NetFlow based system for NAT detection

Proceedings of the 2009 ACM Conference on Emerging Networking Experiments and Technologies, CoNEXT'09 - Co-located Student Workshop, CoNext Student Workshop '09

Volumn , Issue , 2009, Pages 23-24

  Krmicek, Vojtech ^a   Vykopal, Jan ^a   Krejci, Radek ^a  

^a MASARYK UNIVERSITY   (Czech Republic)

Author keywords

Detection; NetFlow; Network address translation; Network security

Indexed keywords

DETECTION APPROACH; DETECTION SYSTEM; DETECTION TECHNIQUE; FALSE NEGATIVE RATE; FALSE POSITIVE; FALSE POSITIVE RATES; LARGE NETWORKS; NETFLOW; NETFLOW DATA; NETFLOWS; NETWORK ADDRESS TRANSLATIONS; NETWORK ADMINISTRATOR; NETWORK RESOURCE; SECURITY ISSUES; WIRELESS ACCESS POINTS;

STUDENTS; WIRELESS NETWORKS;

NETWORK SECURITY;

EID: 76749140511     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1658997.1659010     Document Type: Conference Paper

References (5)

1. S. M. Bellovin. A technique for counting natted hosts. In IMW '02: Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment, pages 267-272, New York, NY, USA, 2002. ACM.
2. Cisco Systems. Cisco IOS NetFlow. http://www.cisco.com/go/netflow, 2009.
3. INVEA-TECH. Standard FlowMon Probe. http://www.invea-tech.com/, 2009.
4. Peter Phaal. Detecting NAT Devices using sFlow, http://www.sflow.org/ detectNAT/, 2003.
5. J. Zhang and A. W. Moore. Traffic trace artifacts due to monitoring via port mirroring. In Proceedings of the Fifth IEEE/IFIP E2EMON, pages 1-8, 2007.