I TCP 1/2 1

Similar documents
Contents Part1: TCP Part2: TCP Part3: TCP Part4: Part5: TCP Part6:


橡c03tcp詳説(3/24修正版).PDF

第1回 ネットワークとは

2004 SYN/ACK SYN Flood G01P014-6

TCP T ransmission Control Protocol TCP TCP TCP TCP TCP TCP TCP TCP c /(18)

2 1: OSI OSI,,,,,,,,, 4 TCP/IP TCP/IP, TCP, IP 2,, IP, IP. IP, ICMP, TCP, UDP, TELNET, FTP, HTTP TCP IP

Flow Control Information Network 1 /

NetEng-04.ppt

untitled

untitled

total-all-nt.dvi

TOPIC 2004 年 4 月 21 日に公開された TCP の脆弱性! Transmission Control Protocol: TCP について! 脆弱性発見の背景! 脆弱性情報の流通過程! 脆弱性の内容について! 実際の脆弱性への対応 脆弱性の対象となる製品 脆弱性の回避策と対策 公開情

1000 Copyright(C)2009 All Rights Reserved - 2 -

卒研 .PDF

第1回 ネットワークとは

i TCP/IP NIC Intel 3com NIC TCP/IP *1 20 IPv4 IPv6 IPv6 TCP/IP TCP/IP *1 3

¥¤¥ó¥¿¡¼¥Í¥Ã¥È·×¬¤È¥Ç¡¼¥¿²òÀÏ Âè1²ó


トランスポートレイヤの仕事 計算機間での良好なデータのやり取りを実現する 誤りがないように 再送 パリティー情報による自動再生 (FEC; Forward Error Correction) データを取りこぼさないように それ以外に欲しくなる機能 並列データ転送 ネットワークに やさしく 道が混まな

IP IPv4-IPv6

Microsoft PowerPoint ppt [互換モード]

Microsoft PowerPoint ppt

$ cal ) ( cal $ cal cal cal 1. () ( clear) 2. ( cal) 3. ( man) \() ( ) --() +()

VNSTProductDes3.0-1_jp.pdf

main2.dvi

スライド タイトルなし

スライド タイトルなし

untitled

第1回 ネットワークとは

IPv4aaSを実現する技術の紹介

DVTS Consumer DV Camera IEEE1394 Cable Internet Consumer DV Deck IEEE1394 Cable DV Internet PC Internet DV PC

Microsoft PowerPoint

ppt

- 2 Copyright (C) All Rights Reserved.

IPv6における

Packet Tracer: 拡張 ACL の設定 : シナリオ 1 トポロジ アドレステーブル R1 デバイスインターフェイス IP アドレスサブネットマスクデフォルトゲートウェイ G0/ N/A G0/

untitled

TTC技術書

IP 2.2 (IP ) IP 2.3 DNS IP IP DNS DNS 3 (PC) PC PC PC Linux(ubuntu) PC TA 2

tutorial.dvi

ict2-.key

2.5 トランスポート層 147

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)

wide95.dvi

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2

snortの機能を使い尽くす & hogwashも使ってみる

ヤマハ ルーター ファイアウォール機能~説明資料~

wide93.dvi

IP IP DHCP..

NetEng-05.ppt

Copyright(C)2010 i-corpration All Rights Reserved.

R70_Software_Manual_JP1.3

tcp/ip.key

Mac OS X Server QuickTime Streaming Server 5.0 の管理(バージョン 10.3 以降用)

untitled

untitled

untitled

Page 1

VMware View Persona Management

3. LISP B EID RLOC ETR B 4. ETR B ITR A 1: LISP 5. ITR A B EID RLOC 6. A SYN 7. ITR A ITR A B EID RLOC SYN ITR A RLOC ETR B RLOC 8. ETR B SYN ETR B B

IP RTP 2 QoS i

Si-R30取扱説明書

議案1説明資料

PowerPoint Presentation

相続支払い対策ポイント

150423HC相続資産圧縮対策のポイント

ハピタス のコピー.pages

Copyright 2008 All Rights Reserved 2

F コマンド

I j

Macintosh HD:Users:ks91:Documents:lect:nm2002s:nm2002s03.dvi

ヤマハ ルーター ファイアウォール機能~説明資料~

Microsoft PowerPoint - ykashimu_dslite_JANOG26_rev

法制度改革と電子マネーにおける立法の可能性

Using a Remote Desktop Connection with FileMaker Pro


TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

図解でわかるVoIPのすべて - IP電話の技術から構築まで -

初めに:

Dual Stack Virtual Network Dual Stack Network RS DC Real Network 一般端末 GN NTM 端末 C NTM 端末 B IPv4 Private Network IPv4 Global Network NTM 端末 A NTM 端末 B

集中講義 インターネットテクノロジー 第5回

QOS.dvi


Microsoft PowerPoint - ie ppt

Microsoft Word - Open_Alliance_TC8_A02.docx

untitled

Copyright 2008 NIFTY Corporation All rights reserved. 2

release-270.PDF

IPSEC-VPN IPsec(Security Architecture for Internet Protocol) IP SA(Security Association, ) SA IKE IKE 1 1 ISAKMP SA( ) IKE 2 2 IPSec SA( 1 ) IPs

情報通信ネットワーク特論 TCP/IP (3)

侵入技術の紹介

IP.dvi

UsersGuide_INR-HG5497c_.doc


PLQ-20 取扱説明書 詳細編

TCP-STAR a) Implementation and Evaluation of TCP-STAR: TCP Congestion Control Method for Satellite Internet Hiroyasu OBATA a), Kazuhiro TAIRA, and Ken

パケットモニター (Wireshark) の使い方 第 1 版 1.Wireshark とは ネットワーク上 (LAN ケーブルに流れている ) のパケットを取得して その中の情報を画面に表示するソフトウェア (LAN アナライザーまたはパケットモニター ) の 1 つに Wiresh

GA-1190J

VoIPチュートリアル

Transcription:

I TCP 1/2 1

Transport layer: a birds-eye view Hosts maintain state for each transport endpoint Routers don t maintain perhost state H R R R R H Transport IP IP IP IP IP Copyright(C)2011 Youki Kadobayashi. All rights reserved. 2

n n n (flow control) (congestion control) Copyright(C)2011 Youki Kadobayashi. All rights reserved. 3

Internet n TCP (RFC793) Transmission Control Protocol n SCTP (RFC4960) n DCCP (RFC4340) n UDP (RFC768) User Datagram Protocol Advanced topic; out of scope IP + Copyright(C)2011 Youki Kadobayashi. All rights reserved. 4

TCP n (IP, port) n TCP (source IP, source port, destination IP, destination port) (163.221.52.100, 1040) (203.178.136.36, 22) 1040 connection 22 2137 80 connection 163.221.52.100 203.178.136.36 Copyright(C)2011 Youki Kadobayashi. All rights reserved. 5

TCP (1) n n n (full duplex) n O L L E H OK TCP being viewed as byte-stream service O L L E H OK Copyright(C)2011 Youki Kadobayashi. All rights reserved. 6

n (ACK: Acknowledgment) Active acknowledgment n Duplicate ACK n n n (Exponential back-off) Copyright(C)2011 Youki Kadobayashi. All rights reserved. 7

ACK Sender Sent and acknowledged Sent but unacknowledged Nara Institute of Science and Technology User data arrives 10 16 Packets in transit Receiver Nara Insti Copyright(C)2011 Youki Kadobayashi. All rights reserved. 8

Piggybacking: Sender Receiver Sent and acknowledged Sent but unacknowledged Nara Institute of Science and Technology User data arrives Graduate S Packets in transit Receiver Sender Nara Insti Graduate School of Information Science User data arrives Sent and acknowledged Sent but unacknowledged Copyright(C)2011 Youki Kadobayashi. All rights reserved. 9

Duplicate ACK Sender Sent and acknowledged Sent but unacknowledged Nara Institute of Science and Technology User data arrives 10 16 16 Packet loss Packets in transit Receiver Nara Institute o Copyright(C)2011 Youki Kadobayashi. All rights reserved. 10

Questions? Copyright(C)2011 Youki Kadobayashi. All rights reserved. 11

: TCP TCP IP Header TCP Header TCP segment TCP data 16bit source port 16bit destination port 32bit sequence number 32bit acknowledgment number 4bit hlen reserved flags 16bit window size 16bit TCP checksum 16bit urgent pointer (options) 20 octets (TCP data) Copyright(C)2011 Youki Kadobayashi. All rights reserved. 12

Nagle n Q. 1byte 20byte+20byte n Nagle algorithm (RFC896) ACK RTT LAN RTT WAN Copyright(C)2011 Youki Kadobayashi. All rights reserved. 13

Q. n Nagle algorithm Copyright(C)2011 Youki Kadobayashi. All rights reserved. 14

TCP (2) n n Copyright(C)2011 Youki Kadobayashi. All rights reserved. 15

Buffered transfer Process Process Write() Read() block/unblock Write() Read() send buffer recv buffer send buffer recv buffer TCP connection OS kernel Copyright(C)2011 Youki Kadobayashi. All rights reserved. 16

(1): TCP n 3-way handshake n SYN, SYN-ACK, ACK n SYN URG ACK PSH RST SYN FIN SYN-ACK 16bit source port 16bit destination port 32bit sequence number 32bit acknowledgment number 4bit hlen reserved flags 16bit TCP checksum 16bit window size 16bit urgent pointer ACK Copyright(C)2011 Youki Kadobayashi. All rights reserved. 17

TCP : n n n n n dv# tcpdump tcp and host mint100.aist-nara.ac.jp tcpdump: listening on de0 12:16:00.146101 dv.aist-nara.ac.jp.49626 > mint100.aistnara.ac.jp.telnet: S 686685713:686685713(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 110942140 0> (DF) [tos 0x10] 12:16:00.146350 mint100.aist-nara.ac.jp.telnet > dv.aist-nara.ac.jp. 49626: S 2312441307:2312441307(0) ack 686685714 win 17520 <mss 1460> (DF) 12:16:00.146405 dv.aist-nara.ac.jp.49626 > mint100.aistnara.ac.jp.telnet:. ack 1 win 65535 (DF) [tos 0x10] Sequence number + 1 Ack Copyright(C)2011 Youki Kadobayashi. All rights reserved. 18

tcpdump n n n time src.port > dst.port flag [ from:to(nbytes) ack # ] win # opt 12:16:00.146101 dv.aist-nara.ac.jp.49626 > mint100.aistnara.ac.jp.telnet: S 686685713:686685713(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 110942140 0> (DF) [tos 0x10] 12:16:00.146350 mint100.aist-nara.ac.jp.telnet > dv.aist-nara.ac.jp. 49626: S 2312441307:2312441307(0) ack 686685714 win 17520 <mss 1460> (DF) 32bit sequence number 32bit acknowledgment number flags Copyright(C)2011 Youki Kadobayashi. All rights reserved. 19

Questions? Copyright(C)2011 Youki Kadobayashi. All rights reserved. 20

(2): TCP close FIN Ack of FIN FIN close Ack of FIN 12:16:07.086568 mint100.aist-nara.ac.jp.telnet > dv.aist-nara.ac.jp.49626: FP 713:721(8) ack 245 win 17520 (DF) [tos 0x10] 12:16:07.086738 dv.aist-nara.ac.jp.49626 > mint100.aist-nara.ac.jp.telnet:. ack 722 win 65535 (DF) [tos 0x10] 12:16:07.086998 dv.aist-nara.ac.jp.49626 > mint100.aist-nara.ac.jp.telnet: F 245:245(0) ack 722 win 65535 (DF) [tos 0x10] 12:16:07.087180 mint100.aist-nara.ac.jp.telnet > dv.aist-nara.ac.jp.49626:. ack 246 win 17519 (DF) [tos 0x10] Copyright(C)2011 Youki Kadobayashi. All rights reserved. 21

TCP n RST Abortive release Nonexistent port n n 13:48:35.948096 dv.aist-nara.ac.jp.49635 > mint100.aist-nara.ac.jp.8080: S 1342403683:1342403683(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 111497668 0> (DF) [tos 0x10] 13:48:35.948265 mint100.aist-nara.ac.jp.8080 > dv.aist-nara.ac.jp.49635: R 0:0(0) ack 1342403684 win 0 Copyright(C)2011 Youki Kadobayashi. All rights reserved. 22

(3): n TCP options in 3-way handshake n 12:16:00.146101 dv.aist-nara.ac.jp.49626 > mint100.aistnara.ac.jp.telnet: S 686685713:686685713(0) win 65535 <mss 1460,nop,wscale 1,nop,nop,timestamp 110942140 0> (DF) [tos 0x10] MSS option (RFC793, Sep 1981) Window scale option (RFC1323, May 1992) Timestamp option (RFC1323) Selective ACK option (RFC2018, Oct 1996) etc. Copyright(C)2011 Youki Kadobayashi. All rights reserved. 23

: TCP Copyright(C)2011 Youki Kadobayashi. All rights reserved. 24

Questions? Copyright(C)2011 Youki Kadobayashi. All rights reserved. 25

n n Internet TCP n TCP n : ACK, piggybacking, Nagle algorithm n Copyright(C)2011 Youki Kadobayashi. All rights reserved. 26