¥¤¥ó¥¿¡¼¥Í¥Ã¥È·×Â¬¤È¥Ç¡¼¥¿²òÀÏ Âè1²ó

Size: px

Start display at page:

Download "¥¤¥ó¥¿¡¼¥Í¥Ã¥È·×Â¬¤È¥Ç¡¼¥¿²òÀÏ Âè1²ó"

ゆりなじゅふく
5 years ago
Views:

lumeta internet mapping http://www.lumeta.com http://www.

2 lumeta internet mapping / 43

3 ( ) 3 / 43

4 (Kenjiro Cho) WIDE 1984 ( ) OS ( ) (QoS ) 2001 ( ) 2004 ( ) QoS 4 / 43

5 (Internet measurement and data analysis) : kjc@sfc.keio.ac.jp TA: sora@sfc.wide.ad.jp SA: katoon@ht.sfc.keio.ac.jp upa@sfc.wide.ad.jp URL: kjc/classes/ sfc2011s-measurement/ ( TA SA ): imda@sfc.wide.ad.jp : : 2 5 / 43

6 6 / 43

7 (1/4) 1 (5/11) :ruby 2 (5/18) :gnuplot 3 (5/25) : 7 / 43

8 (2/4) 4 (6/1) : 1 5 (6/8) : 6 (6/15) : 8 / 43

9 (3/4) 7 (6/22) ( ) : CDF 2 8 (6/26) : 9 (6/29) : 9 / 43

10 (4/4) 10 (7/6) : 11 (7/13) : 12 (7/20) : 13 (7/27) : 10 / 43

11 ( ) 11 / 43

12 12 / 43

13 13 / 43

14 ( ) ( ) ( ) ( ) (web ) 14 / 43

15 : : TCP 15 / 43

16 16 / 43

17 17 / 43

18 18 / 43

19 19 / 43

20 90 web 2000 P2P SNS 30 dst address Traffic (Mbps) :00:00 04/12 03:00:00 04/12 06:00:00 04/12 09:00:00 04/12 12:00:00 04/12 15:00:00 04/12 18:00:00 04/12 21:00:00 04/12 00:00:00 04/13 Time total / / / / / / / / / / / / /7 20 / 43

21 PC 21 / 43

22 22 / 43

24 ( ) ping traceroute tcpdump SNMP 24 / 43

25 ping ICMP-echo request/reply ICMP 25 / 43

26 fast path: slow path: ICMP processor line card line card switch fabric line card line card 26 / 43

27 ping sample output % ping -c 10 PING ( ): 56 data bytes 64 bytes from : icmp_seq=0 ttl=114 time= ms 64 bytes from : icmp_seq=1 ttl=114 time= ms 64 bytes from : icmp_seq=2 ttl=114 time= ms 64 bytes from : icmp_seq=3 ttl=114 time= ms 64 bytes from : icmp_seq=4 ttl=114 time= ms 64 bytes from : icmp_seq=5 ttl=114 time= ms 64 bytes from : icmp_seq=6 ttl=114 time= ms 64 bytes from : icmp_seq=7 ttl=114 time= ms 64 bytes from : icmp_seq=8 ttl=114 time= ms 64 bytes from : icmp_seq=9 ttl=114 time= ms ping statistics packets transmitted, 10 packets received, 0% packet loss round-trip min/avg/max/stddev = / / /3.142 ms 27 / 43

28 traceroute IP TTL (time-to-live) TTL 1 TTL 0 ICMP TIME EXCEEDED IP IP 28 / 43

29 traceroute sample output % traceroute traceroute to ( ), 64 hops max, 40 byte packets ( ) ms ms ms 2 jc-gw0.iij.net ( ) ms ms ms 3 tky001ix07.iij.net ( ) ms ms ms 4 tky001bb00.iij.net ( ) ms ms ms 5 tky001ix04.iij.net ( ) ms ms ms ( ) ms ms ms 7 ge toknf-cr2.ix.singtel.com ( ) ms ms ms 8 p6-13.sngtp-cr2.ix.singtel.com ( ) ms ( ) ms ms ( ) ms ms ( ) ms ( ) ms ms ms ( ) ms ms ms 12 st1-6-bkk.csloxinfo.net ( ) ms ms ms 13 st1-6-bkk.csloxinfo.net ( ) ms ms ms ( ) ms ms ms 15 * * * 16 * * * 17 * * * 29 / 43

30 tcpdump N : TCP SYN 30 / 43

31 tcpdump sample output 18:45: IP > : \ S : (0) win <mss 1460,nop,nop,sackOK,nop, \ wscale 1,nop,nop,timestamp > 18:45: IP > : \ S : (0) ack win <mss 1460,nop, \ ywscale 1,nop,nop,timestamp ,nop,nop,sackOK> 18:45: IP > : \. ack 1 win <nop,nop,timestamp > 18:45: IP > : \ P 1:521(520) ack 1 win <nop,nop,timestamp > 18:45: IP > : \ P 1:222(221) ack 521 win <nop,nop,timestamp > 18:45: IP > : \. ack 222 win <nop,nop,timestamp > 18:45: IP > : \ F 222:222(0) ack 521 win <nop,nop,timestamp > 18:45: IP > : \. ack 223 win <nop,nop,timestamp > 18:45: IP > : \ F 521:521(0) ack 223 win <nop,nop,timestamp > 18:45: IP > : \. ack 522 win <nop,nop,timestamp > 31 / 43

32 SNMP (Simple Network Management Protocol) SNMP UDP ( ) OS MIB (Management Information Base) SNMP : interfaces.iftable.ifentry.ifoutoctets MIB MIB get, set, get-next to access MIB 32 / 43

33 SNMP 5 tupples (protocol, srcaddr, dstaddr, srcport, dstport), AS, etc : NetFlow sflow IPFIX... flow 5 flow 4 flow 3 flow 2 flow 1 flow 6 time bin N time bin N+1 time 33 / 43

34 MRTG SNMP daily, weekly, monthly, yearly inbound/outbound traffic 34 / 43

35 RRDtool RRDtool: MRTG flowscan RRDtool NetFlow from caida web site 35 / 43

36 36 / 43

37 Ruby

38 Ruby 1993 : Ruby on Rails (Web ) Ruby Ruby official site: Ruby : Ruby : 38 / 43

39 Ruby : : ( ) : ( Mixin ) / OS Ruby : 39 / 43

40 Ruby commands irb: Ruby $ irb --simple-prompt >> puts "Hello" Hello ruby: Ruby $ ruby test.rb $ ruby -e puts "Hello".reverse olleh rdoc: RDoc RDoc Ruby ri: RDoc Ruby $ ri String#upcase 40 / 43

41 : filename = ARGV[0] count = 0 file = open(filename) while text = file.gets count += 1 end file.close puts count count.rb $ ruby count.rb foo.txt Ruby #!/usr/bin/env ruby count = 0 ARGF.each_line do line count += 1 end puts count 41 / 43

42 2 (5/18) :gnuplot 42 / 43

43 [1] Ruby official site. [2] gnuplot official site. [3] Mark Crovella and Balachander Krishnamurthy. Internet measurement: infrastructure, traffic, and applications. Wiley, [4] Antonio Nucci and Konstantina Papagiannaki. Design, Measurement and Management of Large-Scale IP Networks: Bridging the Gap Between Theory and Practice. Cambridge University Press, [5] Pang-Ning Tan, Michael Steinbach and Vipin Kumar. Introduction to Data Mining. Addison Wesley, [6] Raj Jain. The art of computer systems performance analysis. Wiley, [7],.., [8],.., / 43

¥¤¥ó¥¿¡¼¥Í¥Ã¥È·×Â¬¤È¥Ç¡¼¥¿²òÀÏ Âè1²ó

¥¤¥ó¥¿¡¼¥Í¥Ã¥È·×Â¬¤È¥Ç¡¼¥¿²òÀÏ Âè1²ó 1 2013 4 10 lumeta internet mapping http://www.lumeta.com http://www.cheswick.com/ches/map/ 2 / 39 ( ) 3 / 39 (Internet measurement and data analysis) : TA: SA: