Using pathchar to estimate Internet link characteristics
Proceedings of the conference on Applications, technologies, architectures, and protocols for computer communication
Precision timestamping of network packets
IMW '01 Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement
Measuring ISP topologies with rocketfuel
Proceedings of the 2002 conference on Applications, technologies, architectures, and protocols for computer communications
End-to-end available bandwidth: measurement methodology, dynamics, and relation with TCP throughput
Proceedings of the 2002 conference on Applications, technologies, architectures, and protocols for computer communications
Estimation and Removal of Clock Skew from Network Delay Measurements
Estimation and Removal of Clock Skew from Network Delay Measurements
User-level internet path diagnosis
SOSP '03 Proceedings of the nineteenth ACM symposium on Operating systems principles
An empirical evaluation of wide-area internet bottlenecks
Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement
Reverse engineering the Internet
ACM SIGCOMM Computer Communication Review
Bridging router performance and queuing theory
Proceedings of the joint international conference on Measurement and modeling of computer systems
Comparing Probe- and Router-Based Packet-Loss Measurement
IEEE Internet Computing
MultiQ: automated detection of multiple bottleneck capacities along a path
Proceedings of the 4th ACM SIGCOMM conference on Internet measurement
Comparison of public end-to-end bandwidth estimation tools on high-speed links
PAM'05 Proceedings of the 6th international conference on Passive and Active Network Measurement
Remote Physical Device Fingerprinting
IEEE Transactions on Dependable and Secure Computing
USENIX-SS'06 Proceedings of the 15th conference on USENIX Security Symposium - Volume 15
| Hi-index | 0.00 |
We analyze delays of traceroute probes, i.e. packets that elicit ICMP TimeExceeded messages, for a full range of probe sizes up to 9000 bytes as observed on unloaded high-end routers. Our ultimate motivation is to use traceroute RTTs for Internet mapping of router and PoP (ISP point-of-presence) level nodes, including potentially gleaning information on equipment models, link technologies, capacities, latencies, and spatial positions. To our knowledge it is the first study to examine in a reliable testbed setting the detailed statistics of ICMP response generation. We find that two fundamental assumptions about ICMP often do not hold in modern routers, namely that ICMP delays are a linear function of packet size and that ICMP generation rate is equal to the capacity of the inteface on which probes are received. The primary causes of these violations appear to be optimizations that suppress size dependence, e.g. buffer carving, and rate-limiting of internal ICMP packet and bit rates. Our results suggest that the linear model of packet delay as a function of packet size merits revisiting for many situations, especially for packets over 1500 bytes. Our findings also suggest possibilities of developing new techniques for bandwidth estimation and router fingerprinting.