RFC 5388
Information Model and XML Data Model for Traceroute Measurements
RFC 5388: Information Model and XML Data Model for Traceroute Measurements ๐ฆ
Okay bestie, here's the header info, so you know who made this and what kind of doc it is ๐
- RFC number: 5388
- Series: Network Working Group
- Category: Standards Track
- Date: December 2008
- Authors: S. Niccolini, S. Tartarelli, J. Quittek, and T. Dietz (all from NEC), plus M. Swany (from UDel)
- Obsoletes/Updates: The title block doesn't name any RFC that this one obsoletes or updates.
Status of This Memo ๐
So this doc is an Internet standards track protocol for the Internet community, and it's asking for discussion and suggestions for improvements ๐ซถ If you want the official standardization state and status, check the current edition of "Internet Official Protocol Standards" (STD 1). Distribution of this memo is unlimited, so go share it ๐ธ
Copyright Notice ๐
Copyright (c) 2008 IETF Trust and the persons identified as the document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info), as they stand on the date this document was published. Read those carefully, because they spell out your rights and restrictions for this doc ๐
Abstract โจ
Okay, the big picture: this doc gives us a standard way to store the configuration and the results of traceroute measurements ๐ฆ It starts by explaining the terminology and how the traceroute tool works. Then it defines a common information model that splits the information elements into two semantically separate groups, configuration elements and results elements. There's also an extra element that ties the configuration and results together with a common unique identifier ๐ Finally, based on that information model, it defines an XML-based data model for storing traceroute results. Iconic ๐
Table of Contents ๐
1. Introduction ....................................................3
2. Terminology Used in This Document ...............................3
3. The Traceroute Tool and Its Operations ..........................4
4. Results of Traceroute Measurements ..............................5
5. Information Model for Traceroute Measurements ...................5
5.1. Data Types .................................................6
5.2. Information Elements .......................................7
5.2.1. Relationships between the Information Elements ......7
5.2.2. Configuration Information Elements .................12
5.2.3. Results Information Elements .......................17
5.2.4. Information Element Correlating
Configuration and Results ..........................21
5.2.5. Information Elements to Compare Traceroute
Measurement Results ................................22
6. Data Model for Storing Traceroute Measurements .................23
7. XML Schema for Traceroute Measurements .........................24
8. Security Considerations ........................................38
8.1. Conducting Traceroute Measurements ........................39
8.2. Securing Traceroute Measurement Information ...............39
9. IANA Considerations ............................................40
10. References ....................................................40
10.1. Normative References .....................................40
10.2. Informative References ...................................41
Appendix A. Traceroute Default Configuration Parameters ...........43
A.1. Alternative Traceroute Implementations ....................46
Appendix B. Known Problems with Traceroute ........................47
B.1. Compatibility between Traceroute Measurement Results
and IPPM Metrics ..........................................47
Appendix C. Differences to DISMAN-TRACEROUTE-MIB ..................47
C.1. Scope .....................................................48
C.2. Naming ....................................................49
C.3. Semantics .................................................49
C.4. Additional Information Elements ...........................50
Appendix D. Traceroute Examples with XML Representation ...........50
1. Introduction โจ
Traceroutes are everywhere in measurement work, whether they're running on their own or giving path info to help other measurement projects ๐บ๏ธ That's exactly why we need a standard way to store the configuration and results of traceroute measurements. The standard IPPM metrics for delay, connectivity, and losses don't apply to what traceroute returns, so if you want to compare traceroute results, the only option is to save the operating system details along with the name and version of the traceroute tool you used ๐ค This doc sets up a standard way to store results so they can be compared, and it does that with an XML schema ๐
Here's the roadmap. Section 2 covers terminology. Section 3 explains the traceroute tool. Section 4 covers the results as they show up on the screen of the host where the tool was launched. Sections 5 and 6 cover the information model and the data model for storing configuration and results. Section 7 has the XML schema, which you can use as a template for storing and exchanging traceroute measurement info. The doc wraps up with security considerations in Section 8 and IANA considerations in Section 9 ๐
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119].
2. Terminology Used in This Document ๐
Here's the terminology the doc uses, so everyone's on the same page ๐
- traceroute tool: a software tool for network diagnostic that behaves as described in Section 3;
- traceroute measurement: an instance of the traceroute tool launched, with specific configuration parameters (traceroute measurement configuration parameters), from a specific host (initiator of the traceroute measurement) giving as output specific traceroute measurement results;
- traceroute probe: one of many IP packets sent out by the traceroute tool during a traceroute measurement;
- traceroute measurement configuration parameters: the configuration parameters of a traceroute measurement;
- traceroute measurement results: the results of a traceroute measurement;
- traceroute measurement information: both the results and the configuration parameters of a traceroute measurement;
- traceroute measurement path: a sequence of hosts transited in order by traceroute probes during a traceroute measurement.
3. The Traceroute Tool and Its Operations ๐ฅ
Okay so traceroute is a network diagnostic tool that figures out the hop-by-hop path from a source to a destination, plus the Round Trip Time (RTT) from the source to each hop ๐ค๏ธ It's how you can find stuff like hop counts and delays along the path between the initiator of the measurement and other hosts.
Usually, the traceroute tool tries to find the path to a destination by sending UDP probes with specific time-to-live (TTL) values in the IP packet header. The goal is to get an ICMP TIME_EXCEEDED response back from each gateway along the way to some host ๐ช
Here's how it plays out. The first set of probes has TTL equal to 1 and gets sent from the host that starts the measurement. (Some implementations let you set the initial TTL to a value "n" that's different from 1, so the first "n-1" hops get skipped and the first hop that actually gets traced is the "n-th" one in the path ๐) When the first hop receives a probe, it lowers the TTL value by one or more. When the TTL hits zero, the host throws out the probe and usually sends back an ICMP message with a TIME_EXCEEDED value. From the header of that ICMP message, the traceroute tool can work out the IP address of the first hop and figure out the RTT between the initiating host and that first hop. The next hops get found the same way, and the tool makes sure to raise the TTL of the probes by one each step. The TTL keeps going up until either an ICMP PORT_UNREACHABLE message comes back, which means the destination host was reached, or the maximum configured number of hops gets hit ๐ฏ
Some implementations use ICMP Echoes instead of UDP datagrams. The catch is that many routers don't send ICMP messages about ICMP messages, so no ICMP TIME_EXCEEDED comes back for an ICMP Echo ๐ญ
So this document recommends basing implementations on UDP datagrams. Considerations on TCP-based implementations of the traceroute tool are in Appendix A.1 ๐ฆ
4. Results of Traceroute Measurements ๐
Here's the list of information fields that every traceroute tool implementation considered provides as results. The order they're listed in doesn't matter, and different implementations change it up anyway ๐โโ๏ธ For each hop, the following info is reported:
- the hop index;
- the host symbolic address, provided that at least one of the probes received a response, the symbolic address could be resolved at the corresponding host, and the option to display only numerical addresses was not set;
- the host IP address, provided that at least one of the probes received a response;
- the RTT for each response to a probe.
Depending on the implementation, the output might show extra info, like MPLS-related details ๐
Sometimes probes don't get a response before the configured timeout. For example, a firewall might filter the probe out ๐งฑ When that happens, the screen shows an "*" where the RTT should be. The information model handles this with a string whose value is "RoundTripTimeNotAvailable", which means either the probe was lost because of a timeout or it wasn't possible to send the probe at all ๐
It may also happen that some implementations print the same line multiple times when a router decreases the TTL by more than one, which makes it look like there are extra hops. The information model isn't affected by this, because each line gets handled separately. It's up to the applications that handle the XML file to decide how to deal with it ๐ง Last thing: for delays below 1 ms, some implementations report 0 ms (UNIX and LINUX do this, for example), while WINDOWS reports "< 1 ms" โก
5. Information Model for Traceroute Measurements โจ
okay so the information model is basically built out of information elements ๐งฉ, and every single one gets described with the same template ๐ . here's the template:
name: a unique, meaningful name for the element. the preferred style is mixed case for compound names, starting with a lowercase letter, likesourceIpAddress๐description: what the element actually means ๐ญdataType: one of the types from Section 5.1 of this document, or from an extension of the information model. the type space for attributes is constrained on purpose so it's easier to implement ๐ ๏ธunits: if the element measures something, the units tell you what that thing is ๐
5.1. Data Types
this section lists the basic valid data types for the information model ๐
string: a finite-length string of valid characters from the Unicode character set. Unicode lets you use ASCII plus tons of international character sets ๐. strings are expected to be encoded in UTF-8, which matches US-ASCII exactly for ASCII characters and also handles the multi-byte Unicode characters ๐ซถstring255: same asstring, just capped at 255 characters ๐inetAddressType: a type of Internet address. the allowed values are imported from [RFC4001] (where the intent was to import only some of them). on top of those, the extra allowed values areasnumberandnoSpecification๐ฆinetAddress: a generic Internet address ๐. the allowed values are imported from [RFC4001], and the imported values areunknown,ipv4,ipv6, anddns. non-global IPv4/IPv6 addresses (likeipv4zandipv6z) are excluded ๐ โโ๏ธ. there's one extra allowed value too: an AS number, written as the actual number plus an indication of how the IP-address-to-AS-number mapping was done.unknownis used when the address doesn't match any of the formats defined ๐คทโโ๏ธipASNumberMappingType: the type that describes how an IP-to-AS-number mapping was obtained ๐บ๏ธ. the allowed values arebgptables,routingregistries,nslookup,others, orunknownโจboolean: a boolean value according to the XML standards [W3C.REC-xmlschema-2-20041028] ๐unsignedInt: a value in the range (0..4294967295) ๐ขunsignedShort: a value in the range (0..65535) ๐ขunsignedByte: a value in the range (0..255) ๐ขu8nonzero: a value in the range (1..255). it's basically a byte but zero is not allowed ๐probesType: says which protocol was used for the traceroute probes ๐ฐ๏ธ. the values defined in this document areUDP,TCP, andICMP๐ธoperationResponseStatus: used to report the result of an operation ๐ฌ. the allowed values are imported from [RFC4560] ๐dateTime: a date-time specification according to the XML standards [W3C.REC-xmlschema-2-20041028], but restricted to the values defined in [RFC3339] ๐ฐ๏ธ
5.2. Information Elements
this section covers the elements that store a traceroute measurement ๐ฆ. they're split into two groups based on their meaning: configuration and results ๐. to connect configuration and results through a shared unique identifier, there's one extra element that belongs to both groups. it's the glue ๐ซถ
5.2.1. Relationships between the Information Elements
every traceroute measurement is represented by an instance of the traceRoute element ๐. this class gives a standardized way to represent traceroute measurement data. the traceRoute element can be made up of the following (depending on what kind of measurement it is) ๐ง:
- 1 optional
RequestMetadataelement; - 0..2147483647
Measurementelements.
each Measurement element contains:
- 1 optional
MeasurementMetadataelement; - 0..2147483647
MeasurementResultelements.
the RequestMetadata element is for specifying the parameters of a traceroute measurement that should be run at one or more nodes by one or more traceroute implementations ๐. depending on what a traceroute implementation can do, not every requested parameter can necessarily be applied ๐คทโโ๏ธ. the parameters that were actually applied to a specific measurement are recorded in a MeasurementMetadata element ๐.
the RequestMetadata element is a sequence that contains:
- 1
TestNameelement; - 1 optional
ToolVersionelement; - 1 optional
ToolNameelement; - 1
CtlTargetAddresselement; - 1 optional
CtlBypassRouteTableelement; - 1 optional
CtlProbeDataSizeelement; - 1 optional
CtlTimeOutelement; - 1 optional
CtlProbesPerHopelement; - 1 optional
CtlPortelement; - 1 optional
CtlMaxTtlelement; - 1 optional
CtlDSFieldelement; - 1 optional
CtlSourceAddresselement; - 1 optional
CtlIfIndexelement; - 1 optional
CtlMiscOptionselement; - 1 optional
CtlMaxFailureselement; - 1 optional
CtlDontFragmentelement; - 1 optional
CtlInitialTtlelement; - 1 optional
CtlDescrelement; - 1
CtlTypeelement.
if the RequestMetadata element is left out of an XML file, it means all the requested configuration parameters were used, and the MeasurementMetadata element lists them in detail ๐.
the MeasurementMetadata element is a sequence that contains:
- 1
TestNameelement; - 1
OSNameelement; - 1
OSVersionelement; - 1
ToolVersionelement; - 1
ToolNameelement; - 1
CtlTargetAddressTypeelement; - 1
CtlTargetAddresselement; - 1
CtlBypassRouteTableelement; - 1
CtlProbeDataSizeelement; - 1
CtlTimeOutelement; - 1
CtlProbesPerHopelement; - 1
CtlPortelement; - 1
CtlMaxTtlelement; - 1
CtlDSFieldelement; - 1
CtlSourceAddressTypeelement; - 1
CtlSourceAddresselement; - 1
CtlIfIndexelement; - 1 optional
CtlMiscOptionselement; - 1
CtlMaxFailureselement; - 1
CtlDontFragmentelement; - 1
CtlInitialTtlelement; - 1 optional
CtlDescrelement; - 1
CtlTypeelement.
configuration info can describe traceroute measurements that have already happened (MeasurementMetadata elements), but it can also describe the configuration you want used when you request a new measurement (RequestMetadata element) ๐ฎ. semantically those are super different, even though the individual elements look alike ๐. because they're so similar, RequestMetadata and MeasurementMetadata are both represented by the same type in the XML schema ๐ซ . every element that's missing from RequestMetadata, or is optional there but mandatory in MeasurementMetadata, must be specified as an empty element. an empty element means "use the default value" ๐. CtlType could have been optional in RequestMetadata, but XML schemas can't specify default values for complex types, so it's mandatory in RequestMetadata instead ๐.
the MeasurementResult element is a sequence that contains:
- 1
TestNameelement; - 1
ResultsStartDateAndTimeelement; - 1
ResultsIpTgtAddrTypeelement; - 1
ResultsIpTgtAddrelement; - 1
ProbeResultselements; - 1
ResultsEndDateAndTimeelement.
it's also important to say that each ProbeResults element is a sequence that contains:
- 1..255
hopelements.
each hop element is a sequence that contains:
- 1..10
probeelements; - 1 optional
HopRawOutputDataelement.
each probe element contains:
- 1
HopAddrTypeelement; - 1
HopAddrelement; - 1 optional
HopNameelement; - 0..255 optional
MPLSLabelStackEntryelements; - 1
ProbedRoundTripTimeelement; - 1
ResponseStatuselement; - 1
Timeelement.
the different counts of the three basic elements in an XML file are meant for different scopes ๐ง:
- a file with only 1
RequestMetadataelement holds the configuration parameters of a traceroute measurement ๐. you can use it to hand the same configuration out to multiple nodes that are supposed to run the same measurement ๐ค; - a file with 1
Measurementelement containing 1MeasurementMetadataand 1MeasurementResultelement holds the info for a single traceroute measurement ๐ฏ; - a file with 1
Measurementelement containing 1MeasurementMetadataand nMeasurementResultelements holds the info for a set of traceroute measurements run at different times, all with the exact same configuration parameters โฐ; - a file with 1
RequestMetadataand 1Measurementelement, where theMeasurementcontains 1MeasurementMetadataand 1Measurementelement, holds the info for one traceroute measurement. it includes both the configuration parameters that were requested and the ones that were actually used ๐งพ; - other combinations are possible if you want to store multiple traceroute measurements in one XML file ๐.
5.2.2. Configuration Information Elements
this section covers the elements specific to configuring a traceroute measurement. they belong to both RequestMetadata and MeasurementMetadata elements ๐.
5.2.2.1. CtlTargetAddressType
name: CtlTargetAddressTypedescription: says what type of address is in the matchingCtlTargetAddresselement ๐ท๏ธ. this element isn't directly reflected in the XML schema of Section 7. you can figure out the host address type by looking at theinetAddresstype name and the matching element value ๐dataType: inetAddressTypeunits: N/A
5.2.2.2. CtlTargetAddress
name: CtlTargetAddressdescription: in theRequestMetadataelement, it's the host address you want used in the traceroute measurement ๐ฏ. in theMeasurementMetadataelement, it's the host address that was actually used in the traceroute measurement ๐dataType: inetAddressunits: N/A
5.2.2.3. CtlBypassRouteTable ๐ฃ๏ธ
- name -
CtlBypassRouteTable - description - Okay so, in the
RequestMetadataelement, this one tells you whether the optional bypassing of the route table was enabled or not. In theMeasurementMetadataelement, it tells you the same thing ๐ If it's enabled, the normal routing tables get skipped and the probes go straight to a host on an attached network. If the host isn't on a directly attached network, an error comes back ๐ โโ๏ธ This option is iconic for timing a traceroute to a local host through an interface that has no route defined. You can use this object when the setsockoptSOL_SOCKETSO_DONTROUTEoption is supported and set (see [IEEE.1003-1G.1997]) ๐ฆ - dataType - boolean
- units - N/A
5.2.2.4. CtlProbeDataSize ๐ฆ
- name -
CtlProbeDataSize - description - This one specifies the size of the probes in a traceroute measurement, in octets ๐ It's requested if it's in the
RequestMetadataelement, and it's the size actually used if it's in theMeasurementMetadataelement. If UDP datagrams are the probes, the value in this object is exact, no cap. If another protocol sends the probes instead (TCP or ICMP), and the specified size doesn't work for it, the implementation can use whatever size makes the most sense for that method, as long as it's closest to the specified size โจ The maximum value for this object is found by taking the maximum IP packet size and subtracting the smallest possible IP header size of 20 octets (IPv4 header with no options) and the UDP header size of 8 octets. An IP packet has a maximum size of 65535 octets, not counting IPv6 jumbograms ๐ - dataType - unsignedShort
- units - octets
5.2.2.5. CtlTimeOut โฐ
- name -
CtlTimeOut - description - This is the timeout value, in seconds, for each probe in a traceroute measurement ๐ซถ It's requested if it's in the
RequestMetadataelement, and it's the value actually used if it's in theMeasurementMetadataelement. - dataType - unsignedByte
- units - seconds
5.2.2.6. CtlProbesPerHop ๐
- name -
CtlProbesPerHop - description - This one specifies how many probes with the same time-to-live (TTL) value get sent for each host ๐ It's requested if it's in the
RequestMetadataelement, and it's the number actually used if it's in theMeasurementMetadataelement. - dataType - unsignedByte
- units - probes
5.2.2.7. CtlPort ๐ช
- name -
CtlPort - description - This specifies the base port the traceroute measurement uses ๐ It's requested if it's in the
RequestMetadataelement, and it's the port actually used if it's in theMeasurementMetadataelement. - dataType - unsignedShort
- units - port number
5.2.2.8. CtlMaxTtl ๐
- name -
CtlMaxTtl - description - This is the maximum TTL value for the traceroute measurement, so it's basically the ceiling ๐งโโ๏ธ It's requested if it's in the
RequestMetadataelement, and it's the value actually used if it's in theMeasurementMetadataelement. - dataType - u8nonzero
- units - time-to-live value
5.2.2.9. CtlDSField ๐
- name -
CtlDSField - description - Here's the vibe check on the Differentiated Services (DS) field ๐ In the
RequestMetadataelement, this specifies the value that was requested to be stored in the DS field in the traceroute probe. In theMeasurementMetadataelement, it specifies the value that was actually stored in the DS field in the traceroute probe. The DS field is the Type of Service (TOS) octet in an IPv4 header, or the Traffic Class octet in an IPv6 header (see Section 7 of [RFC2460]). The value of this object must be a decimal integer from 0 to 255. Not every value is legal or meaningful, so be careful bestie ๐ This option helps you figure out what effect an explicit DS field setting has on a traceroute measurement and its probes. Useful TOS octet values are probably 16 (low delay) and 8 (high throughput) ๐ง You can find more on the DS field in [RFC2474], and on TOS in [RFC1812] Section 5.3.2. - dataType - unsignedByte
- units - N/A
5.2.2.10. CtlSourceAddressType ๐ท๏ธ
- name -
CtlSourceAddressType - description - This specifies the type of address in the matching
CtlSourceAddresselement ๐ฆ This element isn't directly reflected in the XML schema of Section 7. You can tell the host address type by checking theinetAddresstype name and the matching element value. DNS names are not allowed forCtlSourceAddress, so don't even try ๐ โโ๏ธ - dataType - inetAddressType
- units - N/A
5.2.2.11. CtlSourceAddress ๐ฏ
- name -
CtlSourceAddress - description - This is the IP address used as the source address in traceroute probes ๐ซ It has to be an IP number, not a hostname. It's requested if it's in the
RequestMetadataelement, and actually used if it's in theMeasurementMetadataelement. On hosts with more than one IP address, you can use this option in theRequestMetadataelement to force the source address to be something other than the primary IP address of the interface the probe is sent on. The valueunknownmeans the default address gets used ๐ธ - dataType - inetAddress
- units - N/A
5.2.2.12. CtlIfIndex ๐
- name -
CtlIfIndex - description - This is the interface index, as defined in [RFC2863], that is requested to be used for sending the traceroute probes (if it's in the
RequestMetadataelement) ๐ช A value of 0 means no specific interface is requested. In theMeasurementMetadataelement, it specifies the interface index actually used. - dataType - unsignedInt
- units - N/A
5.2.2.13. CtlMiscOptions ๐ง
- name -
CtlMiscOptions - description - This specifies implementation-dependent options ๐ช They're requested if they're in the
RequestMetadataelement, and actually used if they're in theMeasurementMetadataelement. - dataType - string255
- units - N/A
5.2.2.14. CtlMaxFailures ๐ซ
- name -
CtlMaxFailures - description - This is the maximum number of consecutive timeouts allowed before a traceroute measurement gets terminated ๐ญ It's requested if it's in the
RequestMetadataelement, and actually used if it's in theMeasurementMetadataelement. A value of either 255 (the maximum hop count/possible TTL value) or 0 means the function of terminating a remote traceroute measurement when a specific number of consecutive timeouts are detected is disabled. This element is here for full compatibility with [RFC4560]. No known implementation of traceroute supports it right now ๐ - dataType - Unsigned8
- units - timeouts
5.2.2.15. CtlDontFragment ๐งท
- name -
CtlDontFragment - description - This tells you if the don't fragment (DF) flag in the IP header for a probe was enabled or not (if it's in the
MeasurementMetadataelement) ๐ If it's in theRequestMetadataelement, it tells you whether enabling the flag was requested. Setting the DF flag can be used for performing a manual PATH MTU test, which is a total power move ๐ช - dataType - boolean
- units - N/A
5.2.2.16. CtlInitialTtl ๐
- name -
CtlInitialTtl - description - This specifies the initial TTL value for a traceroute measurement ๐ It's requested if it's in the
RequestMetadataelement, and actually used if it's in theMeasurementMetadataelement. This TTL setting is meant to skip over the initial (often well-known) part of a path, so you don't waste time there ๐ - dataType - u8nonzero
- units - N/A
5.2.2.17. CtlDescr ๐
- name -
CtlDescr - description - This one gives you a description of the traceroute measurement ๐
- dataType - string255
- units - N/A
5.2.2.18. CtlType ๐งฉ
- name -
CtlType - description - This specifies the implementation method used for the traceroute measurement ๐ ๏ธ It's requested if it's in the
RequestMetadataelement, and actually used if it's in theMeasurementMetadataelement. It tells you whether the traceroute uses TCP, UDP, ICMP, or other types of probes. You can also specify other types of probes by using an element defined in another schema with a different namespace, which is giving flexibility ๐ - dataType - probesType
- units - N/A
5.2.3. Results Information Elements ๐
This section is all about the elements that are specific to the results of the traceroute measurement ๐ฆ
5.2.3.1. ResultsStartDateAndTime ๐๏ธ
- name -
ResultsStartDateAndTime - description - This specifies the date and start time of the traceroute measurement โฑ๏ธ It's the time when the first probe was seen at the sending interface.
- dataType - DateTime
- units - N/A
5.2.3.2. ResultsIpTgtAddrType ๐ท๏ธ
- name -
ResultsIpTgtAddrType - description - This specifies the type of address in the matching
ResultsIpTgtAddrelement ๐ This element isn't directly reflected in the XML schema of Section 7. You can tell the host address type by checking theinetAddresstype name and the matching element value. - dataType - inetAddressType
- units - N/A
5.2.3.3. ResultsIpTgtAddr ๐ฏ
- name -
ResultsIpTgtAddr - description - This specifies the IP address associated with a
CtlTargetAddressvalue when the destination address is given as a DNS name ๐ The value of this object should beunknownif a DNS name isn't specified, or if a specified DNS name fails to resolve ๐ซ - dataType - inetAddress
- units - N/A
5.2.3.4. HopAddrType ๐งญ
- name -
HopAddrType - description - This specifies the type of address in the matching
HopAddrelement โจ This element isn't directly reflected in the XML schema of Section 7. You can tell the host address type by checking theinetAddresstype name and the matching element value. DNS names are not allowed forHopAddr, so no DNS names here, babe ๐ โโ๏ธ - dataType - inetAddressType
- units - N/A
5.2.3.5. HopAddr ๐
- name -
HopAddr - description - This is the address of a hop in the traceroute measurement path ๐ค๏ธ This object is not allowed to be a DNS name.
- dataType - inetAddress
- units - N/A
5.2.3.6. HopName ๐
- name -
HopName - description - This specifies the DNS name of the
HopAddr, if one is available ๐ชช If it isn't available, the element is omitted. - dataType - inetAddress
- units - N/A
5.2.3.7. MPLSLabelStackEntry ๐ท๏ธ
- name -
MPLSLabelStackEntry - description - This one specifies entries of the MPLS label stack of a probe, observed when the probe arrived at the hop that replied to it ๐ง It holds one MPLS label stack entry as a 32-bit value, exactly as it's observed on the MPLS label stack. Packed into that single number are the MPLS label, the Exp field, the S flag, and the MPLS TTL value, as specified in [RFC3032] ๐ท If more than one MPLS label stack entry is reported, you use multiple instances of this element. They must be ordered in the same order as on the label stack, with the top label stack entry reported first. Order matters, no cap ๐
- dataType - unsignedInt
- units - N/A
5.2.3.8. ProbeRoundTripTime โฑ๏ธ
- name -
ProbeRoundTripTime - description - okay so if this element holds the element
roundTripTime, it tells you how many milliseconds passed from when a probe got sent to when its response came back, or when it timed out. โฑ๏ธ The value is the truncation of the number the traceroute tool reports, so the output< 1 msgets encoded as0ms. ๐ค If it holdsroundTripTimeNotAvailableinstead, that means either the probe was lost to a timeout or it couldn't be transmitted at all ๐ - dataType -
unsignedShortorstring - units -
millisecondsorN/A
5.2.3.9. ResponseStatus ๐
- name -
ResponseStatus - description - this is the result of a traceroute measurement made by the host for a particular probe. The host's verdict on each probe, basically ๐
- dataType -
operationResponseStatus - units -
N/A
5.2.3.10. Time ๐ฐ๏ธ
- name -
Time - description - this is the timestamp for when the response to the probe was received at the interface. ๐
- dataType -
DateTime - units -
N/A
5.2.3.11. ResultsEndDateAndTime ๐
- name -
ResultsEndDateAndTime - description - this specifies the date and end time of the traceroute measurement. It's either the time when the response to the last probe came in, or the time when the last probe got sent plus the relative timeout (for when there's no response). โจ
- dataType -
DateTime - units -
N/A
5.2.3.12. HopRawOutputData ๐ธ
- name -
HopRawOutputData - description - this is the raw output data returned by the traceroute measurement for a certain hop in a traceroute measurement path. It's an implementation-dependent, printable string, and it's expected to be useful for a human interpreting the traceroute results. ๐ง
- dataType -
string - units -
N/A
5.2.4. Information Element Correlating Configuration and Results Elements ๐
Okay bestie, this section adds one more element that belongs to both groups (configuration elements and results elements), called TestName. Its whole job is to connect configuration and results through a common unique identifier ๐ซถ (which is chosen in accordance to the specification of [RFC4560]).
5.2.4.1. TestName ๐ท๏ธ
- name -
TestName - description - this is the name of a traceroute measurement. It's not necessarily unique within any well-defined scope (for example, a specific host or the initiator of the traceroute measurement). ๐
- dataType -
string255 - units -
N/A
5.2.5. Information Elements to Compare Traceroute Measurement Results with Each Other ๐
These are more extra elements that belong to both previous groups (configuration elements and results elements). They exist so you can compare traceroute measurement results across different traceroute measurements. Main character energy for data analysis ๐โจ
5.2.5.1. OSName ๐ฅ๏ธ
- name -
OSName - description - this is the name of the operating system the traceroute measurement was launched on. This element is ignored if it's used in the
RequestMetadata. ๐ - dataType -
string255 - units -
N/A
5.2.5.2. OSVersion ๐ง
- name -
OSVersion - description - this is the OS version the traceroute measurement was launched on. This element is ignored if it's used in the
RequestMetadata. ๐ - dataType -
string255 - units -
N/A
5.2.5.3. ToolVersion ๐ ๏ธ
- name -
ToolVersion - description - this is the version of the traceroute tool. It's the version requested to be used if it's in the
RequestMetadataelement, and the version actually used if it's in theMeasurementMetadataelement. ๐ฆ - dataType -
string255 - units -
N/A
5.2.5.4. ToolName ๐ง
- name -
ToolName - description - this is the name of the traceroute tool. It's the tool requested to be used if it's in the
RequestMetadataelement, and the tool actually used if it's in theMeasurementMetadataelement. ๐ - dataType -
string255 - units -
N/A
6. Data Model for Storing Traceroute Measurements ๐๏ธ
Okay so to store and transmit the info from the information model we just went over, you need a data model that says how to encode the elements. ๐ซถ
There are a bunch of design choices here. The data model can be binary or textual, and it can be built from scratch or use frameworks and data models that already exist. Generally speaking, already existing frameworks and models should be preferred. ๐
Binary and textual both have their pros and cons. Textual stuff is (with some limitations) human-readable, while binary eats up fewer resources when it comes to storing, transmitting, and parsing data. ๐ค
There's an already existing and closely related data model: the DISMAN-TRACEROUTE-MIB module [RFC4560]. It specifies a Structure of Management Information version 2 (SMIv2) encoding [RFC2578], [RFC2579], and [RFC2580] for transmitting traceroute measurement information (configuration and results). It's super well suited and supported within network management systems ๐ฅ๏ธ, but as a general format for storing and transmitting traceroute results, it's not easily applicable. ๐
Another binary option would be an extension of traffic-flow information encodings, as specified for the IP Flow Information Export (IPFIX) protocol [RFC5101], [RFC5102]. IPFIX is extensible, which is great. However, the architecture behind this protocol [IPFIX] is targeted at exporting passively measured flow information, so some obstacles are expected if you try to use it for transmitting traceroute measurement information. ๐ง
For textual representations, the eXtensible Markup Language (XML) [W3C.REC-xml-20060816] is an obvious choice. XML supports clean structuring of data and syntax checking of records. With some limitations, it's human-readable, and it's supported by a huge pool of tools and standards for generating, transmitting, parsing, and converting to other data formats. ๐ The downside is the resource consumption for processing, storing, and transmitting information. But since the expected data volumes for traceroute measurement in network operation and maintenance aren't expected to be extremely high, that inefficient use of resources isn't a significant disadvantage. โจ So XML was chosen as the basis for the traceroute measurement information model specified in this memo. ๐
Section 7 contains the XML schema to be used as a template for storing and/or exchanging traceroute measurement information. The schema uses an extensible, template-based approach (pretty similar to how IPFIX is designed). The traceroute configuration elements, both the requested parameters (RequestMetadata) and the actual parameters used (MeasurementMetadata), are metadata that results information elements (data) reference by means of the TestName element. TestName is used as a unique identifier, chosen in accordance to the specification of [RFC4560]. ๐
Open Grid Forum (OGF) is also using this approach, and cross-requirements have been analyzed. As a result, the XML schema in Section 7 is compatible with the OGF schema, since both were designed to limit unnecessary redundancy, and a simple one-to-one transformation between the two exists. ๐ค๐ธ
7. XML Schema for Traceroute Measurements ๐
This section presents the XML schema to be used as a template for storing and/or exchanging traceroute measurement information. The schema uses UTF-8 encoding as defined in [RFC3629]. In documents conforming to the format here, an XML declaration SHOULD be present, specifying the version and the character encoding of the XML document. The document should be encoded using UTF-8. Since some strings can span multiple lines, [RFC5198] applies. XML processing instructions and comments MUST be ignored. Mind that whitespace is significant in XML when writing documents conforming to this schema. ๐ซ Documents using the presented format must be valid according to the XML schema shown in this section. Since elements of type _CtlType may contain elements from unknown namespaces, those elements MUST be ignored if their namespace is unknown to the processor. Values for elements using the XML schema type dateTime MUST be restricted to values defined in [RFC3339]. Future versions of this format MAY extend this schema by creating a new schema that redefines all or some of the data types and elements defined in this version, or by establishing a complete new schema. ๐ฆ
Due to the limited line length, some lines appear wrapped. ๐
<?xml version="1.0" encoding="UTF-8"?>
<xs:schema elementFormDefault="qualified"
targetNamespace="urn:ietf:params:xml:ns:traceroute-1.0"
xmlns:xs="http://www.w3.org/2001/XMLSchema"
xmlns:tr="urn:ietf:params:xml:ns:traceroute-1.0">
<xs:simpleType name="string255">
<xs:annotation>
<xs:documentation>String restricted to 255
characters.</xs:documentation>
</xs:annotation>
<xs:restriction base="xs:string">
<xs:maxLength value="255"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType name="u8nonzero">
<xs:annotation>
<xs:documentation>unsignedByte with non zero
value.</xs:documentation>
</xs:annotation>
<xs:restriction base="xs:unsignedByte">
<xs:minInclusive value="1"/>
</xs:restriction>
</xs:simpleType>
<xs:complexType name="_roundTripTime">
<xs:choice>
<xs:element name="roundTripTime">
<xs:simpleType>
<xs:restriction base="xs:unsignedInt"/>
</xs:simpleType>
</xs:element>
<xs:element name="roundTripTimeNotAvailable">
<xs:complexType/>
</xs:element>
</xs:choice>
</xs:complexType>
<xs:complexType name="_inetAddressUnknown"/>
<xs:simpleType name="_inetAddressIpv4">
<xs:restriction base="xs:string">
<xs:pattern value="(([1-9]?[0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5
]).){3}([1-9]?[0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType name="_inetAddressIpv6">
<xs:restriction base="xs:string">
<xs:pattern value="(([\dA-Fa-f]{1,4}:){7}[\dA-Fa-f]{1,4})(:([\d
]{1,3}.){3}[\d]{1,3})?"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType name="_inetAddressDns">
<xs:restriction base="xs:string">
<xs:maxLength value="256"/>
</xs:restriction>
</xs:simpleType>
<xs:complexType name="_inetAddressASNumber">
<xs:annotation>
<xs:documentation>Specifies the AS number of a hop in the
traceroute path as a 32-bit number and indicates how the
mapping from IP address to AS number was
performed.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="asNumber" type="xs:unsignedInt"/>
<xs:element name="ipASNumberMappingType">
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:enumeration value="bgptables"/>
<xs:enumeration value="routingregistries"/>
<xs:enumeration value="nslookup"/>
<xs:enumeration value="others"/>
<xs:enumeration value="unknown"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="inetAddress">
<xs:choice>
Okay bestie, the schema keeps going and it's giving chaotic but organized ๐โจ Here are the address choice types, where the DNS name is optional and the no-DNS version is stricter ๐
<xs:element name="inetAddressUnknown"
type="tr:_inetAddressUnknown"/>
<xs:element name="inetAddressIpv4" type="tr:_inetAddressIpv4"/>
<xs:element name="inetAddressIpv6" type="tr:_inetAddressIpv6"/>
<xs:element name="inetAddressASNumber"
type="tr:_inetAddressASNumber"/>
<xs:element minOccurs="0" name="inetAddressDns"
type="tr:_inetAddressDns"/>
</xs:choice>
</xs:complexType>
Next up is the no-DNS version, inetAddressWithoutDns ๐ธ It's the same set of options minus the DNS one, so a HopAddr can never be a name. Iconic restraint ๐
<xs:complexType name="inetAddressWithoutDns">
<xs:sequence>
<xs:choice>
<xs:element name="inetAddressUnknown"
type="tr:_inetAddressUnknown"/>
<xs:element name="inetAddressIpv4"
type="tr:_inetAddressIpv4"/>
<xs:element name="inetAddressIpv6"
type="tr:_inetAddressIpv6"/>
<xs:element name="inetAddressASNumber"
type="tr:_inetAddressASNumber"/>
</xs:choice>
</xs:sequence>
</xs:complexType>
<xs:simpleType name="operationResponseStatus">
<xs:restriction base="xs:string">
<xs:enumeration value="responseReceived"/>
<xs:enumeration value="unknown"/>
<xs:enumeration value="internalError"/>
<xs:enumeration value="requestTimedOut"/>
<xs:enumeration value="unknownDestinationAddress"/>
<xs:enumeration value="noRouteToTarget"/>
<xs:enumeration value="interfaceInactiveToTarget"/>
<xs:enumeration value="arpFailure"/>
<xs:enumeration value="maxConcurrentLimitReached"/>
<xs:enumeration value="unableToResolveDnsName"/>
<xs:enumeration value="invalidHostAddress"/>
</xs:restriction>
</xs:simpleType>
Now the operationResponseStatus enum, which is the list of every outcome a probe can have ๐ฆ Each value is a fixed string, so no freestyling allowed ๐
Next is the protocol choice, _CtlType. It's a pick-one between TCP, UDP, and ICMP, plus a wildcard for anything from another namespace ๐ง
<xs:complexType name="_CtlType">
<xs:choice>
<xs:element name="TCP">
<xs:complexType/>
</xs:element>
<xs:element name="UDP">
<xs:complexType/>
</xs:element>
<xs:element name="ICMP">
<xs:complexType/>
</xs:element>
<xs:any namespace="##other"/>
</xs:choice>
</xs:complexType>
<xs:complexType name="_ProbeResults">
<xs:sequence>
<xs:element maxOccurs="255" name="hop">
<xs:complexType>
<xs:sequence>
<xs:element maxOccurs="10" name="probe">
<xs:complexType>
<xs:sequence>
<xs:element name="HopAddr"
type="tr:inetAddressWithoutDns">
<xs:annotation>
<xs:documentation>Specifies the address of a
hop in the traceroute measurement path. This
object is not allowed to be a DNS name. The
address type can be determined by examining the
"inetAddress" type name and the corresponding
element value.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element minOccurs="0" name="HopName"
type="tr:_inetAddressDns">
<xs:annotation>
<xs:documentation>Specifies the DNS name of
the "HopAddr" if it is available. If it is
not available, the element is
omitted.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element maxOccurs="255" minOccurs="0"
name="MPLSLabelStackEntry">
<xs:annotation>
<xs:documentation>Specifies entries of the
MPLS label stack of a probe observed when the
probe arrived at the hop that replied to the
probe. This object contains one MPLS label stack
entry as a 32-bit value as it is observed on the
MPLS label stack. Contained in this single
number are the MPLS label, the Exp field, the S
flag, and the MPLS TTL value as specified in
[RFC3032]. If more than one MPLS label stack
entry is reported, then multiple instances of
elements of this type are used. They must be
ordered in the same order as on the label stack
with the top label stack entry being reported
first.</xs:documentation>
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:unsignedInt">
<xs:maxInclusive value="4294967295"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="ProbeRoundTripTime"
type="tr:_roundTripTime">
<xs:annotation>
<xs:documentation>If this element contains the
element "roundTripTime", this specifies the
amount of time measured in milliseconds from
when a probe was sent to when its response was
received or when it timed out. The value of
this element is reported as the truncation of
the number reported by the traceroute tool (the
output "< 1 ms" is therefore encoded as 0 ms).
If it contains the element
"roundTripTimeNotAvailable", it means either
the probe was lost because of a timeout or it
was not possible to transmit a probe.
</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="ResponseStatus"
type="tr:operationResponseStatus">
<xs:annotation>
<xs:documentation>Specifies the result of a
traceroute measurement made by the host for a
particular probe.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="Time" type="xs:dateTime">
<xs:annotation>
<xs:documentation>Specifies the timestamp for
the time the response to the probe was
received at the interface.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element minOccurs="0" name="HopRawOutputData"
type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies the raw output data
returned by the traceroute measurement for a
certain hop in a traceroute measurement path. It is
an implementation-dependent, printable string,
expected to be useful for a human interpreting the
traceroute results.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:sequence>
</xs:complexType>
Now for _ProbeResults ๐ This is the big one. Up to 255 hops, each with up to 10 probes, and every probe reports its address, optional name, MPLS label stack, round trip time, status, and timestamp. It's a whole organized diary of the trip ๐ Also, the MPLS label stack entries have to go in the order they appear on the stack, top one first. Very particular, very valid ๐
Last stop is the metadata block, _Metadata ๐ It holds the test's name, the OS details, the tool name and version, the target address, and the route table bypass flag. Some fields only count in the request, some only in the measurement, and some ignore themselves depending on which one they're in. Main character energy ๐ญ
<xs:complexType name="_Metadata">
<xs:annotation>
<xs:documentation>Specifies the metadata for a traceroute
operation -- the parameters requested if used in
"RequestMetadata" or the actual parameters used if used in
"MeasurementMetadata".</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="TestName" type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies the name of a traceroute
measurement. This is not necessarily unique within any
well-defined scope (e.g., a specific host, initiator of
the traceroute measurement).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="" name="OSName" type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies the name of the operating
system on which the traceroute measurement was launched.
This element is ignored if used in the
"RequestMetadata".</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="" name="OSVersion" type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies the OS version on which the
traceroute measurement was launched. This element is
ignored if used in the
"RequestMetadata".</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="" name="ToolVersion" type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies the version of the traceroute
tool (requested to be used if in the "RequestMetadata"
element, actually used if in the "MeasurementMetadata"
element).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="" name="ToolName" type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies the name of the traceroute
tool (requested to be used if in the "RequestMetadata"
element, actually used if in the "MeasurementMetadata"
element).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="CtlTargetAddress" type="tr:inetAddress">
<xs:annotation>
<xs:documentation>In the "RequestMetadata" element, it
specifies the host address requested to be used in the
traceroute measurement. In the "MeasurementMetadata"
element, it specifies the host address used in the
traceroute measurement. The host address type can be
determined by examining the "inetAddress" type name and
the corresponding element value.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="false" name="CtlBypassRouteTable"
type="xs:boolean">
<xs:annotation>
<xs:documentation>In the "RequestMetadata" element
specifies if the optional bypassing of the route
table was enabled or not. In the "MeasurementMetadata"
element, specifies if the optional bypassing of the route
table was enabled or not. If enabled, the normal routing
tables will be bypassed and the probes will be sent
directly to a host on an attached network. If the host is
not on a directly attached network, an error is returned.
This option can be used to perform the traceroute
measurement to a local host through an interface that has
no route defined. This object can be used when the
setsockopt SOL_SOCKET SO_DONTROUTE option is supported and
set (see the POSIX standard IEEE.1003-1G.1997).
</xs:documentation>
</xs:annotation>
</xs:element>
okay the schema is where it gets SO detailed ๐ ๐ every single tag and default value matters, so this part is pure exact copy. no cap ๐ซถ
<xs:element default="0" name="CtlProbeDataSize">
<xs:annotation>
<xs:documentation>Specifies the size of the probes of a
traceroute measurement in octets (requested if in the
"RequestMetadata" element, actually used if in the
"MeasurementMetadata" element). If UDP datagrams are used
as probes, then the value contained in this object is
exact. If another protocol is used to transmit probes
(i.e., TCP or ICMP) for which the specified size is not
appropriate, then the implementation can use whatever
size (appropriate to the method) is closest to the
specified size. The maximum value for this object is
computed by subtracting the smallest possible IP header
size of 20 octets (IPv4 header with no options) and the
UDP header size of 8 octets from the maximum IP packet
size. An IP packet has a maximum size of 65535 octets
(excluding IPv6 jumbograms).</xs:documentation>
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:maxInclusive value="65507"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element default="3" name="CtlTimeOut">
<xs:annotation>
<xs:documentation>Specifies the timeout value, in
seconds, for each probe of a traceroute measurement
(requested if in the "RequestMetadata" element, actually
used if in the "MeasurementMetadata"
element).</xs:documentation>
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:unsignedByte">
<xs:minInclusive value="1"/>
<xs:maxInclusive value="60"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element default="3" name="CtlProbesPerHop">
<xs:annotation>
<xs:documentation>Specifies the number of probes with the
same time-to-live (TTL) value that are sent for each host
(requested if in the "RequestMetadata" element, actually
used if in the "MeasurementMetadata"
element).</xs:documentation>
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:unsignedByte">
<xs:minInclusive value="1"/>
<xs:maxInclusive value="10"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element default="33434" name="CtlPort">
<xs:annotation>
<xs:documentation>Specifies the base port used by the
traceroute measurement (requested if in the
"RequestMetadata" element, actually used if in the
"MeasurementMetadata" element).</xs:documentation>
</xs:annotation>
<xs:simpleType>
<xs:restriction base="xs:unsignedShort">
<xs:minInclusive value="1"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element default="30" name="CtlMaxTtl" type="tr:u8nonzero">
<xs:annotation>
<xs:documentation>Specifies the maximum TTL value for the
traceroute measurement (requested if in the
"RequestMetadata" element, actually used if in the
"MeasurementMetadata" element).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="0" name="CtlDSField"
type="xs:unsignedByte">
<xs:annotation>
<xs:documentation>Specifies the value that was requested
to be stored in the Differentiated Services (DS) field in
the traceroute probe (if in the "RequestMetadata"
element). Specifies the value that was stored in the
Differentiated Services (DS) field in the traceroute
probe (if in the "MeasurementMetadata" element). The DS
field is defined as the Type of Service (TOS) octet in an
IPv4 header or as the Traffic Class octet in an IPv6
header (see Section 7 of [RFC2460]). The value of this
object must be a decimal integer in the range from 0 to
255. This option can be used to determine what effect an
explicit DS field setting has on a traceroute measurement
and its probes. Not all values are legal or meaningful.
Useful TOS octet values are probably 16 (low delay) and
8 (high throughput). Further references can be found in
[RFC2474] for the definition of the Differentiated
Services (DS) field and in [RFC1812] Section 5.3.2 for
Type of Service (TOS).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="CtlSourceAddress"
type="tr:inetAddressWithoutDns">
<xs:annotation>
<xs:documentation>Specifies the IP address (which has to
be given as an IP number, not a hostname) as the source
address in traceroute probes (requested if in the
"RequestMetadata" element, actually used if in the
"MeasurementMetadata" element). On hosts with more than
one IP address, this option can be used in the
"RequestMetadata" element to force the source address to
be something other than the primary IP address of the
interface the probe is sent on; the value "unknown" means
the default address will be used. The address type can be
determined by examining the "inetAddress" type name and the
corresponding element value.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="0" name="CtlIfIndex"
type="xs:unsignedInt">
<xs:annotation>
<xs:documentation>Specifies the interface index as
defined in [RFC2863] that is requested to be used in the
traceroute measurement for sending the traceroute probes
(if in the "RequestMetadata" element). A value of 0
indicates that no specific interface is requested.
Specifies the interface index actually used (if in the
"MeasurementMetadata" element).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element minOccurs="0" name="CtlMiscOptions"
type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies implementation-dependent
options (requested if in the "RequestMetadata" element,
actually used if in the "MeasurementMetadata"
element).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="5" name="CtlMaxFailures"
type="xs:unsignedByte">
<xs:annotation>
<xs:documentation>Specifies the maximum number of
consecutive timeouts allowed before terminating a
traceroute measurement (requested if in the
"RequestMetadata" element, actually used if in the
"MeasurementMetadata" element). A value of either 255
(maximum hop count/possible TTL value) or 0 indicates
that the function of terminating a remote traceroute
measurement when a specific number of consecutive
timeouts are detected was disabled. This element is
included to give full compatibility with [RFC4560]. No
known implementation of traceroute currently supports
it.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="false" name="CtlDontFragment"
type="xs:boolean">
<xs:annotation>
<xs:documentation>Specifies if the don't fragment (DF)
flag in the IP header for a probe was enabled or not (if
in the "MeasurementMetadata" element). If in the
"RequestMetadata", it specifies if the flag was requested
to be enabled or not. Setting the DF flag can be used for
performing a manual PATH MTU test.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element default="1" name="CtlInitialTtl"
type="tr:u8nonzero">
<xs:annotation>
<xs:documentation>Specifies the initial TTL value for a
traceroute measurement (requested if in the
"RequestMetadata" element, actually used if in the
"MeasurementMetadata" element). Such TTL setting is
intended to bypass the initial (often well-known) portion
of a path.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element maxOccurs="1" minOccurs="0" name="CtlDescr"
type="tr:string255">
<xs:annotation>
<xs:documentation>Provides a description of the traceroute
measurement.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="CtlType" type="tr:_CtlType">
<xs:annotation>
<xs:documentation>Specifies the implementation method
used for the traceroute measurement (requested if in the
"RequestMetadata" element, actually used if in the
"MeasurementMetadata" element). It specifies if the
traceroute is using TCP, UDP, ICMP, or other types of
probes. It is possible to specify other types of probes
by using an element specified in another schema with a
different namespace.</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
<xs:complexType name="_Measurement">
<xs:annotation>
<xs:documentation>Contains the actual traceroute measurement
results.</xs:documentation>
</xs:annotation>
<xs:sequence>
<xs:element name="TestName" type="tr:string255">
<xs:annotation>
<xs:documentation>Specifies the name of a traceroute
measurement. This is not necessarily unique within any
well-defined scope (e.g., a specific host, initiator of
the traceroute measurement).</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="ResultsStartDateAndTime" type="xs:dateTime">
<xs:annotation>
<xs:documentation>Specifies the date and start time of
the traceroute measurement. This is the time when the
first probe was seen at the sending
interface.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="ResultsIpTgtAddr"
type="tr:inetAddressWithoutDns">
<xs:annotation>
<xs:documentation>Specifies the IP address associated
with a "CtlTargetAddress" value when the destination
address is specified as a DNS name. The value of this
object should be "unknown" if a DNS name is not specified
or if a specified DNS name fails to resolve. The
address type can be determined by examining the "inetAddress"
type name and the corresponding element
value.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="ProbeResults" type="tr:_ProbeResults"/>
<xs:element name="ResultsEndDateAndTime" type="xs:dateTime">
<xs:annotation>
<xs:documentation>Specifies the date and end time of the
traceroute measurement. It is either the time when the
response to the last probe of the traceroute measurement
was received or the time when the last probe of the
traceroute measurement was sent plus the relative timeout
(in case of a missing response).</xs:documentation>
</xs:annotation>
</xs:element>
</xs:sequence>
</xs:complexType>
the CtlMaxFailures bit is lowkey wild ๐ "no known implementation of traceroute currently supports it" ๐ the spec literally said that out loud
and the DS field note mentions Traffic Class octets in IPv6 ๐ง that's the bit where the TOS and DS stuff all lines up โจ
<xs:element name="traceRoute">
<xs:complexType>
<xs:sequence>
<xs:element minOccurs="0" name="RequestMetadata"
type="tr:_Metadata"/>
<xs:element maxOccurs="2147483647" minOccurs="0"
name="Measurement">
<xs:complexType>
<xs:sequence>
<xs:element minOccurs="0" name="MeasurementMetadata"
type="tr:_Metadata"/>
<xs:element maxOccurs="2147483647" minOccurs="0"
name="MeasurementResult"
type="tr:_Measurement"/>
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:schema>
8. Security Considerations ๐
Okay bestie, the security stuff splits into two vibes: the risks of actually running traceroute measurements, and the risks of storing and sending the measurement info around ๐ซถ. Quick tea: this doc doesn't define a traceroute tool ๐ง, and it doesn't pick one specific way to store the measurement info either ๐ฆ. Still, it's considered desirable to talk through the related security issues below ๐.
8.1. Conducting Traceroute Measurements ๐
Running Internet measurements can raise both security AND privacy concerns ๐ฌ. Traceroute measurements inject traffic into the network, and that traffic can get abused for denial-of-service attacks that are dressed up as totally legit measurement activity ๐.
Measurement parameters MUST be carefully selected ๐ฏ so the measurements only inject trivial amounts of extra traffic into the networks they measure. If they inject "too much" traffic, they can skew the results, and in extreme cases cause congestion and denial of service ๐จ.
The measurements themselves can get messed up if routers treat measurement traffic with a different priority than "normal" traffic ๐ , or if some sneaky attacker injects fake measurement traffic ๐ฅท. If routers can spot measurement traffic and handle it differently, the results won't reflect what real users are actually getting. And if an attacker's fake traffic gets accepted as legit, the loss rate gets artificially lowered ๐. So the measurement methodologies SHOULD include appropriate techniques to reduce the probability that measurement traffic can be distinguished from "normal" traffic ๐ต๏ธ.
Authentication techniques, like digital signatures, may be used where appropriate to guard against injected traffic attacks ๐.
8.2. Securing Traceroute Measurement Information ๐
Traceroute measurement info isn't considered highly sensitive ๐. Still, it may contain sensitive info on network paths, routing states, used IP addresses, and roundtrip times, and network operators may want to protect that stuff for business or security reasons ๐ข.
It's thus important to control access to information acquired by conducting traceroute measurements, especially when it's being transmitted over a network, but also when it's stored ๐๏ธ. It is RECOMMENDED that a transmission of traceroute measurement information over a network uses appropriate protection mechanisms for preserving privacy, integrity, and authenticity. It is further RECOMMENDED that secure authentication and authorization are used for protecting stored traceroute measurement information ๐ก๏ธ.
9. IANA Considerations ๐
So this doc uses URNs to name an XML namespace and an XML schema for storing and transmitting traceroute measurement info ๐งพ, following the registry mechanism described in [RFC3688]. Two URI assignments have been made โจ.
- Registration for the IPPM traceroute measurements namespace
- URI:
urn:ietf:params:xml:ns:traceroute-1.0 - Registrant Contact: IESG
- XML: None. Namespace URIs do not represent an XML.
- URI:
- Registration for the IPPM traceroute measurements schema
- URI:
urn:ietf:params:xml:schema:traceroute-1.0 - Registrant Contact: IESG
- XML: See Section 7 of this document.
- URI:
10. References ๐
10.1. Normative References ๐งท
- [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.
- [RFC2460] Deering, S. and R. Hinden, "Internet Protocol, Version 6 (IPv6) Specification", RFC 2460, December 1998.
- [RFC2863] McCloghrie, K. and F. Kastenholz, "The Interfaces Group MIB", RFC 2863, June 2000.
- [RFC3032] Rosen, E., Tappan, D., Fedorkow, G., Rekhter, Y., Farinacci, D., Li, T., and A. Conta, "MPLS Label Stack Encoding", RFC 3032, January 2001.
- [RFC3339] Klyne, G., Ed. and C. Newman, "Date and Time on the Internet: Timestamps", RFC 3339, July 2002.
- [RFC3629] Yergeau, F., "UTF-8, a transformation format of ISO 10646", STD 63, RFC 3629, November 2003.
- [RFC4001] Daniele, M., Haberman, B., Routhier, S., and J. Schoenwaelder, "Textual Conventions for Internet Network Addresses", RFC 4001, February 2005.
- [RFC4560] Quittek, J. and K. White, "Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations", RFC 4560, June 2006.
- [RFC5198] Klensin, J. and M. Padlipsky, "Unicode Format for Network Interchange", RFC 5198, March 2008.
10.2. Informative References ๐ฆ
- [IEEE.1003-1G.1997] Institute of Electrical and Electronics Engineers, "Protocol Independent Interfaces", IEEE Standard 1003.1G, March 1997.
- [IPFIX] Sadasivan, G., "Architecture for IP Flow Information Export", Work in Progress, September 2006.
- [RFC1812] Baker, F., "Requirements for IP Version 4 Routers", RFC 1812, June 1995.
- [RFC2474] Nichols, K., Blake, S., Baker, F., and D. Black, "Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers", RFC 2474, December 1998.
- [RFC2578] McCloghrie, K., Ed., Perkins, D., Ed., and J. Schoenwaelder, Ed., "Structure of Management Information Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.
- [RFC2579] McCloghrie, K., Ed., Perkins, D., Ed., and J. Schoenwaelder, Ed., "Textual Conventions for SMIv2", STD 58, RFC 2579, April 1999.
- [RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder, "Conformance Statements for SMIv2", STD 58, RFC 2580, April 1999.
- [RFC3688] Mealling, M., "The IETF XML Registry", BCP 81, RFC 3688, January 2004.
- [RFC5101] Claise, B., "Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information", RFC 5101, January 2008.
- [RFC5102] Quittek, J., Bryant, S., Claise, B., Aitken, P., and J. Meyer, "Information Model for IP Flow Information Export", RFC 5102, January 2008.
- [W3C.REC-xml-20060816] Bray, T., Paoli, J., Maler, E., Sperberg-McQueen, C., and F. Yergeau, "Extensible Markup Language (XML) 1.0 (Fourth Edition)", World Wide Web Consortium FirstEdition REC-xml-20060816, August 2006,
<http://www.w3.org/TR/2006/REC-xml-20060816>. - [W3C.REC-xmlschema-2-20041028] Biron, P. and A. Malhotra, "XML Schema Part 2: Datatypes Second Edition", World Wide Web Consortium Recommendation REC-xmlschema-2-20041028, October 2004,
<http://www.w3.org/TR/2004/REC-xmlschema-2-20041028>.
Appendix A. Traceroute Default Configuration Parameters โจ
okay so this section is basically a cheat sheet ๐ง It lists the traceroute knobs you can turn, plus what the defaults are on different platforms, and shows how wildly they can differ. We're looking at four big traceroute tools. LINUX (SUSE 9.1), BSD (FreeBSD 7.0), and UNIX (SunOS 5.9) all send UDP datagrams, but WINDOWS (XP SP2) uses ICMP Echoes instead ๐ซถ The table below compares them. If an option cell says N/A, that parameter just isn't configurable on that implementation ๐
Obviously this isn't a full survey of every traceroute out there. It's outside the scope of this doc. Still, sampling a few different ones shows they can be super different when it comes to both the settings you can change and the defaults they ship with ๐ Also, the table only includes options that at least two of the four implementations support, so you won't see everything ๐
+---------------------------------------------------------+
| OS |Option| Description | Default |
+--------+------+-------------------------------+---------+
| LINUX | -m |Specify the maximum TTL used | 30 |
|--------+------|in traceroute probes. |---------|
| FreeBSD| -m | | OS var |
|--------+------| |---------|
| UNIX | -m | | 30 |
|--------+------| |---------|
| WINDOWS| -h | | 30 |
+--------+------+-------------------------------+---------+
| LINUX | -n |Display hop addresses | - |
|--------+------|numerically rather than |---------|
| FreeBSD| -n |symbolically. | - |
|--------+------| |---------|
| UNIX | -n | | - |
|--------+------| |---------|
| WINDOWS| -d | | - |
+--------+------+-------------------------------+---------+
| LINUX | -w |Set the time to wait for a | 3 sec |
|--------+------|response to a probe. |---------|
| FreeBSD| -w | | 5 sec |
|--------+------| |---------|
| UNIX | -w | | 5 sec |
|--------+------| |---------|
| WINDOWS| -w | | 4 sec |
+--------+------+-------------------------------+---------+
| LINUX | N/A |Specify a loose source route | - |
|--------+------|gateway (to direct the |---------|
| FreeBSD| -g |traceroute probes through | - |
|--------+------|routers not necessarily in |---------|
| UNIX | -g | the path). | - |
|--------+------| |---------|
| WINDOWS| -g | | - |
+--------+------+-------------------------------+---------+
| LINUX | -p |Set the base UDP port number | 33434 |
|------- +------|used in traceroute probes |---------|
| FreeBSD| -p |(UDP port = base + nhops - 1). | 33434 |
|--------+------| |---------|
| UNIX | -p | | 33434 |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | -q |Set the number of probes per | 3 |
|--------+------|TTL. |---------|
| FreeBSD| -q | | 3 |
|--------+------| |---------|
| UNIX | -q | | 3 |
|--------+------| |---------|
| WINDOWS| N/A | | 3 |
+--------+------+-------------------------------+---------+
| LINUX | -S |Set the IP source address in |IP |
|--------+------|outgoing probes to the |address |
| FreeBSD| -s |specified value. |of the |
|--------+------| |out |
| UNIX | -s | |interface|
|--------+------| | |
| WINDOWS| N/A | | |
+--------+------+-------------------------------+---------+
| LINUX | -t |Set the Type of Service (TOS) | 0 |
|--------+------|in the probes to the specified |---------|
| FreeBSD| -t |value. | 0 |
|--------+------| |---------|
| UNIX | -t | | 0 |
|--------+------| |---------|
| WINDOWS| N/A | | 0 |
+--------+------+-------------------------------+---------+
| LINUX | -v |Verbose output: received ICMP | - |
|--------+------|packets other than |---------|
| FreeBSD| -v |TIME_EXCEEDED and | - |
|--------+------|UNREACHABLE are listed. |---------|
| UNIX | -v | | - |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | N/A |Set the time (in msec) to | - |
|--------+------|pause between probes. |---------|
| FreeBSD| -z | | 0 |
|--------+------| |---------|
| UNIX | -P | | 0 |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | -r |Bypass the normal routing | - |
|--------+------|tables and send directly to a |---------|
| FreeBSD| -r |host on attached network. | - |
|--------+------| |---------|
| UNIX | -r | | - |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | -f |Set the initial TTL for the | 1 |
|--------+------|first probe. |---------|
| FreeBSD| -f | | 1 |
|--------+------| |---------|
| UNIX | -f | | 1 |
|--------+------| |---------|
| WINDOWS| N/A | | 1 |
+--------+------+-------------------------------+---------+
| LINUX | -F |Set the "don't fragment" bit. | - |
|--------+------| |---------|
| FreeBSD| -F | | - |
|--------+------| |---------|
| UNIX | -F | | - |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | N/A |Enable socket level debugging. | - |
|--------+------| |---------|
| FreeBSD| -d | | - |
|--------+------| |---------|
| UNIX | -d | | - |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | N/A |Use ICMP Echoes instead of UDP | - |
|--------+------|datagrams. |---------|
| FreeBSD| -I | | - |
|--------+------| |---------|
| UNIX | -I | | - |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | -I |Specify a network interface to | - |
|--------+------|obtain the IP address for |---------|
| FreeBSD| -i |outgoing IP packets | - |
|--------+------|(alternative to option -s). |---------|
| UNIX | -i | | - |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | N/A |Toggle checksum. | - |
|--------+------| |---------|
| FreeBSD| -x | | - |
|--------+------| |---------|
| UNIX | -x | | - |
|--------+------| |---------|
| WINDOWS| N/A | | - |
+--------+------+-------------------------------+---------+
| LINUX | - |As optional last parameter, |Depends |
|--------+------|LINUX, FreeBSD, and UNIX |on |
| FreeBSD| - |implementations allow |implement|
|--------+------|specifying the probe datagram |ation. |
| UNIX | - |length for outgoing probes. | |
|--------+------| | |
| WINDOWS| N/A | | |
+--------+------+-------------------------------+---------+
A.1. Alternative Traceroute Implementations ๐ฆ
okay so, as we said earlier, firewalls are kind of a menace ๐ because they can be so picky that UDP- or ICMP-based traceroutes can't fully trace the path to a destination. the probes just get filtered out and vanish. ๐ but there's a workaround that can sometimes help: send TCP packets instead, aimed at specific ports that hosts behind the firewall are listening on. TCP-based implementations use TCP, SYN, or FIN probes and listen for TIME_EXCEEDED messages, TCP RESET, and other messages from firewalls and gateways along the path. ๐ซถ
BUT (and this is the tea โ) some firewalls filter out TCP SYN packets to prevent denial-of-service attacks. so whether TCP beats UDP traceroute really depends on how the firewalls are configured, and you can't know that ahead of time. ๐ A detailed analysis of TCP-based traceroute tools and measurements is outside the scope of this document. still, for completeness, the information model also supports storing TCP-based traceroute measurements. โจ
Appendix B. Known Problems with Traceroute ๐ฅ
B.1. Compatibility between Traceroute Measurement Results and IPPM Metrics ๐
so this one is giving "known issue, no fix in sight" ๐ญ. because of implementation choices, there's an inconsistency between the round-trip delay metric the IPPM working group defined in RFC 2681 and the results returned by current traceroute tool implementations. and it's unlikely the traceroute tools will implement the standard definition anytime soon. ๐
so the only real option is to compare results from different traceroute measurements with each other. to make that possible, the operating system (name and version) and the traceroute tool version were added to the metadata elements. that way you can compare metrics between two measurement results, as long as they were run on the same operating system and the same tool version. ๐ง
and there's more ๐ฉ. the traceroute tool has built-in configurable mechanisms like timeouts, and it can run into trouble when crossing firewalls. so some of the packets traceroute sends out end up timing out or getting filtered. as a result, it might not be possible to trace the path to a node, or there might not be a complete enough set of probes to describe the RTT to reach it. ๐
Appendix C. Differences to DISMAN-TRACEROUTE-MIB ๐
okay so for remote traceroute operations at a managed node, the IETF has standardized the DISMAN-TRACEROUTE-MIB module in [RFC4560]. ๐ธ this module lets you:
- retrieve capability information about the traceroute tool implementation at the managed node;
- configure traceroute measurements to be performed;
- retrieve information about ongoing and completed traceroute measurements;
- retrieve traceroute measurement statistics.
the traceroute storage format in this document overlaps a lot with this MIB module ๐ฏโโ๏ธ. especially, the models for traceroute measurement configuration and for results from completed measurements are almost identical. but the other parts of the DISMAN-TRACEROUTE MIB module don't need to be modeled in a traceroute measurement storage format. the capability information, info about ongoing measurements, and measurement statistics are not covered by the DISMAN traceroute storage model. ๐ โโ๏ธ
there are structural differences too, caused by different choices of encoding. the DISMAN-TRACEROUTE-MIB uses the Structure of Management Information (SMIv2, STD 58, RFC 2578 [RFC2578]), while the IPPM traceroute measurement data model is encoded using XML. ๐
this difference in structure means the DISMAN-TRACEROUTE-MIB module has SMI-specific information elements (managed objects) that deal with tables of managed objects (specification, entry creation and deletion, status retrieval). those aren't required for the XML-encoded traceroute measurement data model. ๐ง
but for most of the remaining elements about configuring traceroute measurements and results of completed measurements, the semantics are identical between the DISMAN-TRACEROUTE-MIB module and the traceroute measurement data model. there are very few exceptions, which are listed below. naming is also identical between both models, with a few exceptions. the traceroute measurement data model adds a few information elements, some because of the different structure and some to give extra info on completed measurements. โจ
C.1. Scope ๐ญ
MIB modules and XML documents are basically different in nature and application. this leads to two major differences in scope between the DISMAN-TRACEROUTE-MIB module and the traceroute measurement data model. ๐
the first difference is the "traceRouteResultsTable" in the DISMAN-TRACEROUTE-MIB module. this table allows online observation of the status and progress of an ongoing traceroute measurement. that highly dynamic info isn't in the traceroute measurement data model, because the model was never meant to report the progress of individual measurements as they happen. it's really meant for reporting completed traceroute measurements. ๐
the second difference is that info in a MIB is usually tied to the local node hosting the MIB instance. the "RequestMetadata" element in the traceroute measurement data model can be used to specify a measurement request that may be applied to several probes in a network. that concept doesn't exist in the DISMAN-TRACEROUTE-MIB module. ๐
for the remaining elements in both the DISMAN-TRACEROUTE-MIB module and the traceroute measurement data model, the two line up really well. the "traceRouteCtlTable" corresponds to the "MeasurementMetadata" element, and the combo of the "traceRouteProbeHistoryTable" and the "traceRouteHopsTable" corresponds to a collection of "MeasurementResult" elements. ๐ซถ
C.2. Naming ๐ท๏ธ
basically, both models pick names using the same naming conventions. ๐
for the traceroute measurement configuration info, all names, like "CtlProbesPerHop", are identical in both models. the exceptions are that the traceRoute prefix was dropped to avoid unnecessary redundancy in the XML file, and "CtlDataSize" was renamed to "CtlProbeDataSize" for clarity in the traceroute measurement data model. โจ
results of measurements in the DISMAN-TRACEROUTE-MIB module are split across two tables. the "traceRouteResultsTable" mostly holds info about ongoing measurements, and the "traceRouteProbeHistoryTable" only holds info about completed measurements. because of SMIv2 naming conventions, the element names in these tables have different prefixes ("traceRouteResults" and "traceRouteProbeHistory"). since the traceroute measurement data model only reports completed measurements, that split isn't needed anymore, so the prefix "Results" is used for all related info elements. ๐
beyond that, only a few element names changed. the renames are:
"traceRouteProbeHistoryResponse"to"ProbeRoundTripTime";"traceRouteProbeHistoryHAddr"to"HopAddr";"traceRouteProbeHistoryTime"to"ResultsEndDateAndTime";"traceRouteProbeHistoryLastRC"to"ResultsHopRawOutputData".
C.3. Semantics ๐ง
only two information elements had their semantics changed. this is the part where things get a little spicy ๐ถ๏ธ.
for "traceRouteProbeHistoryResponse" in the DISMAN-TRACEROUTE-MIB, a value of 0 means it's not possible to transmit a probe. in the traceroute measurement data model, a value of 0 for the element "RoundTripTime" means the measured time was less than one millisecond. for the case where a probe couldn't be transmitted, a string is used to indicate the problem instead. ๐ฎ
for "traceRouteCtlIfIndex" in the DISMAN-TRACEROUTE-MIB, a value of 0 means the option to set the index isn't available. this was translated into the traceroute measurement data model so that a value of 0 for this element means the interface used is unknown. ๐คทโโ๏ธ
the element "traceRouteProbeHistoryLastRC" in the DISMAN-TRACEROUTE-MIB was replaced by the element "ResultsHopRawOutputData". "traceRouteProbeHistoryLastRC" just reports a reply code, but "ResultsHopRawOutputData" reports the full raw output data (per hop) produced by the traceroute measurement that was used. ๐งพ
C.4. Additional Information Elements โ
only a few information elements were added to the model compared to the DISMAN-TRACEROUTE-MIB module. ๐
- for providing info on the MPLS label stack entries of a probe in the traceroute measurement path,
"MPLSLabelStackEntry"was added; - for providing additional timestamps beyond
"ResultsEndDateAndTime","ResultsStartDateAndTime"and"Time"were added; - for providing DNS names at the time the traceroute was executed for each
"HopAddr"(which may change over time),"HopName"was added.
Appendix D. Traceroute Examples with XML Representation ๐งโโ๏ธ
okay bestie, this section shows some examples of traceroute applications ๐ท. it also shows how requests and results are encoded for some of those examples. and heads up: in these XML examples, some lines look wrapped because of the limited line length ๐. don't panic, it's just formatting ๐ซถ.
Okay bestie, so here's what a typical traceroute looks like on a LINUX system ๐ปโจ
# traceroute -f 4 www.example 1500
traceroute to ww.example (192.0.2.42), 30 hops max, 1500-byte packets
5 out.host1.example (192.0.2.254) 6.066 ms 5.625 ms 6.095 ms
6 rtr4.host6.example (192.0.2.142) 6.979 ms 6.221 ms 7.368 ms
7 hop7.rtr9.example (192.0.2.11) 16.165 ms 15.347 ms 15.514 ms
8 192.0.2.222 (192.0.2.222) 32.796 ms 28.723 ms 26.988 ms
9 in.example (192.0.2.123) 15.861 ms 16.262 ms 17.610 ms
10 in.example (192.0.2.123)(N!) 17.391 ms * *
Obsessed with how clean this is ๐ญ๐. This traceroute skips the first 4 hops and sends 1500-byte packets, header included ๐ฆ. It never actually reaches its goal, because the last listed hop says the network is not reachable (N!) ๐.
Here's how the same trace looks encoded in XML, no cap it's giving main character energy ๐๐ฆ:
<?xml version="1.0" encoding="UTF-8"?>
<traceRoute xmlns="urn:ietf:params:xml:ns:traceroute-1.0">
<RequestMetadata>
<TestName>Example 1</TestName>
<OSName/>
<OSVersion/>
<ToolVersion/>
<ToolName/>
<CtlTargetAddress>
<inetAddressDns>www.example</inetAddressDns>
</CtlTargetAddress>
<CtlBypassRouteTable/>
<CtlProbeDataSize>1472</CtlProbeDataSize>
<CtlTimeOut/>
<CtlProbesPerHop/>
<CtlPort/>
<CtlMaxTtl/>
<CtlDSField/>
<CtlSourceAddress>
<inetAddressUnknown/>
</CtlSourceAddress>
<CtlIfIndex/>
<CtlMiscOptions/>
<CtlMaxFailures/>
<CtlDontFragment/>
<CtlInitialTtl>4</CtlInitialTtl>
<CtlDescr>Show how it encodes in XML</CtlDescr>
<CtlType><UDP/></CtlType>
</RequestMetadata>
<Measurement>
<MeasurementMetadata>
<TestName>Example 1</TestName>
<OSName>Linux</OSName>
<OSVersion>2.6.16.54-0.2.5-smp i386</OSVersion>
<ToolVersion>1.0</ToolVersion>
<ToolName>traceroute</ToolName>
<CtlTargetAddress>
<inetAddressDns>www.example</inetAddressDns>
</CtlTargetAddress>
<CtlBypassRouteTable/>
<CtlProbeDataSize>1472</CtlProbeDataSize>
<CtlTimeOut/>
<CtlProbesPerHop/>
<CtlPort/>
<CtlMaxTtl/>
<CtlDSField/>
<CtlSourceAddress>
<inetAddressIpv4>192.0.2.1</inetAddressIpv4>
</CtlSourceAddress>
<CtlIfIndex>2</CtlIfIndex>
<CtlMiscOptions/>
<CtlMaxFailures/>
<CtlDontFragment/>
<CtlInitialTtl>4</CtlInitialTtl>
<CtlDescr>Show how it encodes in XML</CtlDescr>
<CtlType><UDP/></CtlType>
</MeasurementMetadata>
<MeasurementResult>
<TestName>Example 1</TestName>
<ResultsStartDateAndTime>2008-05-16T14:22:34+02:00</ResultsStar
tDateAndTime>
<ResultsIpTgtAddr>
<inetAddressIpv4>192.0.2.42</inetAddressIpv4>
</ResultsIpTgtAddr>
<ProbeResults>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.254</inetAddressIpv4>
</HopAddr>
<HopName>out.host1.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>6</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:35+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.254</inetAddressIpv4>
</HopAddr>
<HopName>out.host1.example</HopName>
<ProbeRoundTripTime><roundTripTime>5</roundTripTime></Pro
beRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:35+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.254</inetAddressIpv4>
</HopAddr>
<HopName>out.host1.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>6</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:35+02:00</Time>
</probe>
<HopRawOutputData> 5 out.host1.example (192.0.2.254) 6.06
6 ms 5.625 ms 6.095 ms</HopRawOutputData>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.142</inetAddressIpv4>
</HopAddr>
<HopName>rtr4.host6.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>6</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:36+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.142</inetAddressIpv4>
</HopAddr>
<HopName>rtr4.host6.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>6</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:36+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.142</inetAddressIpv4>
</HopAddr>
<HopName>rtr4.host6.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>7</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:37+02:00</Time>
</probe>
<HopRawOutputData> 6 rtr4.host6.example (192.0.2.142) 6.9
79 ms 6.221 ms 7.368 ms</HopRawOutputData>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.11</inetAddressIpv4>
</HopAddr>
<HopName>hop7.rtr9.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>16</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:37+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.11</inetAddressIpv4>
</HopAddr>
<HopName>hop7.rtr9.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>15</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:38+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.11</inetAddressIpv4>
</HopAddr>
<HopName>hop7.rtr9.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>15</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:38+02:00</Time>
</probe>
<HopRawOutputData> 7 hop7.rtr9.example (192.0.2.11) 16.16
5 ms 15.347 ms 15.514 ms</HopRawOutputData>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.222</inetAddressIpv4>
</HopAddr>
<ProbeRoundTripTime>
<roundTripTime>32</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:39+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.222</inetAddressIpv4>
</HopAddr>
<ProbeRoundTripTime>
<roundTripTime>38</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:39+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.222</inetAddressIpv4>
</HopAddr>
<ProbeRoundTripTime>
<roundTripTime>26</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:39+02:00</Time>
</probe>
<HopRawOutputData> 8 192.0.2.222 (192.0.2.222) 32.796 ms
28.723 ms 26.988 ms</HopRawOutputData>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.123</inetAddressIpv4>
</HopAddr>
<HopName>in.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>15</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:40+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.123</inetAddressIpv4>
</HopAddr>
<HopName>in.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>16</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:40+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.123</inetAddressIpv4>
</HopAddr>
<HopName>in.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>17</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-16T14:22:40+02:00</Time>
</probe>
<HopRawOutputData> 9 in.example (192.0.2.123) 15.861 ms
16.262 ms 17.610 ms</HopRawOutputData>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.123</inetAddressIpv4>
</HopAddr>
<HopName>in.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>17</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>noRouteToTarget</ResponseStatus>
<Time>2008-05-16T14:22:41+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.123</inetAddressIpv4>
</HopAddr>
<HopName>in.example</HopName>
<ProbeRoundTripTime>
<roundTripTimeNotAvailable/>
</ProbeRoundTripTime>
<ResponseStatus>requestTimedOut</ResponseStatus>
<Time>2008-05-16T14:22:44+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.123</inetAddressIpv4>
</HopAddr>
<HopName>in.example</HopName>
<ProbeRoundTripTime>
<roundTripTimeNotAvailable/>
</ProbeRoundTripTime>
<ResponseStatus>requestTimedOut</ResponseStatus>
<Time>2008-05-16T14:22:44+02:00</Time>
</probe>
<HopRawOutputData>10 in.example (192.0.2.123)(N!) 17.391
ms * *</HopRawOutputData>
</hop>
</ProbeResults>
<ResultsEndDateAndTime>2008-05-16T14:22:44+02:00</ResultsEndDat
eAndTime>
</MeasurementResult>
</Measurement>
</traceRoute>
Okay bestie, the second example was run on an OpenBSD box ๐ป๐ Here's what the traceroute looks like there:
# traceroute -P tcp w2.example 128
traceroute to w2.example (192.0.2.254), 64 hops max, 160-byte packets
1 router1.example.org (192.0.2.22) 0.486 ms 0.486 ms 0.482 ms
2 router7.example.org (192.0.2.1) 3.27 ms 1.420 ms 1.873 ms
3 hop0.c.example (192.0.2.105) 3.177 ms 3.258 ms 3.859 ms
4 hop6.c.example (192.0.2.107) 5.994 ms 4.607 ms 5.678 ms
5 hop3.c.example (192.0.2.111) 20.341 ms 20.732 ms 19.505 ms
6 in.example.net (192.0.2.222) 20.333 ms 19.174 ms 19.856 ms
7 egress.example.net (192.0.2.227) 20.268 ms 21.79 ms 19.992 ms
8 routerin.example (192.0.2.253) 19.983 ms 19.931 ms 19.894 ms
9 routerdmz.example (192.0.2.249) 20.943 ms !X * 19.829 ms !X
This one used the TCP protocol and 128-byte packets (plus header) ๐ธ The traceroute stopped at hop 9 because the packets got administratively filtered, which is why you see the !X marks ๐ Lowkey iconic output, ngl ๐
Here's the XML version of that same run, showing how it encodes ๐ฆ
<?xml version="1.0" encoding="UTF-8"?>
<traceRoute xmlns="urn:ietf:params:xml:ns:traceroute-1.0">
<RequestMetadata>
<TestName>Example 2</TestName>
<OSName/>
<OSVersion/>
<ToolVersion/>
<ToolName/>
<CtlTargetAddress>
<inetAddressDns>w2.example</inetAddressDns>
</CtlTargetAddress>
<CtlBypassRouteTable/>
<CtlProbeDataSize>128</CtlProbeDataSize>
<CtlTimeOut/>
<CtlProbesPerHop/>
<CtlPort/>
<CtlMaxTtl/>
<CtlDSField/>
<CtlSourceAddress>
<inetAddressUnknown/>
</CtlSourceAddress>
<CtlIfIndex/>
<CtlMiscOptions/>
<CtlMaxFailures/>
<CtlDontFragment/>
<CtlInitialTtl/>
<CtlDescr>Show how it encodes in XML</CtlDescr>
<CtlType><TCP/></CtlType>
</RequestMetadata>
<Measurement>
<MeasurementMetadata>
<TestName>Example 2</TestName>
<OSName>OpenBSD</OSName>
<OSVersion>4.1 i386</OSVersion>
<ToolVersion></ToolVersion>
<ToolName>traceroute</ToolName>
<CtlTargetAddress>
<inetAddressDns>w2.example</inetAddressDns>
</CtlTargetAddress>
<CtlBypassRouteTable/>
<CtlProbeDataSize>128</CtlProbeDataSize>
<CtlTimeOut/>
<CtlProbesPerHop/>
<CtlPort/>
<CtlMaxTtl/>
<CtlDSField/>
<CtlSourceAddress>
<inetAddressIpv4>192.0.2.42</inetAddressIpv4>
</CtlSourceAddress>
<CtlIfIndex>1</CtlIfIndex>
<CtlMiscOptions/>
<CtlMaxFailures/>
<CtlDontFragment/>
<CtlInitialTtl/>
<CtlDescr>Show how it encodes in XML</CtlDescr>
<CtlType><TCP/></CtlType>
</MeasurementMetadata>
<MeasurementResult>
<TestName>Example 2</TestName>
<ResultsStartDateAndTime>2008-05-14T09:57:11+02:00</ResultsStar
tDateAndTime>
<ResultsIpTgtAddr>
<inetAddressIpv4>192.0.2.254</inetAddressIpv4>
</ResultsIpTgtAddr>
<ProbeResults>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.22</inetAddressIpv4>
</HopAddr>
<HopName>router1.example.org</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:13+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.22</inetAddressIpv4>
</HopAddr>
<HopName>router1.example.org</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:13+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.22</inetAddressIpv4>
</HopAddr>
<HopName>router1.example.org</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:13+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.1</inetAddressIpv4>
</HopAddr>
<HopName>router7.example.org</HopName>
<ProbeRoundTripTime>
<roundTripTime>3</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:13+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.1</inetAddressIpv4>
</HopAddr>
<HopName>router7.example.org</HopName>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:13+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.1</inetAddressIpv4>
</HopAddr>
<HopName>router7.example.org</HopName>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:14+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.105</inetAddressIpv4>
</HopAddr>
<HopName>hop0.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>3</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:14+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.105</inetAddressIpv4>
</HopAddr>
<HopName>hop0.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>3</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:14+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.105</inetAddressIpv4>
</HopAddr>
<HopName>hop0.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>3</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:14+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.107</inetAddressIpv4>
</HopAddr>
<HopName>hop6.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>5</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:15+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.107</inetAddressIpv4>
</HopAddr>
<HopName>hop6.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>4</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:16+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.107</inetAddressIpv4>
</HopAddr>
<HopName>hop6.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>5</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:16+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.111</inetAddressIpv4>
</HopAddr>
<HopName>hop3.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>20</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:17+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.111</inetAddressIpv4>
</HopAddr>
<HopName>hop3.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>20</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:18+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.111</inetAddressIpv4>
</HopAddr>
<HopName>hop3.c.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:19+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.222</inetAddressIpv4>
</HopAddr>
<HopName>in.example.net</HopName>
<ProbeRoundTripTime>
<roundTripTime>20</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:20+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.222</inetAddressIpv4>
</HopAddr>
<HopName>in.example.net</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:20+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.222</inetAddressIpv4>
</HopAddr>
<HopName>in.example.net</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:21+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.227</inetAddressIpv4>
</HopAddr>
<HopName>egress.example.net</HopName>
<ProbeRoundTripTime>
<roundTripTime>20</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:22+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.227</inetAddressIpv4>
</HopAddr>
<HopName>egress.example.net</HopName>
<ProbeRoundTripTime>
<roundTripTime>21</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:22+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.227</inetAddressIpv4>
</HopAddr>
<HopName>egress.example.net</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:23+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.253</inetAddressIpv4>
</HopAddr>
<HopName>routerin.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:24+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.253</inetAddressIpv4>
</HopAddr>
<HopName>routerin.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:24+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.253</inetAddressIpv4>
</HopAddr>
<HopName>routerin.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T09:57:25+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.249</inetAddressIpv4>
</HopAddr>
<HopName>routerdmz.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>20</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>unknown</ResponseStatus>
<Time>2008-05-14T09:57:26+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.249</inetAddressIpv4>
</HopAddr>
<HopName>routerdmz.example</HopName>
<ProbeRoundTripTime>
<roundTripTimeNotAvailable/>
</ProbeRoundTripTime>
<ResponseStatus>requestTimedOut</ResponseStatus>
<Time>2008-05-14T09:57:26+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.249</inetAddressIpv4>
</HopAddr>
<HopName>routerdmz.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>19</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>unknown</ResponseStatus>
<Time>2008-05-14T09:57:30+02:00</Time>
</probe>
</hop>
</ProbeResults>
<ResultsEndDateAndTime>2008-05-14T09:57:30+02:00</ResultsEndDat
eAndTime>
</MeasurementResult>
</Measurement>
</traceRoute>
Okay so for the third and last example we're going over the Microsoft Windows version of traceroute ๐ป๐. On a Windows machine the command is called "tracert", and it usually gets typed in like this:
# tracert -h 10 www.example.org
And the output looks something like this ๐โจ:
Tracing route to www.example.org [192.0.2.11]
over a maximum of 10 hops:
1 1 ms 1 ms 8 ms 192.0.2.99
2 <1 ms <1 ms <1 ms r1.provider4.example [192.0.2.102]
3 <1 ms <1 ms <1 ms rtr8.provider8.example [192.0.2.254]
4 1 ms 1 ms 1 ms hop11.hoster7.example [192.0.2.4]
5 2 ms 3 ms 1 ms sw6.provider2.example [192.0.2.201]
6 3 ms 3 ms 3 ms out.provider2.example [192.0.2.111]
7 * 6 ms 5 ms 192.0.2.123
8 5 ms 5 ms 5 ms 192.0.2.42
9 94 ms 95 ms 95 ms ingress.example.org [192.0.2.199]
10 168 ms 169 ms 169 ms 192.0.2.44
Trace complete.
Okay so in this example the trace was capped at 10 hops, which means hop 10 wasn't the final destination yet ๐ง Now let's see how the XML schema from this document would actually encode it ๐
<?xml version="1.0" encoding="UTF-8"?>
<traceRoute xmlns="urn:ietf:params:xml:ns:traceroute-1.0">
<RequestMetadata>
<TestName>Example 3</TestName>
<OSName/>
<OSVersion/>
<ToolVersion/>
<ToolName/>
<CtlTargetAddress>
<inetAddressDns>www.example.org</inetAddressDns>
</CtlTargetAddress>
<CtlBypassRouteTable/>
<CtlProbeDataSize/>
<CtlTimeOut/>
<CtlProbesPerHop/>
<CtlPort/>
<CtlMaxTtl>10</CtlMaxTtl>
<CtlDSField/>
<CtlSourceAddress>
<inetAddressUnknown/>
</CtlSourceAddress>
<CtlIfIndex/>
<CtlMiscOptions/>
<CtlMaxFailures/>
<CtlDontFragment/>
<CtlInitialTtl/>
<CtlDescr>Show how it encodes in XML</CtlDescr>
<CtlType><TCP/></CtlType>
</RequestMetadata>
<Measurement>
<MeasurementMetadata>
<TestName>Example 3</TestName>
<OSName>Windows</OSName>
<OSVersion>XP SP2 32-bit</OSVersion>
<ToolVersion></ToolVersion>
<ToolName>tracert</ToolName>
<CtlTargetAddress>
<inetAddressDns>www.example.org</inetAddressDns>
</CtlTargetAddress>
<CtlBypassRouteTable/>
<CtlProbeDataSize/>
<CtlTimeOut/>
<CtlProbesPerHop/>
<CtlPort/>
<CtlMaxTtl>10</CtlMaxTtl>
<CtlDSField/>
<CtlSourceAddress>
<inetAddressIpv4>192.0.2.142</inetAddressIpv4>
</CtlSourceAddress>
<CtlIfIndex>3</CtlIfIndex>
<CtlMiscOptions/>
<CtlMaxFailures/>
<CtlDontFragment/>
<CtlInitialTtl/>
<CtlDescr>Show how it encodes in XML</CtlDescr>
<CtlType><TCP/></CtlType>
</MeasurementMetadata>
<MeasurementResult>
<TestName>Example 3</TestName>
<ResultsStartDateAndTime>2008-05-14T11:03:09+02:00</ResultsStar
tDateAndTime>
<ResultsIpTgtAddr>
<inetAddressIpv4>192.0.2.11</inetAddressIpv4>
</ResultsIpTgtAddr>
<ProbeResults>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.99</inetAddressIpv4>
</HopAddr>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.99</inetAddressIpv4>
</HopAddr>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.99</inetAddressIpv4>
</HopAddr>
<ProbeRoundTripTime>
<roundTripTime>8</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.102</inetAddressIpv4>
</HopAddr>
<HopName>r1.provider4.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.102</inetAddressIpv4>
</HopAddr>
<HopName>r1.provider4.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.102</inetAddressIpv4>
</HopAddr>
<HopName>r1.provider4.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.254</inetAddressIpv4>
</HopAddr>
<HopName>rtr8.provider8.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.254</inetAddressIpv4>
</HopAddr>
<HopName>rtr8.provider8.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.254</inetAddressIpv4>
</HopAddr>
<HopName>rtr8.provider8.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>0</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.4</inetAddressIpv4>
</HopAddr>
<HopName>hop11.hoster7.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:09+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.4</inetAddressIpv4>
</HopAddr>
<HopName>hop11.hoster7.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:10+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.4</inetAddressIpv4>
</HopAddr>
<HopName>hop11.hoster7.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:10+02:00</Time>
</probe>
</hop>
<hop>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.201</inetAddressIpv4>
</HopAddr>
<HopName>sw6.provider2.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>2</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:10+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.201</inetAddressIpv4>
</HopAddr>
<HopName>sw6.provider2.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>3</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:11+02:00</Time>
</probe>
<probe>
<HopAddr>
<inetAddressIpv4>192.0.2.201</inetAddressIpv4>
</HopAddr>
<HopName>sw6.provider2.example</HopName>
<ProbeRoundTripTime>
<roundTripTime>1</roundTripTime>
</ProbeRoundTripTime>
<ResponseStatus>responseReceived</ResponseStatus>
<Time>2008-05-14T11:03:11+02:00</Time>
</probe> </hop> <hop> <probe> <HopAddr> <inetAddressIpv4>192.0.2.111</inetAddressIpv4> </HopAddr> <HopName>out.provider2.example</HopName> <ProbeRoundTripTime> <roundTripTime>3</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:11+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.111</inetAddressIpv4> </HopAddr> <HopName>out.provider2.example</HopName> <ProbeRoundTripTime> <roundTripTime>3</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:11+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.111</inetAddressIpv4> </HopAddr> <HopName>out.provider2.example</HopName> <ProbeRoundTripTime> <roundTripTime>3</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:12+02:00</Time> </probe> </hop> <hop> <probe> <HopAddr> <inetAddressIpv4>192.0.2.123</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTimeNotAvailable/> </ProbeRoundTripTime> <ResponseStatus>requestTimedOut</ResponseStatus> <Time>2008-05-14T11:03:14+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.123</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>6</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:15+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.123</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>5</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:16+02:00</Time> </probe> </hop> <hop> <probe> <HopAddr> <inetAddressIpv4>192.0.2.42</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>5</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:17+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.42</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>5</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:17+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.42</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>5</roundTripTime>
</ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:17+02:00</Time> </probe> </hop> <hop> <probe> <HopAddr> <inetAddressIpv4>192.0.2.199</inetAddressIpv4> </HopAddr> <HopName>ingress.example.org</HopName> <ProbeRoundTripTime> <roundTripTime>94</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:19+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.199</inetAddressIpv4> </HopAddr> <HopName>ingress.example.org</HopName> <ProbeRoundTripTime> <roundTripTime>95</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:19+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.199</inetAddressIpv4> </HopAddr> <HopName>ingress.example.org</HopName> <ProbeRoundTripTime> <roundTripTime>95</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:19+02:00</Time> </probe> </hop> <hop> <probe> <HopAddr> <inetAddressIpv4>192.0.2.44</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>168</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:20+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.44</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>169</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:21+02:00</Time> </probe> <probe> <HopAddr> <inetAddressIpv4>192.0.2.44</inetAddressIpv4> </HopAddr> <ProbeRoundTripTime> <roundTripTime>169</roundTripTime> </ProbeRoundTripTime> <ResponseStatus>responseReceived</ResponseStatus> <Time>2008-05-14T11:03:23+02:00</Time> </probe> </hop> </ProbeResults> <ResultsEndDateAndTime>2008-05-14T11:03:23+02:00</ResultsEndDat eAndTime> </MeasurementResult> </Measurement> </traceRoute>
okay so that's the last of the three examples, bestie ๐ and i know that's a LOT of XML to scroll through, but the whole point is just to give you a vibe for what a trace looks like once it's been turned into XML ๐ the way every hop has its probes lined up, each with its own address, round trip time and status, is honestly so satisfying ๐ญ and the thing to remember is that the output your implementation makes might look different from these, because it depends on the system and what the traceroute tool can actually do ๐ฆ
Authors' Addresses โจ
The authors are the NEC Laboratories Europe crew (plus one from the University of Delaware), and here are their contact details, copied exactly as they were written ๐
Saverio Niccolini
NEC Laboratories Europe, NEC Europe Ltd.
Kurfuersten-Anlage 36
Heidelberg 69115
Germany
Phone: +49 (0) 6221 4342 118
EMail: saverio.niccolini@nw.neclab.eu
URI: http://www.nw.neclab.eu
Sandra Tartarelli
NEC Laboratories Europe, NEC Europe Ltd.
Kurfuersten-Anlage 36
Heidelberg 69115
Germany
Phone: +49 (0) 6221 4342 132
EMail: sandra.tartarelli@nw.neclab.eu
URI: http://www.nw.neclab.eu
Juergen Quittek
NEC Laboratories Europe, NEC Europe Ltd.
Kurfuersten-Anlage 36
Heidelberg 69115
Germany
Phone: +49 (0) 6221 4342 115
EMail: quittek@nw.neclab.eu
URI: http://www.nw.neclab.eu
Thomas Dietz
NEC Laboratories Europe, NEC Europe Ltd.
Kurfuersten-Anlage 36
Heidelberg 69115
Germany
Phone: +49 (0) 6221 4342 128
EMail: thomas.dietz@nw.neclab.eu
URI: http://www.nw.neclab.eu
Martin Swany
Dept. of Computer and Information Sciences
University of Delaware
Newark DE 19716
U.S.A.
EMail: swany@UDel.Edu
๐ฆ where this page comes from
- ietf: rfc5388 2008-12
- ๐ girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms