Toggle Main Menu Toggle Search

Open Access padlockePrints

COTraSE: Connection Oriented Traceback in Switched Ethernet

Lookup NU author(s): Marios Andreou, Professor Aad van Moorsel



Layer 2 traceback is an important component of end-to-end packet traceback. Whilst IP traceback identifies the origin network, L2 traceback extends the process to provide a more fine-grained result. Other known proposals have exposed the difficulties of L2 traceback in switched ethernet. We build on our earlier work and improve in a number of dimensions. Memory requirements are decreased by maintaining ‘connection records’ rather than logging all frames. Our switchport resolution algorithm provides error detection by correlating MAC address table values from two adjacent switches. Our solution also takes stock of potential transformations to packet data as this leaves the local network. We have implemented the core algorithm and used data from available WAN traces to demonstrate the potential memory efficiency of our approach.

Publication metadata

Author(s): Andreou M, van Moorsel A

Editor(s): Rak, M., Abraham, A., Casola, V.

Publication type: Conference Proceedings (inc. Abstract)

Publication status: Published

Conference Name: Proceedings of the Fourth International Symposium on Information Assurance and Security (IAS)

Year of Conference: 2008

Pages: 198-204

Date deposited: 07/09/2010

Publisher: IEEE Computer Society


DOI: 10.1109/IAS.2008.25

Library holdings: Search Newcastle University Library for this item

ISBN: 9780769533247