Abstract
The importance of IP address geolocation has increased significantly in recent years, due to its applications in business advertisements and security analysis, among others. Current approaches perform geolocation mostly on-demand and in a small-scale fashion. As soon as geolocation needs to be performed in real-time and in high-speed and large-scale networks, these approaches are not scalable anymore. To solve this problem, we propose two approaches to large-scale geolocation. Firstly, we present an exporter-based approach, which adds geolocation data to flow records in a way that is transparent to any flow collector. Secondly, we present a flow collector-based approach, which adds native geolocation to NetFlow data from any flow exporter. After presenting prototypes for both approaches, we demonstrate the applicability of large-scale geolocation by means of use cases. Our prototypes have shown to be scalable enough for deployment on the 10 Gbps Internet connection of the Masaryk University.
Original language | Undefined |
---|---|
Title of host publication | Proceedings of the 13th IFIP/IEEE International Symposium on Integrated Network Management, IM 2013 |
Place of Publication | USA |
Publisher | IEEE Communications Society |
Pages | 1015-1020 |
Number of pages | 6 |
ISBN (Print) | 978-1-4673-5229-1 |
Publication status | Published - May 2013 |
Event | 13th IFIP/IEEE International Symposium on Integrated Network Management, IM 2013 - Ghent, Belgium Duration: 27 May 2013 → 31 May 2013 Conference number: 13 http://dl.ifip.org/db/conf/im/im2013/index.html |
Publication series
Name | |
---|---|
Publisher | IEEE Communications Society |
Conference
Conference | 13th IFIP/IEEE International Symposium on Integrated Network Management, IM 2013 |
---|---|
Abbreviated title | IM 2013 |
Country/Territory | Belgium |
City | Ghent |
Period | 27/05/13 → 31/05/13 |
Internet address |
Keywords
- EWI-23547
- METIS-297751
- IR-87076