SlideShare a Scribd company logo
1 of 24
Download to read offline
DNS Measurement
Activity on ITB 2010
    Affan Basalamah
Outline
• Overview
• DITL 2010 by OARC
• Gulliver Project
Overview
• ITB is participating in Internet measurement
  activity, especially DNS
• Participation in global Internet community
  for international exposure
DNS @ ITB
• 3 Production Servers
  – ISC BIND 9.6.2
  – DNSSEC not enabled
  – Anycast distribution
• 1 Experimental Server
  – NLnet Unbound 1.4.4
  – DNSSEC (validation) enabled
  – ISC DLV (DNSSEC Lookaside Validation)
Monitoring on ITB side
• Using Munin plugins for Bind & Unbound
  – http://munin-monitoring.org/
Sample Graphics & Data
DITL 2010
DITL 2010
• A Day In The Life of the Internet
  – https://www.dns-oarc.net
• ITB is participating in DITL 2010 in April
• Conducted by Dian Dwi Nugraha (DNS
  Admin)
What it is?
• A large-scale data collection project undertaken
  by CAIDA and OARC (Operations, Analysis, and
  Research Center) every year since 2006
• Participants :
  –   DNS Root Servers
  –   TLD Servers
  –   AS112 nodes
  –   “client-side” iterative/caching resolvers
• Tool : dnscap/tcpdump
Objectives
• Measure Internet growth
  – IPv4 and IPv6 growth
  – Secure/insecure DNS growth
• Uncover possible DNS anomalies in process
Data taken
•   IPv4/IPv6 source and destination query
•   qps (queries per second)
•   secure/insecure (DNSSEC)
•   RRsets (A,AAAA,MX,NS,...)
Toolkit
• Follow procedures in
https://www.dns-oarc.net/ditl/2010
• Toolkit to send data to OARC:
https://www.dns-oarc.net/files/ditl-2010/ditl-
  tools-20100406195635.tar.gz
Raw Data Snapshot
• http://ditl.dns-oarc.net/ditl_20100413_raw/coverage.png
Status
• Collected data in http://ditl.dns-oarc.net/
• Some data collected from ITB:
http://ditl.dns-oarc.net/ditl_20100413_raw/provider-
  reports/itb-ac-id-files.html
• Deeper measurement data can be obtained
  to OARC
GULLIVER PROJECT
What is it?
• Active Measurement Framework
• Probes DNS reachability from worldwide locations
   – RTT, Query Timeout
   – Node ID (hostname.bind or server.id)
• 30 Probe Locations as of Feb. 2010
   – Including South/East Asia and Africa countries
• Targets
   – Root, ccTLD, in‐addr.arpa DNS servers
• http://gulliver.wide.ad.jp/
Gulliver Project in ITB
• Installed by Dikshie in 31st May
• The measurement box:
  http://www.seil.jp/seilseries/seil/seilplus.php
Gulliver Box @ ITB
Gulliver Box @ ITB
Measurement Results
• RTT reachability of root DNS server from ITB
  as seen in http://gulliver.wide.ad.jp/
Status
• ITB box has send data to Gulliver
• ITB hasn’t received Member Page
  username/password from DR. Yuki Sekiya
SUMMARY
Summary
• ITB is ready to participate in Internet
  measurement activity
• Participation in global Internet community
  for international exposure
• Need to conduct thorough analysis from data
Thanks!

More Related Content

What's hot

Insider threats webinar 01.28.15
Insider threats webinar 01.28.15Insider threats webinar 01.28.15
Insider threats webinar 01.28.15
Lancope, Inc.
 
Network Forensics - Your Only Choice at 10G
Network Forensics - Your Only Choice at 10GNetwork Forensics - Your Only Choice at 10G
Network Forensics - Your Only Choice at 10G
Savvius, Inc
 
Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...
Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...
Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...
Erin Sweeney
 

What's hot (20)

Offensive cyber security engineer updated
Offensive cyber security engineer updatedOffensive cyber security engineer updated
Offensive cyber security engineer updated
 
Combating Insider Threats – Protecting Your Agency from the Inside Out
Combating Insider Threats – Protecting Your Agency from the Inside OutCombating Insider Threats – Protecting Your Agency from the Inside Out
Combating Insider Threats – Protecting Your Agency from the Inside Out
 
Using Your Network as a Sensor for Enhanced Visibility and Security
Using Your Network as a Sensor for Enhanced Visibility and Security Using Your Network as a Sensor for Enhanced Visibility and Security
Using Your Network as a Sensor for Enhanced Visibility and Security
 
Insider threats webinar 01.28.15
Insider threats webinar 01.28.15Insider threats webinar 01.28.15
Insider threats webinar 01.28.15
 
Enterprise Forensics 101
Enterprise Forensics 101Enterprise Forensics 101
Enterprise Forensics 101
 
Extending Network Visibility: Down to the Endpoint
Extending Network Visibility: Down to the EndpointExtending Network Visibility: Down to the Endpoint
Extending Network Visibility: Down to the Endpoint
 
Tools Of The Hardware Hacking Trade Final
Tools Of The Hardware Hacking Trade FinalTools Of The Hardware Hacking Trade Final
Tools Of The Hardware Hacking Trade Final
 
No Easy Breach DerbyCon 2016
No Easy Breach DerbyCon 2016No Easy Breach DerbyCon 2016
No Easy Breach DerbyCon 2016
 
Cisco CSIRT Case Study: Forensic Investigations with NetFlow
Cisco CSIRT Case Study: Forensic Investigations with NetFlowCisco CSIRT Case Study: Forensic Investigations with NetFlow
Cisco CSIRT Case Study: Forensic Investigations with NetFlow
 
(Sacon) Sumanth Naropanth - IoT network & ecosystem security attacks & secur...
(Sacon) Sumanth Naropanth  - IoT network & ecosystem security attacks & secur...(Sacon) Sumanth Naropanth  - IoT network & ecosystem security attacks & secur...
(Sacon) Sumanth Naropanth - IoT network & ecosystem security attacks & secur...
 
Security precognition chaos engineering in incident response
Security precognition  chaos engineering in incident responseSecurity precognition  chaos engineering in incident response
Security precognition chaos engineering in incident response
 
Defense in Depth: Implementing a Layered Privileged Password Security Strategy
Defense in Depth: Implementing a Layered Privileged Password Security Strategy Defense in Depth: Implementing a Layered Privileged Password Security Strategy
Defense in Depth: Implementing a Layered Privileged Password Security Strategy
 
Breaking and entering how and why dhs conducts penetration tests
Breaking and entering  how and why dhs conducts penetration testsBreaking and entering  how and why dhs conducts penetration tests
Breaking and entering how and why dhs conducts penetration tests
 
Open Science Grid security-atlas-t2 Bob Cowles
Open Science Grid security-atlas-t2 Bob CowlesOpen Science Grid security-atlas-t2 Bob Cowles
Open Science Grid security-atlas-t2 Bob Cowles
 
Network Forensics - Your Only Choice at 10G
Network Forensics - Your Only Choice at 10GNetwork Forensics - Your Only Choice at 10G
Network Forensics - Your Only Choice at 10G
 
Open Security Operations Center - OpenSOC
Open Security Operations Center - OpenSOCOpen Security Operations Center - OpenSOC
Open Security Operations Center - OpenSOC
 
Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...
Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...
Mission Possible: Detect and Prevent CyberAttacks with Splunk and Palo Alto N...
 
DHS ICS Security Presentation
DHS ICS Security PresentationDHS ICS Security Presentation
DHS ICS Security Presentation
 
Man in the Cloud Attacks
Man in the Cloud AttacksMan in the Cloud Attacks
Man in the Cloud Attacks
 
Ccna sec 01
Ccna sec 01Ccna sec 01
Ccna sec 01
 

Viewers also liked

Viewers also liked (12)

IPv6 Development in ITB 2013
IPv6 Development in ITB 2013IPv6 Development in ITB 2013
IPv6 Development in ITB 2013
 
Indonesia Ren Oct 2009
Indonesia Ren   Oct 2009Indonesia Ren   Oct 2009
Indonesia Ren Oct 2009
 
Dukungan Infrastruktur IT Untuk E Learning Corporate 2009
Dukungan Infrastruktur IT Untuk E Learning Corporate   2009Dukungan Infrastruktur IT Untuk E Learning Corporate   2009
Dukungan Infrastruktur IT Untuk E Learning Corporate 2009
 
What's next for Opisboy - IPv6, FreeBSD and Software Defined Network
What's next for Opisboy - IPv6, FreeBSD and Software Defined NetworkWhat's next for Opisboy - IPv6, FreeBSD and Software Defined Network
What's next for Opisboy - IPv6, FreeBSD and Software Defined Network
 
10 Tahun IPv6 di ITB
10 Tahun IPv6 di ITB10 Tahun IPv6 di ITB
10 Tahun IPv6 di ITB
 
Indonesia IPv6 Update - APAN Hanoi 2010
Indonesia IPv6 Update - APAN Hanoi 2010Indonesia IPv6 Update - APAN Hanoi 2010
Indonesia IPv6 Update - APAN Hanoi 2010
 
World IPv6 Day in indonesia
World IPv6 Day in indonesiaWorld IPv6 Day in indonesia
World IPv6 Day in indonesia
 
Update implementasi IPv6 di ITB 2010
Update implementasi IPv6 di ITB 2010Update implementasi IPv6 di ITB 2010
Update implementasi IPv6 di ITB 2010
 
Next Generation Campus Network - ID-NOG 2014
Next Generation Campus Network - ID-NOG 2014Next Generation Campus Network - ID-NOG 2014
Next Generation Campus Network - ID-NOG 2014
 
23 - IDNOG03 - Affan Basalamah (ITB) Achmad Basuki (UNIBRAW) - Overview of In...
23 - IDNOG03 - Affan Basalamah (ITB) Achmad Basuki (UNIBRAW) - Overview of In...23 - IDNOG03 - Affan Basalamah (ITB) Achmad Basuki (UNIBRAW) - Overview of In...
23 - IDNOG03 - Affan Basalamah (ITB) Achmad Basuki (UNIBRAW) - Overview of In...
 
12 - IDNOG03 - Hammam Riza (BPPT) Welcoming Speech
12 - IDNOG03 - Hammam Riza  (BPPT) Welcoming Speech12 - IDNOG03 - Hammam Riza  (BPPT) Welcoming Speech
12 - IDNOG03 - Hammam Riza (BPPT) Welcoming Speech
 
1 - SDNRG ITB, 10 minutes intro by Affan Basalamah
 1 - SDNRG ITB, 10 minutes intro by Affan Basalamah 1 - SDNRG ITB, 10 minutes intro by Affan Basalamah
1 - SDNRG ITB, 10 minutes intro by Affan Basalamah
 

Similar to DNS Measurement Activity on ITB 2010

Similar to DNS Measurement Activity on ITB 2010 (20)

Partner webinar featuring CatDV
Partner webinar featuring CatDVPartner webinar featuring CatDV
Partner webinar featuring CatDV
 
Ben Evans SPEDDEXES 2014
Ben Evans SPEDDEXES 2014Ben Evans SPEDDEXES 2014
Ben Evans SPEDDEXES 2014
 
IPv6 Deployment: Why and Why not? - HostingCon 2013
IPv6 Deployment: Why and Why not? - HostingCon 2013IPv6 Deployment: Why and Why not? - HostingCon 2013
IPv6 Deployment: Why and Why not? - HostingCon 2013
 
12.00 - Dr. Tim Chown - University of Southampton
12.00 - Dr. Tim Chown - University of Southampton12.00 - Dr. Tim Chown - University of Southampton
12.00 - Dr. Tim Chown - University of Southampton
 
Efficient & effective data management for research projects : ILRI's Data Ma...
Efficient & effective  data management for research projects : ILRI's Data Ma...Efficient & effective  data management for research projects : ILRI's Data Ma...
Efficient & effective data management for research projects : ILRI's Data Ma...
 
ION Bangladesh - IETF Update
ION Bangladesh - IETF UpdateION Bangladesh - IETF Update
ION Bangladesh - IETF Update
 
SCAPE - Scalable Preservation Environments
SCAPE - Scalable Preservation EnvironmentsSCAPE - Scalable Preservation Environments
SCAPE - Scalable Preservation Environments
 
IETF Update: Making the Internet Work Better
IETF Update: Making the Internet Work BetterIETF Update: Making the Internet Work Better
IETF Update: Making the Internet Work Better
 
Rakuten’s Journey with Splunk - Evolution of Splunk as a Service
Rakuten’s Journey with Splunk - Evolution of Splunk as a ServiceRakuten’s Journey with Splunk - Evolution of Splunk as a Service
Rakuten’s Journey with Splunk - Evolution of Splunk as a Service
 
ION Malta - IETF Update
ION Malta - IETF UpdateION Malta - IETF Update
ION Malta - IETF Update
 
GEO Analytics Canada Overview April 2020
GEO Analytics Canada Overview April 2020GEO Analytics Canada Overview April 2020
GEO Analytics Canada Overview April 2020
 
Tech 2 Tech IPv6 presentation
Tech 2 Tech IPv6 presentationTech 2 Tech IPv6 presentation
Tech 2 Tech IPv6 presentation
 
StarlingX - A Platform for the Distributed Edge | Ildiko Vancsa
StarlingX - A Platform for the Distributed Edge | Ildiko VancsaStarlingX - A Platform for the Distributed Edge | Ildiko Vancsa
StarlingX - A Platform for the Distributed Edge | Ildiko Vancsa
 
Largest Active Measurements Network: RIPE Atlas
Largest Active Measurements Network: RIPE AtlasLargest Active Measurements Network: RIPE Atlas
Largest Active Measurements Network: RIPE Atlas
 
OpenStack Marketing Meeting Oct 2
OpenStack Marketing Meeting Oct 2OpenStack Marketing Meeting Oct 2
OpenStack Marketing Meeting Oct 2
 
ION Islamabad - What's Happening at the IETF?
ION Islamabad - What's Happening at the IETF?ION Islamabad - What's Happening at the IETF?
ION Islamabad - What's Happening at the IETF?
 
IBM Internet-of-Things architecture and capabilities
IBM Internet-of-Things architecture and capabilitiesIBM Internet-of-Things architecture and capabilities
IBM Internet-of-Things architecture and capabilities
 
Big data in the energy sector
Big data in the energy sectorBig data in the energy sector
Big data in the energy sector
 
JPNIC Update
JPNIC UpdateJPNIC Update
JPNIC Update
 
Outsourcing SDWorx Mainframe environment - Lily Craps
Outsourcing SDWorx Mainframe environment - Lily CrapsOutsourcing SDWorx Mainframe environment - Lily Craps
Outsourcing SDWorx Mainframe environment - Lily Craps
 

Recently uploaded

IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI Solutions
Enterprise Knowledge
 

Recently uploaded (20)

08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
08448380779 Call Girls In Diplomatic Enclave Women Seeking Men
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?What Are The Drone Anti-jamming Systems Technology?
What Are The Drone Anti-jamming Systems Technology?
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
04-2024-HHUG-Sales-and-Marketing-Alignment.pptx
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdf
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men08448380779 Call Girls In Greater Kailash - I Women Seeking Men
08448380779 Call Girls In Greater Kailash - I Women Seeking Men
 
IAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI SolutionsIAC 2024 - IA Fast Track to Search Focused AI Solutions
IAC 2024 - IA Fast Track to Search Focused AI Solutions
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdf
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreter
 

DNS Measurement Activity on ITB 2010

  • 1. DNS Measurement Activity on ITB 2010 Affan Basalamah
  • 2. Outline • Overview • DITL 2010 by OARC • Gulliver Project
  • 3. Overview • ITB is participating in Internet measurement activity, especially DNS • Participation in global Internet community for international exposure
  • 4. DNS @ ITB • 3 Production Servers – ISC BIND 9.6.2 – DNSSEC not enabled – Anycast distribution • 1 Experimental Server – NLnet Unbound 1.4.4 – DNSSEC (validation) enabled – ISC DLV (DNSSEC Lookaside Validation)
  • 5. Monitoring on ITB side • Using Munin plugins for Bind & Unbound – http://munin-monitoring.org/
  • 8. DITL 2010 • A Day In The Life of the Internet – https://www.dns-oarc.net • ITB is participating in DITL 2010 in April • Conducted by Dian Dwi Nugraha (DNS Admin)
  • 9. What it is? • A large-scale data collection project undertaken by CAIDA and OARC (Operations, Analysis, and Research Center) every year since 2006 • Participants : – DNS Root Servers – TLD Servers – AS112 nodes – “client-side” iterative/caching resolvers • Tool : dnscap/tcpdump
  • 10. Objectives • Measure Internet growth – IPv4 and IPv6 growth – Secure/insecure DNS growth • Uncover possible DNS anomalies in process
  • 11. Data taken • IPv4/IPv6 source and destination query • qps (queries per second) • secure/insecure (DNSSEC) • RRsets (A,AAAA,MX,NS,...)
  • 12. Toolkit • Follow procedures in https://www.dns-oarc.net/ditl/2010 • Toolkit to send data to OARC: https://www.dns-oarc.net/files/ditl-2010/ditl- tools-20100406195635.tar.gz
  • 13. Raw Data Snapshot • http://ditl.dns-oarc.net/ditl_20100413_raw/coverage.png
  • 14. Status • Collected data in http://ditl.dns-oarc.net/ • Some data collected from ITB: http://ditl.dns-oarc.net/ditl_20100413_raw/provider- reports/itb-ac-id-files.html • Deeper measurement data can be obtained to OARC
  • 16. What is it? • Active Measurement Framework • Probes DNS reachability from worldwide locations – RTT, Query Timeout – Node ID (hostname.bind or server.id) • 30 Probe Locations as of Feb. 2010 – Including South/East Asia and Africa countries • Targets – Root, ccTLD, in‐addr.arpa DNS servers • http://gulliver.wide.ad.jp/
  • 17. Gulliver Project in ITB • Installed by Dikshie in 31st May • The measurement box: http://www.seil.jp/seilseries/seil/seilplus.php
  • 20. Measurement Results • RTT reachability of root DNS server from ITB as seen in http://gulliver.wide.ad.jp/
  • 21. Status • ITB box has send data to Gulliver • ITB hasn’t received Member Page username/password from DR. Yuki Sekiya
  • 23. Summary • ITB is ready to participate in Internet measurement activity • Participation in global Internet community for international exposure • Need to conduct thorough analysis from data