In this paper, we show that utilizing multiple protocols offers a unique opportunity to improve IP alias resolution and dual-stack inference substantially. Our key observation is that prevalent protocols, e.g., SSH and BGP, reply to unsolicited requests with a set of values that can be combined to form a unique device identifier. More importantly, this is possible by just completing the TCP hand-shake. Our empirical study shows that utilizing readily available scans and our active measurements can double the discovered IPv4 alias sets and more than 30x the dual-stack sets compared to the state-of-the-art techniques. We provide insights into our method's accuracy and performance compared to popular techniques.
翻译:在本文中,我们展示了利用多种协议为大幅提升IP别名解析和双栈推断提供了独特机遇。我们的关键观察在于,主流协议(例如SSH和BGP)会以一组可组合形成唯一设备标识符的值来回应未经请求的请求。更重要的是,仅需完成TCP三次握手即可实现这一过程。实证研究表明,与现有最优技术相比,利用现成的扫描数据和我们的主动测量方法,可使发现的IPv4别名集数量翻倍,双栈集数量提升超过30倍。我们提供了关于该方法相较于主流技术的准确性与性能的深入分析。