A method for active measurement of ip path based on udp message

Abstract

The invention discloses a UDP message-based IP path active measurement method. In the prior art, a detection message is so likely to be identified as a path measurement behavior or attack behavior and filtered that the integrity of path measurement is destructed. The method comprises: selecting a target port and a source port in a UDP message header according to a given detection target address D; filling the fields of the UDP message header and an IP message header according to the provisions of a protocol and sending the detection message: recording the number of the detection message and a corresponding process number or thread number in the detection sum field of the UDP header and the identifier field of the IP header, recording the detection of a UDP message in the data field of the UDP message and sending the detection message; and receiving a response message in a given time period and processing the response message according to the type of the response message, or waiting overtiming processing if the response message is not received in the given time period. The measurement method is used for resisting filtration in an IP network.

Description

Technical field: [0001] The invention relates to an active measurement method of an IP path based on a UDP message. Background technique: [0002] To detect the network topology path by active measurement mainly adopts a method similar to traceroute. First, send a detection message with TTL=1 from the measurement source point S to a certain measurement target D, and receive the returned ICMP timeout message, or wait for the given time t 0 (for example, 5 seconds), then send a message with TTL=2, and so on, until a message indicating that the target is reached is received from the detection target, or the TTL increases to a predetermined threshold (for example, 30). At this point, the path detection process for the measurement target D ends. According to the source IP addresses contained in the returned packets in sequence, the topological path from the measurement source point S to the measurement target D is obtained. Traditionally, when UDP packets are used for detectio...

AI Technical Summary

Problems solved by technology

Traditionally, when UDP packets are used for detection, the detection packets of the same measurement source point use the high port as the destination port. As a result, the behavior of the detected measurement path or multi-point measurement is considered to be a denial of service attack and is filtered. , that is, the probe packets of this method are easily identified as the behavior or attack behavior of measuring the path, thus destroying the integrity of the path measurement