ACM Internet Measurement Conference (IMC)}, year = {2013}, month = {10/2013}, address = {Barcelona, Spain}, abstract = {

Fingerprinting networking equipment has many potential applications and benefits\ in network management and security. More generally, it is useful for the\ understanding of network structures and their behaviors. In this paper, we\ describe a simple fingerprinting mechanism based on the initial TTL values used\ by routers to reply to various probing messages. We show that main classes\ obtained using this simple mechanism are meaningful to distinguish routers
platforms. Besides, it comes at a very low additional cost compared to standard\ active topology discovery measurements. As a proof of concept, we apply our\ method to gain more insight on the behavior of MPLS routers and to, thus, more\ accurately quantify their visible/invisible deployment.

}, keywords = {fingerprinting, initial TTL, MPLS, network discovery, router signatures}, author = {Yves Vanaubel and Jean-Jacques Pansiot and Pascal M{\'e}rindol and Benoit Donnet} } @article {Dus2013, title = {Plans for Using and Disseminating mPlane Knowledge}, number = {D7.2}, year = {2013}, month = {11/2013}, institution = {mPlane Consortium}, type = {Public Deliverable}, address = {Torino}, keywords = {dissemination, exploitation, open-source software, publications, standardization}, issn = {D7.2}, author = {Maurizio Dusi and Saverio Niccolini and Antonio Barbuzzi and M. Milanesio and Alessandro Finamore and Brian Trammell and Edion Tego and Francesco Matera and Tivadar Szemethy and Rolf Winter and Zied Ben-Houidi and Andrea Fregosi and Benoit Donnet and Fabrizio Invernizzi and Dimitri Papadimitriou and Ilias Leontiadis and Yan Grunenberger and P. Casas} } @inproceedings {Det2013, title = {Revealing Middlebox Interference with Tracebox}, booktitle = {ACM/USENIX Internet Measurement Conference (IMC)}, year = {2013}, month = {10/2013}, abstract = {

Middleboxes such as firewalls, NAT, proxies, or Deep Pack-et Inspection play an\ increasingly important role in various types of IP networks, including\ enterprise and cellular networks. Recent studies have shed the light on their\ impact on real traffic and the complexity of managing them. Network operators\ and researchers have few tools to understand the impact of those boxes on any
path. In this paper, we propose tracebox, an extension to the widely used\ traceroute tool, that is capable of detecting various types of middlebox\ interference over almost any path. \ tracebox sends IP packets containing TCP\ segments with different TTL values and analyses the packet encapsulated in the\ returned ICMP messages. Further, as recent routers quote, in the ICMP message,\ the entire IP packet that they received, tracebox is able to detect any\ modification performed by upstream middleboxes. In addition, tracebox can often\ pinpoint the network hop where the middlebox interference occurs. We evaluate\ tracebox with measurements performed on PlanetLab nodes. Our analysis reveals\ various types of middleboxes that were not expected on such an experimental\ testbed supposed to be connected to the Internet without any restriction.

}, keywords = {middlebox, network discovery, tracebox}, doi = {10.1145/2504730.2504757}, author = {Gregory Detal and Benjamin Hesmans and Olivier Bonaventure and Yves Vanaubel and Benoit Donnet} } @article {Pap2013c, title = {Selection of Existing Probes and Datasets}, number = {D2.1}, year = {2013}, month = {08/2013}, institution = {mPlane Consortium}, type = {Public Deliverable}, address = {Torino}, abstract = {The mPlane architecture has been designed to include the possibility to interface with existing systems and platforms. While most measurement platforms in existence target a very specific measurement use case (e.g., the discovery of the Internet{\textquoteright}s router-level topology, the continuous measurement of the RTT among host pairs, the exporting via SNMP of network state, etc.), there are platforms that have a large deployed base, with lot of data being at disposal, and/or continuously collecting data. It would be a waste of resources to merely reproduce this effort within mPlane. Instead, mPlane aims at directly interfacing with existing systems and re-using their capabilities and data to feed measurement results to the mPlane intelligence. This document lists selected existing systems that are important for mPlane either for theoretical, conceptual or practical reasons, and that are part of the background of mPlane partners. A sub-set of these systems will be eventually incorporated into mPlane by developing the necessary interfaces. Others could be integrated by the means of proxy probes, i.e., the conceptual component responsible for such interfacing. The main focus of this document is to elaborate the concept of proxy probes, enumerate the systems that will be possibly considered for interface (proxy probe) development, and to give high level descriptions of the proxy probe design for these systems. The following list enumerates the systems that the consortium has chosen to include: - QoF - a TCP-aware IPFIX flow meter  Cisco Ping and SLA Agents - commercial availability and basic network parameter agents  - Tracebox - a tool for middlebox detection and identification - Scamper - a sophisticated active probing tool - MERLIN - a router-level topology discovery tool - TopHat - a configurable measurement system on top of PlanetLab - Tstat - a passive network monitoring tool - BlockMon - a flexible network monitoring and analysis tool - MisuraInternet - a QoS measurement system - Firelog - a Firefox plugin to measure HTTP QoE - Pytomo - an end-host-based video OoE measurement tool - DATI - a high performance deep packet inspector - MobiPerf - a tool for monitoring smartphone performance}, keywords = {active probes, existing probes, passive probes, probes, proxy probes}, author = {Dimitri Papadimitriou and Dario Rossi and YiXi Gong and Brian Trammell and Marco Milanesio and Ernst Biersack and Rolf Winter and Francesco Matera and Maurizio Dusi and Balazs Szabo and Tivadar Szemethy and Alessandro Finamore and Marco Mellia and Alessandro Capello and Fabio Invernizzi and Omar Jabr and Ilias Leontiadis and Benoit Donnet} }