qertstrategic.blogg.se

Figure 1 - Overview of the LG-based IP geolocation approach.įigure 2 compares economy-level paths inferred by MaxMind and IP2Location (top part) to the path inferred by the LG-based approach (bottom part). We proceed to select another LG, if the previous one proved far away from the IP under test. We consider the IP in the same economy as the LG if the traceroute confirms a topological proximity (for example, within a few router level hops and a latency of sub-20ms). Our current approach relies on publicly accessible looking glasses (LG) as VPs. A VP is judged suitable if it lies within the IP holder’s AS and in close proximity to the initially guessed location. Using existing methods (whois service, DNS names and geolocation approaches), we found the IP space owner and the possible location of the IP address, which we further used to choose a vantage point (VP) from which to traceroute to the target IP. We propose a novel active measurement-based approach, which hinges on a simple idea: a location of a route can be greatly narrowed down if it is probed from within its AS. This, in turn, has security implications as it indicates that, depending on popular geolocation databases, end-hosts might be unaware of the economies their Internet traffic is traversing - something we found among our collected paths, with a high percentage of both IPv4 and IPv6 paths appearing to be detoured from Europe through the United State.įurther, we found about 77% of IPv4 and 65% of IPv6 economy-level mappings miss at least one economy along the path and that both IP paths within the same continent (short-haul paths) as well as between different continents appear to miss economies (long-haul paths). IP geolocation disagreements can falsely indicate path tromboning or path detours, as well as miss economies along the IP paths.