English
 
Help Privacy Policy Disclaimer
  Advanced SearchBrowse

Item

ITEM ACTIONSEXPORT
  Zeroing in on Port 0 Traffic in the Wild

Maghsoudlou, A., Gasser, O., & Feldmann, A. (2021). Zeroing in on Port 0 Traffic in the Wild. Retrieved from https://arxiv.org/abs/2103.13055.

Item is

Files

show Files
hide Files
:
arXiv:2103.13055.pdf (Preprint), 9KB
Name:
arXiv:2103.13055.pdf
Description:
File downloaded from arXiv at 2021-11-08 11:17
OA-Status:
Visibility:
Public
MIME-Type / Checksum:
application/xhtml+xml / [MD5]
Technical Metadata:
Copyright Date:
-
Copyright Info:
-

Locators

show

Creators

show
hide
 Creators:
Maghsoudlou, Aniss1, Author           
Gasser, Oliver1, Author           
Feldmann, Anja1, Author           
Affiliations:
1Internet Architecture, MPI for Informatics, Max Planck Society, ou_2489697              

Content

show
hide
Free keywords: Computer Science, Networking and Internet Architecture, cs.NI
 Abstract: Internet services leverage transport protocol port numbers to specify the
source and destination application layer protocols. While using port 0 is not
allowed in most transport protocols, we see a non-negligible share of traffic
using port 0 in the Internet. In this study, we dissect port 0 traffic to infer
its possible origins and causes using five complementing flow-level and
packet-level datasets. We observe 73 GB of port 0 traffic in one week of IXP
traffic, most of which we identify as an artifact of packet fragmentation. In
our packet-level datasets, most traffic is originated from a small number of
hosts and while most of the packets have no payload, a major fraction of
packets containing payload belong to the BitTorrent protocol. Moreover, we find
unique traffic patterns commonly seen in scanning. In addition to analyzing
passive traces, we also conduct an active measurement campaign to study how
different networks react to port 0 traffic. We find an unexpectedly high
response rate for TCP port 0 probes in IPv4, with very low response rates with
other protocol types. Finally, we will be running continuous port 0
measurements and providing the results to the measurement community.

Details

show
hide
Language(s): eng - English
 Dates: 2021-03-242021-03-262021
 Publication Status: Published online
 Pages: 17 p.
 Publishing info: -
 Table of Contents: -
 Rev. Type: -
 Identifiers: arXiv: 2103.13055
URI: https://arxiv.org/abs/2103.13055
BibTex Citekey: Maghsoudlou_2103.13055
 Degree: -

Event

show

Legal Case

show

Project information

show

Source

show