Implementing An Express SIP NAT Traversal Server

Song, Meina; Chi, Jing; Pi, Renjie; Song, Junde

doi:10.1109/icpca.2007.4365500

Cited by 2 publications

(2 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Depending on the type of client, the register message rate observed is around 1-17s (while in the normal case it is between 100-180s). Typical clients make a few tries (typically [8][9][10][11][12][13][14][15][16][17][18][19][20] in tight succession and then wait for a time period before trying again. The observed time periods of waiting varythe shortest one observed was 30s, the longest 1200s.…”

Section: Analysis Of the Actual Registration Stormmentioning

confidence: 99%

See 1 more Smart Citation

Analyzing anomalies in anonymized SIP traffic

Stanek

Kencl

Kuthan³

2014

2014 IFIP Networking Conference

View full text Add to dashboard Cite

The Session Initiation Protocol (SIP) is a signaling protocol widely used nowadays for controlling multimedia communication sessions. Thus, understanding and troubleshooting SIP behavior is of utmost importance to network designers and operators. However, SIP traffic traces are hard to come by due to privacy and confidentiality issues. SIP contains a lot of personal information spread within the various SIP messages -IP addresses, names, usernames and domains, e-mail addresses etc. The known IP-address anonymization methods are thus insufficient. We present SiAnTo, an extended anonymization technique that substitutes session-participant information with matching, but nondescript, labels. This allows for SIP traces to be publicly shared, while keeping interesting traffic-session properties intact. We further demonstrate its usefulness by studying the problem of SIP NAT traversal as recorded in the anonymized traces. We analyze properties of the so-called "registration storm" incident and measure the influence of the active NAT traversal techniques on SIP traffic pattern, both only possible thanks to the preservation of session relationships inside the anonymized traces. As further benefit to the research community, we set up a public data-store with both the anonymization module and the anonymized traces available and invite other parties to share further SIP data using these open tools.

show abstract

Section: Analysis Of the Actual Registration Stormmentioning

confidence: 99%

“…al. [13]. Even though there are many proposals how to solve the NAT traversal issues, none of these was adopted as a general solution since they typically impose strict requirements on the SIP devices and so active NAT keep-alive "pinging" methods are still used by SIP clients and servers.…”

Section: Introductionmentioning

confidence: 99%