JP Delport and MS Olivier, "Detecting Uncooperative Ethernet Elements using Accurate Round-trip Time Measurements," in D Browne (ed), Southern African Telecommunication Networks and Applications Conference 2005 (SATNAC 2005) Proceedings, Vol 1, 153-156, Champagne Castle, South Africa, September 2005
Knowledge of a network’s entities and the physical connections between them (a network’s physical topology) can be useful in a variety of network scenarios and applications. Specifically, topology information can be used by administrators to detect unauthorised physical modifications to a network. Gathering accurate topology information manually can be a tedious and error-prone, if not impossible task.
In this paper an active probing technique is used to obtain packet timing information from a set of experimental Ethernet LANs. Packets are sent from a probing host to a target node in a variety of network configurations and the total time from sending out the packet to receiving a reply is measured and stored. The stored timing data is then used to determine the influence of common Ethernet network elements on packet round-trip times. Real-Time Linux is used to obtain low-level and fine grained timing control over the probing host’s network card.
Ethetnet, network topology
@INPROCEEDINGS(etherdetect,
AUTHOR={J P Delport and Martin S Olivier},
TITLE={Detecting Uncooperative {E}thernet Elements using Accurate Round-trip Time Measurements},
BOOKTITLE={Southern African Telecommunication Networks and Applications Conference 2005 (SATNAC 2005) Proceedings},
VOLUME={1},
EDITOR={David Browne},
ADDRESS={Champagne Castle, South Africa},
MONTH={September},
YEAR={2005},
PAGES={153--156} )
The full text may be downloaded from http://mo.co.za/open/etherdetect.pdf (PDF, 62K).
[Publications]
[Home]
Page maintained by
Martin Olivier
Last update: 10 November 2007