number无污染dns

DNSStatisticsCollectorDuaneWesselsTheMeasurementFactory/ISC/CAIDAwessels@measurement-factory.
comOctober1,2004OARCYear10TheMeasurementFactoryGoalsNeedacoordinated,network-wideviewintotracpatternsofcriticalDNSservices.
Wanttocollectlotsofinterestingstats/dataonbothDNSqueriesandresponses.
Shippingaroundfullpacketcapturetracesnotrealistic.
Useencryptionandauthenticationforsecurity.
OARCYear11TheMeasurementFactoryArchitectureAcollectorprocessrunsatornearaDNSserver.
Collectorcreatesanumberof1-Dor2-D"datasets"(his-tograms)ofDNSmessagecharacteristics.
CollectorspitsoutXML-encodeddatasetsdataeveryminute.
XMLlesaresecurelypushedtocentralserverforviewingandarchiving.
OARCYear12TheMeasurementFactoryArchitectureOARCYear13TheMeasurementFactoryPushingDataAroundUseX.
509servercerticatesforencryptionandauthentica-tion.
UseX.
509clientcerticatesforauthentication.
XMLlesaretar'dbeforeuploadingtoreduceSSLsessionoverheads.
OARCYear14TheMeasurementFactoryWebInterfacetoDataGraphsaregenerateddynamically.
Canchooseamong:–Servers(e.
g.
,C-,E-,F-root)–Nodes(dependsonserver)–Datasets(many)–Axisoptions(counts,rates,percentages)Somegraphshaveclickableareas(usuallythelegend)tofurtherexplorethedata.
OARCYear15TheMeasurementFactoryADemoProblemswiththeDSCsoftwareAlittletoocomplexCan'tjustmakeinstall.
UsesquiteafewPerlmodules.
X.
509certicatessuck.
(Youcanusersyncinstead.
)XMLparserusesalotofCPU.
AlittletooBSD-specicOARCYear17TheMeasurementFactoryOperationalIssuesNot"realtime"enoughforsomeoperators.
Too"realtime"forothers.
Mayviolateprivacyrestrictionsofsomeoperators.
AtleastoneoperatorsaidtheycouldnotallowacollectorontheirservertocommunicatedirectlywiththeOARCserver.
NeedanintermediaryWantdierentaccesspoliciesfordierentusers.
OARCYear18TheMeasurementFactoryMissingFeaturesMessageprocessingcurrentlystateless.
i.
e.
,cannotcountrepeatedqueriesormatchqueriestoreplies.
NoTCPsupport.
UDPfragmentsignored.
SQLDatabasestorage.
OARCYear19TheMeasurementFactoryTheEnd