Monitoring of tunneled IPv6 traffic using packet decapsulation and IPFIX

  • Authors:
  • Martin Elich;Matěj Grégr;Pavel Čeleda

  • Affiliations:
  • CESNET, z.s.p.o., Prague, Czech Republic and Masaryk University, Brno, Czech Republic;CESNET, z.s.p.o., Prague, Czech Republic and Brno University of Technology, Brno, Czech Republic;CESNET, z.s.p.o., Prague, Czech Republic and Masaryk University, Brno, Czech Republic

  • Venue:
  • TMA'11 Proceedings of the Third international conference on Traffic monitoring and analysis
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

IPv6 is being deployed but many Internet Service Providers have not implemented its support yet. Most of the end users have IPv6 ready computers but their network doesn't support native IPv6 connection so they are forced to use transition mechanisms to transport IPv6 packets through IPv4 network. We do not know, what kind of traffic is inside of these tunnels, which services are used and if the traffic does not bypass security policy. This paper proposes an approach, how to monitor IPv6 tunnels even on high-speed networks. The proposed approach allows to monitor traffic on 10Gbps links, because it supports hardwareaccelerated packet distribution on multi-core processors. A system based on the proposed approach is deployed at the CESNET2 network, which is the largest academic network in the Czech Republic. This paper also presents several statistics about tunneled traffic on the CESNET2 backbone links.