Term Project Detail Design Traffic Generator 2003-11-17 So Jung LEE Dpnm Lab. CSE POSTECH

Slides:



Advertisements
Similar presentations
APNOMS 2003 Security Gateway System Team Design and Implementation of Security Gateway System for Intrusion Detection on High-speed Links Byoung-Koo Kim,
Advertisements

Internet Control Protocols Savera Tanwir. Internet Control Protocols ICMP ARP RARP DHCP.
CS/CoE 535 : Snort Lite - Fall Snort Lite Members Michael Attig –Hardware Design / System Architecture Qian Wan –Software Design.
Snort - an network intrusion prevention and detection system Student: Yue Jiang Professor: Dr. Bojan Cukic CS665 class presentation.
ARP and RARP The left side of this slide gives an ARP message in hexadecimal format, identify the ARP header fields, and work out their corresponding values.
Introduction to Transport Layer. Transport Layer: Motivation A B R1 R2 r Recall that NL is responsible for forwarding a packet from one HOST to another.
1 Application TCPUDP IPICMPARPRARP Physical network Application TCP/IP Protocol Suite.
ICMP: Ping and Trace CCNA 1 version 3.0 Rick Graziani Spring 2005.
Chapter 9 Classification And Forwarding. Outline.
Practical Networking. Introduction  Interfaces, network connections  Netstat tool  Tcpdump: Popular network debugging tool  Used to intercept and.
1 Internet Control Message Protocol (ICMP) RIZWAN REHMAN CCS, DU.
1 ICMP – Using Ping and Trace CCNA Semester
Sepehr Firewalls Sepehr Sadra Tehran Co. Ltd. Ali Shayan December 2008.
1 Figure 5-4: Drivers of Performance Requirements: Traffic Volume and Complexity of Filtering Performance Requirements Traffic Volume (Packets per Second)
Internet Control Message Protocol ICMP. ICMP has two major purposes: –To report erroneous conditions –To diagnose network problems ICMP has two major.
Penetration Testing Security Analysis and Advanced Tools: Snort.
Term Project Detail Design 2 Traffic Generator So Jung LEE Dpnm Lab. CSE POSTECH
Chabot College ELEC Ports (Layer 4).
Module 12: Routing Fundamentals. Routing Overview Configuring Routing and Remote Access as a Router Quality of Service.
POSTECH DP&NM Lab. Internet Traffic Monitoring and Analysis: Methods and Applications (1) 4. Active Monitoring Techniques.
Internet Ethernet Token Ring Video High Speed Router Host A: Client browser: REQUEST:http//mango.ee.nogradesu.edu/c461.
1 © 2004 Cisco Systems, Inc. All rights reserved. CCNA 2 v3.1 Module 11 Access Control Lists (ACLs)
CSCI 530 Lab Intrusion Detection Systems IDS. A collection of techniques and methodologies used to monitor suspicious activities both at the network and.
1 © 2004, Cisco Systems, Inc. All rights reserved. Chapter 9 Intermediate TCP/IP/ Access Control Lists (ACLs)
Firewall Fingerprinting Amir R. Khakpour 1, Joshua W. Hulst 1, Zhihui Ge 2, Alex X. Liu 1, Dan Pei 2, Jia Wang 2 1 Michigan State University 2 AT&T Labs.
Verify that timestamps for debugging and logging messages has been enabled. Verify the severity level of events that are being captured. Verify that the.
Project Requirements (NetFlow Generator) 정승화 분산 처리 및 네트워크 관리 연구실 포항 공과 대학교
ICMP : Internet Control Message Protocol
Internet Protocol Formats. IP (V4) Packet byte 0 byte1 byte 2 byte 3 data... – up to 65 K including heading info Version IHL Serv. Type Total Length Identifcation.
CS492b Project #3-2 KIP router KAIST Dept. of CS NC Lab.
Network Layer by peterl. forwarding table routing protocols path selection RIP, OSPF, BGP IP protocol addressing conventions datagram format packet handling.
Net Flow Network Protocol Presented By : Arslan Qamar.
POSTECH DP&NM Lab. Internet Traffic Monitoring and Analysis: Methods and Applications (1) 1.Introduction.
Computer Communication: An example What happens when I click on
Firewalls A brief introduction to firewalls. What does a Firewall do? Firewalls are essential tools in managing and controlling network traffic Firewalls.
1 Review – The Internet’s Protocol Architecture. Protocols, Internetworking & the Internet 2 Introduction Internet standards Internet standards Layered.
POSTECH DP&NM Lab Detailed Design Document NetFlow Generator 정승화 DPNM Lab. in Postech.
TCP/IP Illustrated, Volume 1: The Protocols Chapter 6. ICMP: Internet Control Message Protocol ( 월 ) 김 철 환
1 Pertemuan 24 Access Control List Fundamentals. Discussion Topics Introduction ACLs How ACLs work Creating ACLs The function of a wildcard mask Verifying.
- 1 - DPNM Review of Important Networking Concepts J. Won-Ki Hong Dept. of Computer Science and Engineering POSTECH Tel:
Cisco I Introduction to Networks Semester 1 Chapter 6 JEOPADY.
SOCKET PROGRAMMING Presented By : Divya Sharma.
Internet Control Message Protocol (ICMP)
Snort – IDS / IPS.
Chapter4 Packet and Protocol.
Internet Control Message Protocol (ICMP)
Multiplexing.
P4 (Programming Protocol-independent Packet Processors)
Internet Control Message Protocol
Internet Protocol Formats
ICMP – Using Ping and Trace
Byungchul Park ICMP & ICMPv DPNM Lab. Byungchul Park
Internet Control Message Protocol (ICMP)
ECET 375 Competitive Success/snaptutorial.com
ECET 375 Education for Service-- snaptutorial.com.
ECET 375 Teaching Effectively-- snaptutorial.com.
Internet Control Message Protocol (ICMP)
ICMP – Using Ping and Trace
Internet Control Message Protocol (ICMP)
Studying TCP and UDP interactions in WiFi networks
Internet Control Message Protocol (ICMP)
Internet Control Message Protocol (ICMP)
Wireshark CSC8510 David Sivieri.
What does this packet do?
Design of a Diversified Router: November 2006 Demonstration Plans
Network Analyzer :- Introduction to Wireshark
Firewalls.
Internet Protocol Formats
46 to 1500 bytes TYPE CODE CHECKSUM IDENTIFIER SEQUENCE NUMBER OPTIONAL DATA ICMP Echo message.
Transport Protocols Relates to Lab 5. An overview of the transport protocols of the TCP/IP protocol suite. Also, a short discussion of UDP.
Presentation transcript:

Term Project Detail Design Traffic Generator So Jung LEE Dpnm Lab. CSE POSTECH

2 Contents Introduction System Requirement Traffic Generator System Overall Architecture Module Design Q & A

3 Introduction Motivation 현재 dpnm lab. 에서 개발 중인 NG-MON 과 NSAA 에 대한 performance test. Goal 원하는 Application traffic 에 대하여 type 과 bandwidth 를 정하여 packet 들을 generation 하는 것.

4 System Requirement Functional Requirements 구현할 Protocol 은 IP, TCP, UDP, ICMP 의 네 가지 이다. 사용자는 원하는 protocol 내에 있는 header field 값을 직접 정할 수 있어야 한다. 사용자는 bandwidth 는 직접 정할 수 있어야 한다. header field 값과 bandwidth 에 대해 set/increment/random option 을 설정할 수 있다.

5 Traffic Generator System Overall Architecture CLI (Command Line Interface) Xml File Generator Traffic Generator Xml File Parser Argument Parser Flooder Flow specification Configuration file Flow specification/ Configuration file

6 각각의 Module 설명 Xml file generator 사용자가 입력한 flow specification 을 xml file 로 생성하여 저장. Traffic generator Xml file parser - 저장된 xml file 을 통해 traffic 을 generate 하려고 할 경우에 사용. - xml file 을 parsing 하여 원하는 값들을 가져와 flow 구성을 정의함. Argument parser - 사용자가 직접 flow specification 을 적어서 traffic 을 generate 할 경우에 사용. - argument 값으로 들어온 값들을 parsing 하여 flow 구성을 정의함. Flooder - 정의된 flow 구성에 따라 flow 들을 생성하여 소켓을 통해 보냄.

7 Flooder Module Design Client Sockaddr_in 구성 Flow 구성 Packet size module PPS module Send module Sock 개설 close 서버의 IP 주소와 Port 번호 Packet 을 보냄 Header module 2. Packet 구성 5.

8 Flooder Module Design 1. Flow 구성 3option 을 적용하는 rule Set: Destination IP,Destination Port Source IP, Source Port, Protocol, Packet Size, pps 에 모 두 적용 Increment: Source IP, Source Port, Packet Size 에만 적용 Random: Source IP, Source Port, Packet Size 에만 적용 Flow 구조체 구성 Destination IP,Destination Port Source IP, Source Port, Protocol, PacketSize, pps IP 증가분, Port 증가분, packet size 증가분, ICMP code, type Xml File Parser module Argument Parser module Flow 구조체 구성 Header, Bandwidth 설정 값 Increment 할 값 Packet 구조체 구성 Header module

9 Flooder Module Design 2. Packet 구성 Packet 구조체 구성 Packet1= IP header + TCP header + payload Packet2= IP header + UDP header + payload Packet3= IP header + ICMP header + payload Packet 내 설정하게 될 필드 값 IP header: sourceIP, destinationIP TCP/UDP header: source Port, destination Port ICMP header: type, code

10 Flooder Module Design 3. Header Module Header module Set module Increment Module Random Module Flow 구조체 구성 Destination IP, Destination Port, Source IP, SourceIP 증가분 Source Port, Source Port 증가분 Destination IP, Destination Port, Source IP, Source Port Destination IP, Destination Port, Source IP start 값, end 값 Source Port start 값, end 값

11 Flooder Module Design 4. Packet Size module Packet Size module Set module Increment Module Random Module Flow 구조체 구성 Packet size 값 Packet size 값, packet size 증가분 Packet size Start 값, end 값

12 Flooder Module Design 5. pps module Flow 구조체 구성 PPS(packet per second) 정보 Set module PPS module

13 Q & A