Visualizing Internet Routing Changes
|
Abstract—Today's Internet provides a global data delivery service to millions of end users and routing protocols play a critical role in this service. It is important to be able to identify and diagnose any problems occurring in Internet routing. However, the Internet's sheer size makes this task difficult. One cannot easily extract out the most important or relevant routing information from the large amounts of data collected from multiple routers. To tackle this problem, we have developed Link-Rank, a tool to visualize Internet routing changes at the global scale. Link-Rank weighs links in a topological graph by the number of routes carried over each link and visually captures changes in link weights in the form of a topological graph with adjustable size. Using Link-Rank, network operators can easily observe important routing changes from massive amounts of routing data, discover otherwise unnoticed routing problems, understand the impact of topological events, and infer root causes of observed routing changes.
[1] 1450 G. Di Battista, F. Mariani, M. Patrignani, and M. Pizzonia, “BGPlay: A System for Visualizing the Interdomain Routing Evolution,” Graph Drawing, 2003.
[2] Y. Rekhter and T. Li, “A Border Gateway Protocol (BGP-4),” Request for Comment (RFC): 1771, 1995.
[3] Univ. of Oregon, “RouteViews Routing Table Archive,” http:/www.routeviews.org/, Dec. 2005.
[4] RIPE NCC, “Routing Information Service Project (RIS),” http:/www.ripe.net/, Dec. 2005.
[5] J. Madaadhain, D. Fisher, P. Smyth, S. White, and Y.-B. Boey, “Analysis and Visualization of Network Data Using JUNG,” J.Statistical Software, to appear.
[6] M. Lad, D. Massey, and L. Zhang, “Link-Rank: A Graphical Tool for Capturing BGP Routing Dynamics,” Proc. IEEE/IPIF Network Operations and Management Symp. (NOMS), 2004.
[7] T.G. Griffin and G.T. Wilfong, “An Analysis of BGP Convergence Properties,” Proc. SIGCOMM, pp. 277-288, Aug. 1999.
[8] North Am. Network Operators Group (NANOG), http:/www.nanog.org, Dec. 2005.
[9] S.T. Teoh, K.-L. Ma, and S.F. Wu, “A Visual Exploration Process for the Analysis of Internet Routing Data,” Proc. IEEE Visualization Conf., 2003.
[10] S.T. Teoh, K. Zhang, S.-M. Tseng, K.-L. Ma, and S.F. Wu, “Combining Visual and Automated Data Mining for Near-Real-Time Anomaly Detection and Analysis in BGP,” VizSEC/DMSEC '04: Proc. 2004 ACM Workshop Visualization and Data Mining for Computer Security, pp. 35-44, 2004.
[11] S.T. Teoh and K.-L. Ma, “Case Study: Interactive Visualization for Internet Security,” Proc. IEEE Visualization Conf., 2002.
[12] B. Cheswick, H. Burch, and S. Branigan, “Mapping and Visualizing the Internet,” Proc. USENIX Ann. Technical Conf., 2000.
[13] A. Carmignani, G. Di Battista, W. Didimo, F. Matera, and M. Pizzonia, “Visualization of the High Level Structure of the Internet with Hermes,” J. Graph Algorithms and Applications, pp.281-311, 2002.
[14] R.F. Erbacher, K.L. Walker, and D.A. Frincke, “Intrusion and Misuse Detection in Large-Scale Systems,” IEEE Computer Graphics and Applications, vol. 22, pp. 38-47, 2002.
[15] J. McPherson, K.-L. Ma, P. Krystosk, T. Bartoletti, and M. Christensen, “PortVis: A Tool for Port-Based Detection of Security Events,” VizSEC/DMSEC '04: Proc. 2004 ACM Workshop Visualization and Data Mining for Computer Security, 2004.
[16] K. Lakkaraju, W. Yurcik, R. Bearavolu, and A.J. Lee, “NVisionIP: An Interactive Network Flow Visualization Tool for Security,” Proc. IEEE Int'l Conf. Systems, Man, and Cybernetics, pp. 2675-2680, Oct. 2004.
[17] K. Nyarko, T. Capers, C. Scott, and K. Ladeji-Osias, “Network Intrusion Visualization with NIVA, an Intrusion Visual Analyzer with Haptic Integration,” Proc. 10th Symp. Haptic Interfaces for Virtual Environment and Teleoperator Systems (HAPTICS), pp. 277-284, Mar. 2002.
[18] X. Yin, W. Yurcik, M. Treaster, Y. Li, and K. Lakkaraju, “VisFlowConnect: NetFlow Visualizations of Link Relationships for Security Situational Awareness,” VizSEC/DMSEC '04: Proc. 2004 ACM Workshop Visualization and Data Mining for Computer Security, 2004.
[19] R. Ball, G.A. Fink, and C. North, “Home-Centric Visualization of Network Traffic for Security Administration,” VizSEC/DMSEC '04: Proc. 2004 ACM Workshop Visualization and Data Mining for Computer Security, 2004.
[20] W. Yurcik, K. Lakkaraju, J. Barlow, and J. Rosendale, “A Prototype Tool for Visual Data Mining of Network Traffic for Intrusion Detection,” Proc. ICDM Workshop Data Mining for Computer Security (DMSEC), 2003.
[21] J. Wu, Z. Morley Mao, and J. Rexford, “Finding a Needle in a Haystack: Pinpointing Significant BGP Routing Changes in an IP Network,” Proc. Second Symp. Networked Systems Design and Implementation (NSDI), 2005.
[22] A. FeldMann, O. Maennel, Z. Morley Mao, A. Berger, and B. Maggs, “Locating Internet Routing Instabilities,” Proc. SIGCOMM, Sept. 2004.
[23] D. Chang, R. Govindan, and J. Hiedemann, “The Temporal and Topological Characterestics of BGP Path Changes,” Proc. Int'l Conf. Network Protocols (ICNP), Nov. 2003.
[24] C. Labovitz, G.R. Malan, and F. Jahanian, “Internet Routing Instability,” Proc. ACM SIGCOMM '97, pp. 115-126, 1997.
[25] L. Wang, X. Zhao, D. Pei, R. Bush, D. Massey, A. Mankin, S. Wu, and L. Zhang, “Observation and Analysis of BGP Behavior under Stress,” Proc. ACM SIGCOMM Internet Measurement Workshop, 2002.
Index Terms:
Network visualization, information visualization, Internet routing, interactive graphics, data analysis, visual mining.
Citation:
Mohit Lad, Dan Massey, Lixia Zhang, "Visualizing Internet Routing Changes," IEEE Transactions on Visualization and Computer Graphics, vol. 12, no. 6, pp. 1450-1460, Nov./Dec. 2006, doi:10.1109/TVCG.2006.108
PURCHASE ARTICLE: $19
IEEE Xplore Subscribers
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb