Detail výsledku

Monitoring of Tunneled IPv6 Traffic Using Packet Decapsulation and IPFIX

ELICH, M.; GRÉGR, M.; ČELEDA, P. Monitoring of Tunneled IPv6 Traffic Using Packet Decapsulation and IPFIX. Traffic Monitoring and Analysis. Lecture Notes in Computer Science. Vienna: Springer Verlag, 2011. p. 64-71. ISBN: 978-3-642-20304-6.
Typ
článek ve sborníku konference
Jazyk
anglicky
Autoři
Elich Martin
Grégr Matěj, Ing., Ph.D., CVIS ‒ KolejNet (CIS), UIFS (FIT)
Čeleda Pavel
Abstrakt

This paper delas with tunneled IPv6 traffic monitoring and describing IPv6 transition issues. The contribution is a possibility of monitoring what is inside IPv6 tunnels. This gives network administrators a way to detect security threats which would be otherwise considered as harmless IPv4 traffic. This approach is also suitable for long term network monitoring. This is achieved by the usage of IPFIX (IP Flow Information Export) as the information carrying format. The proposed approach also allows to monitor traffic on 10 Gb/s links  because it supports hardware-accelerated packet distribution to multiple processors.


Klíčová slova

IPv6, Teredo, ISATAP, 6to4, network monitoring, IPv6 tunnel, IPFIX, FlowMon

Rok
2011
Strany
64–71
Sborník
Traffic Monitoring and Analysis
Řada
Lecture Notes in Computer Science
Svazek
6613
Konference
European Wireless Conference
ISBN
978-3-642-20304-6
Vydavatel
Springer Verlag
Místo
Vienna
BibTeX
@inproceedings{BUT76331,
  author="Martin {Elich} and Matěj {Grégr} and Pavel {Čeleda}",
  title="Monitoring of Tunneled IPv6 Traffic Using Packet Decapsulation and IPFIX",
  booktitle="Traffic Monitoring and Analysis",
  year="2011",
  series="Lecture Notes in Computer Science",
  volume="6613",
  pages="64--71",
  publisher="Springer Verlag",
  address="Vienna",
  isbn="978-3-642-20304-6",
  url="https://www.fit.vut.cz/research/publication/9604/"
}
Soubory
Projekty
Moderní prostředky pro boj s kybernetickou kriminalitou na Internetu nové generace, MV, Program bezpečnostního výzkumu České republiky 2010 - 2015, VG20102015022, zahájení: 2010-10-01, ukončení: 2015-09-30, ukončen
Výzkumné skupiny
Pracoviště
Nahoru