TY - CONF T1 - Network Fingerprinting: TTL-Based Router Signature T2 - ACM/USENIX Internet Measurement Conference (IMC) Y1 - 2013 A1 - Yves Vanaubel A1 - Jean-Jacques Pansiot A1 - Pascal Mérindol A1 - Benoit Donnet KW - fingerprinting KW - initial TTL KW - MPLS router signature KW - network discovery AB -

Fingerprinting networking equipment has many potential applications and benefits in network management and security. More generally, it is useful for the understanding of network structures and their behaviors. In this paper, we describe a simple fingerprinting mechanism based on the initial TTL values used by routers to reply to various probing messages. We show that main classes
obtained using this simple mechanism are meaningful to distinguish routers platforms. Besides, it comes at a very low additional cost compared to standard active topology discovery measurements. As a proof of concept, we apply our method to gain more insight on the behavior of MPLS routers and to, thus, more accurately quantify their visible/invisible deployment.

JF - ACM/USENIX Internet Measurement Conference (IMC) CY - Barcelona, Spain ER - TY - CONF T1 - Network Fingerprinting: TTL-Based Router Signatures T2 - ACM Internet Measurement Conference (IMC) Y1 - 2013 A1 - Yves Vanaubel A1 - Jean-Jacques Pansiot A1 - Pascal Mérindol A1 - Benoit Donnet KW - fingerprinting KW - initial TTL KW - MPLS KW - network discovery KW - router signatures AB -

Fingerprinting networking equipment has many potential applications and benefits in network management and security. More generally, it is useful for the understanding of network structures and their behaviors. In this paper, we describe a simple fingerprinting mechanism based on the initial TTL values used by routers to reply to various probing messages. We show that main classes obtained using this simple mechanism are meaningful to distinguish routers
platforms. Besides, it comes at a very low additional cost compared to standard active topology discovery measurements. As a proof of concept, we apply our method to gain more insight on the behavior of MPLS routers and to, thus, more accurately quantify their visible/invisible deployment.

JF - ACM Internet Measurement Conference (IMC) CY - Barcelona, Spain ER -