A Technique for counting NATted hosts

被引:0
作者
Bellovin, SM [1 ]
机构
[1] AT&T Labs Res, Florham Pk, NJ USA
来源
IMW 2002: PROCEEDINGS OF THE SECOND INTERNET MEASUREMENT WORKSHOP | 2002年
关键词
D O I
暂无
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
There have been many attempts to measure how many hosts are on the Internet. Many of those endpoints, however, are NAT boxes (Network Address Translators), and actually represent several different computers. We describe a technique for detecting NATs and counting the number of active hosts behind them. The technique is based on the observation, that on many operating systems, the IP header's ID fieldis- a simple counter. By suitable processing of trace data, packets emanating from individual machines can be isolated, and the number of machines determined. Our implementation, tested on aggregated local trace data, demonstrates the feasibility (and limitations) of the scheme.
引用
收藏
页码:267 / 272
页数:6
相关论文
共 12 条
  • [1] [Anonymous], 2401 RFC INT ENG TAS
  • [2] [Anonymous], 1990, 1191 RFC
  • [3] Hain T., 2000, ARCHITECTURAL IMPLIC
  • [4] Holdrege M., 2001, RFC 3027
  • [5] *HON PROJ, 2002, KNOW YOUR EN PASS FI
  • [6] MAHAJAN R, 2002, IN PRESS P SIGCOMM 2
  • [7] Postel J., 1981, 791 RFC, DOI 10.17487/RFC0791
  • [8] REEDS J, 1977, CRYPTOLOGIA JAN, V1
  • [9] Schulzrinne H., 1996, 1889 RFC INT ENG TAS
  • [10] SENIE D, 2002, 3235 RFC INT ENG TAS