Dynamic Packet Filters for Accurate Network Path Tracing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for tracing IP packets through digital networks, such as traceroute and ping, provide aggregate and potentially inaccurate data due to their reliance on special packets and active measurement, failing to capture real-time unidirectional path information and timestamping of actual network traffic.
Innovation Solution
The method involves three phases: discovery, dynamic filter setup, and data collection, where filters are set up along the path to capture time-stamped packet header information, mimicking real traffic and allowing passive monitoring of actual network data, enabling accurate tracking of routing changes and real-time data collection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traceroute utility is used to trace packet path through manipulating TTL attribute, then path information can be obtained, but the traced path is only an aggregate theoretical route that may not represent the actual path taken by real packets
Solution Approach 1:
The patent creates copies of actual data packets and sends them through the network to trace the real path. These packet copies include timestamping information and are routed through the same network infrastructure as actual traffic, ensuring the traced path accurately represents real packet routes rather than theoretical paths based on TTL manipulation.
Solution Approach 2:
The patent replaces the mechanical TTL decrement system with a timestamping-based tracking system. Instead of relying on routers to decrement TTL counters and generate ICMP messages, the system uses timestamping at network entry and exit points to determine actual packet paths, substituting active measurement mechanics with passive observation of real traffic flow.
2Measurement precision
If ICMP messages are used for ping utility to measure round trip delay, then delay measurement can be obtained, but ICMP messages may be routed differently than other network traffic and dropped when router becomes congested
Solution Approach 1:
The patent changes the measurement approach from using special ICMP messages to using timestamping on actual data packets. By measuring the time difference between packet creation and reception for real traffic packets, the system obtains delay measurements that accurately reflect the performance experienced by actual network traffic, eliminating the parameter difference between measurement packets and data packets.
3Productivity
If special test packets are inserted into the network for active measurement, then path and delay information can be collected, but these special packets may not be routed through the network in the same way as other traffic
Solution Approach 1:
The patent creates copies of actual data packets for measurement purposes. These copies maintain the same characteristics as real traffic packets, ensuring they are routed through the network identical to how actual traffic flows. This eliminates the discrepancy between measurement packet routing and real traffic routing while preserving measurement productivity.
Data Source
AI summary
Packet tracing in switched packet networks. Tracing of live packet data in a network is performed by discovering the measurement path, setting up dynamic filters along the path to collect traffic information, and collecting data as detected by the dynamic filters. Collected data is sent to a measuring entity. Filter setup may be repeated to capture data as routing changes.


