COTraSE: Connection Oriented Traceback in Switched Ethernet

Layer 2 traceback is an important component of end-toend packet traceback. Whilst IP traceback identifies the origin network, L2 traceback extends the process to provide a more fine-grained result. Other known proposals have exposed the difficulties of L2 traceback in switched ethernet. We build on our earlier work and improve in a number of dimensions. Memory requirements are decreased by maintaining ‘connection records’ rather than logging all frames. Our switchport resolution algorithm provides error detection by correlating MAC-table values from two switches. Furthermore, our solution takes stock of potential transformations to packet data as this leaves the local network.

• Type: Conference
• Year: 2008
• Where: IEEEIAS
• Authors: Marios S. Andreou, Aad P. A. van Moorsel
• Keywords: End-toend Packet Traceback, IEEEIAS 2008, Information Technology, Other Known Proposals, Switchport Resolution Algorithm