A Formalized Packet-filtering Model in TCP/IP Protocol Suite

陈捷,熊云凤,杨宇航

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.10.052

2001-01-01

Abstract:A formalized packet-filtering model is presented in this paper. By using this model, the author implemented the packet-filtering software on FreeBSD operating system. Some application and effectiveness of this model are also discussed.

What problem does this paper attempt to address?

A Formalized NAT Model in TCP/IP Protocol Suite

陈捷,宋治平,杨宇航

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.07.056

2002-01-01

Abstract:A formalized NAT model is presented in this paper.By using this model, the author implements the NAT software on FreeBSD operating system.Some applications and effectiveness of this model are also discussed. ;;;
A Dynamic Model of TCP/IP Networks

王彬,戴连奎,吴铁军

DOI: https://doi.org/10.3969/j.issn.1007-0249.2004.01.017

2004-01-01

Abstract:With the rapid development of Internet, congestion becomes one of the major problems to be solved in network communication. Many congestion control schemes have been figured out to ensure the robustness and stability of TCP/IP networks. They are usually classified into two categories: end-to-end, such as TCP control algorithm, and Active Queue Management (AQM) schemes. However, most of these schemes are based on expert experience, not on the network dynamic characteristics. For this reason, the purpose of this paper is to analyze TCP/IP networks in control theory. Specifically, a fluid-based data transmission dynamic model is built for a simple TCP/IP network with a single bottle-neck link, then this simple network is decomposed into several basic parts with respective dynamic models. The model of the whole network is thus built from synthesizing models of sub- networks mentioned above. Based on the proposed dynamic model, performances of TCP/IP networks can be estimated and new algorithms for congestion control can be developed. This model is well validated by comparing the analytical results with the NS simulation results.
A TCP-Friendly Fair Packet Marking Algorithm in DiffServ

刘正蓝,朱淼良,董亚波

2004-01-01

Abstract:Researchers found unfairness in DiffServ network. To solve this problem, a TSW-based marker is proposed, which is called TCP-friendly fair packet marking algorithm (TFPM). With this marker, proportional fair sharing of excess bandwidth among aggregate can be achieved, and so the better fairness between TCP and UDP flows in an aggregate. The validation of this marking algorithm through simulation experimentation is made, and the simulation result is compared with some other marking algorithms, which verifies that the TFPM algorithm has better fairness than other algorithms.
A TCP-Friendly UDP Congestion Control Scheme Based on Explicit Rate

王彬,吴铁军

DOI: https://doi.org/10.3969/j.issn.1007-0249.2003.05.010

2003-01-01

Abstract:A new UDP congestion control scheme based on explicit rate is proposed. According to this scheme, the end-systems, supported by the network routers, get the fair bandwidth of the bottleneck link in the connection. The sender regulates their send-rate to its alloted fair bandwidth smoothly. The proposed UDP congestion control scheme is TCP-friendly and easy to be implemented. Result of simulations shows the new UDP congestion control scheme has better performance than the other UDP congestion control schemes such as TCP-Friendly Rate Control (TFRC) protocol, especial in the throughput and TCP-friendliness. And the result also reveals the scheme is robust to the algorithms of queue management, such as Droptail and RED.
Modeling of TCP-Rab Throughput and Its Empirical Study

汤旭红,刘正蓝,朱淼良

DOI: https://doi.org/10.3321/j.issn:1000-436x.2004.08.004

2004-01-01

Abstract:In our previous work, a new TCP protocol which is named receiver advertisement based TCP (TCP-Rab) is proposed. The design and implementation of Rab's algorithm are described in details in the literature [1]. In this paper, we made only a little modification on TCP-Rab, the pivot issue of this paper is focused on the throughput model and empirical study of Rab. In the procedure of the deduction, we adopt a statistical technique. This model takes account of not only the effect of congestion avoidance phase, but also the effect of slow start phase on TCP throughput, and also the effect of multiple random packet loss in one window, so this model is competent for actual Internet.
A Hybrid Simulating Framework of TCP Traffic at Aggregated Level

Yufeng Chen,Yabo Dong,Zhengtao Xiang,Dongming Lu

DOI: https://doi.org/10.1109/chinacom.2008.4685032

2008-01-01

Abstract:To obtain a trade-off between veracity and complexity when simulating TCP traffic, a hybrid simulating framework is proposed based on the packet-level simulation and aggregated control. The aggregated TCP traffic of access network in the gateway is proposed as simulated object, instead of the traffic generated at individual host or session level. The framework is divided into four parts: traffic generator, transmission controller, traffic sink and network. The traffic with self-similarity or multi-fractal property at application level is generated by traffic generator. The transmission controller sends packets to traffic sink based on aggregated control. The transmission controller also sends control information to traffic generator according to the status of network, and the traffic generator decides how to change the generating mode of traffic. The simulation results of non-congestion case and congestion case show the validity of the framework. The time cost shows our simulating framework possesses better performance.
Implementation of Network Processor-Based Content Filtering

CHEN Hong-tao,CHEN De-ren,GU Xue-fei

2005-01-01

Abstract:Content filtering is an indispensable important part in the network security field.It analyses the information transported in application layer content protocol and controls the forwarding of the information based on the filtering rules.Network Processor is a new generation programmable processor of high speed for carrying out data processing and transmitting.With its obvious advantages in network data processing,the network processor becomes the essential component in high-speed network equipment which supports network functions,such as operation management、security and network monitoring,etc.Based on the advantage of network processor,this paper presented an implementation of an Intel IXP2400 network processor-based content filtering system.
Design and Hardware Implementation of TCP Packet Filtering Based on State Detection

CHI Xiu-wei,TANG Shuo-fei,JI Zhen-zhou,LI Xin

DOI: https://doi.org/10.3969/j.issn.1007-130X.2006.10.009

2006-01-01

Abstract:State detection is the main stream of the current firewall technologies. This paper introduces the principle of state detection firewall.The flowchart of state detection and the model of state transition for the TCP packets are presented.A method of sequence number scope check and dynamic timeout management ensures the system security.A hash algorithm is adopted to manage the state table,and the design is implemented on FPGA.The experiment shows that the design can work well in a Gigabit network environment.
Fuzzy-Affine-Model-Based Filtering Design with Memory-Based Dynamic Event-Triggered Protocol

Yuyan Wu,Jun Cheng,Zheng-Guang Wu

DOI: https://doi.org/10.1109/tfuzz.2022.3199822

IF: 12.253

2022-01-01

IEEE Transactions on Fuzzy Systems

Abstract:In this article, a novel dynamic event-triggered protocol is constructed to deal with the filtering problem for affine systems presented by Takagi–Sugeno (T–S) fuzzy model. Unlike the traditional fuzzy systems, a unified framework of T–S fuzzy affine systems is formulated, which is more capable of approximation over different operating regions. For achieving desirable performance while saving communication resources, the memory-based dynamic event-triggered protocol is constructed by flexibly exploiting a series of historically triggered packets. The fading channel is time-varying and described as a novel nonhomogeneous Markov process, in which a higher level deterministic switching signal regulates the variation of transition probabilities. By adopting the region-dependent Lyapunov theory, the mean-square exponentially stable, and expected $H_{\infty }$ performance for resulting systems is guaranteed. In the end, an inverted pendulum model is applied to verify the results of the theoretical analysis.
A Hierarchy Component Model of Linux TCP/IP Protocol Stack

尹彦,陈天洲,吴朝晖,芦东昕

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.20.022

2004-01-01

Abstract:This paper studies the Linux module mechanism closely related to component technique, successfully splites the TCP/IP protocol stack into components by hierarchy, proves the feasibility and superiority by introducing CBSE technology to TCP/IP Protocol Stack.
Packet-Dropping Model of Multiple TCP Connections

陈相宁,王京,程时昕,陈明,蒋朱成

DOI: https://doi.org/10.3321/j.issn:0372-2112.2002.07.015

2002-01-01

Abstract:In this paper,we propose an analytical model for the dropping behavior at the network bottleneck where large number of TCP (Transmission controd protocol) connections exist.The inevitable congestion and buffer overflow at the bottleneck is the main reason of the packet loss in networks,which has great influence on the network performance.This model predicts the packet loss rate and transmission interruption rate of the sustained TCP connections sharing the bottleneck link.If most packet-losses are caused by network congestion,our models can give close approximations to the real networks that always contain many connections.The analytical model is useful in studying the effects of TCP,finding new effective algorithm of congestion control,and determining how TCP needs to be modified in the long term for efficient operation over emerging networks.
A New Stateless Packet Classification and Filter Against DoS Attacks.

Guang Jin,Qian Wang,Xianliang Jiang

DOI: https://doi.org/10.4304/jnw.9.2.291-296

2014-01-01

Journal of Networks

Abstract:Capabilities is a typical scheme of stateless filtering. In order to classify and filter packets effectively, a novel scheme of packet classification and filter based on capabilities is proposed in this paper. In our scheme, a new classifier module is added and a new filter structure is designed. We employ capabilities as verification and introduce new authorization in the communications. All these innovations make packet classification owning good effects in attacking scenario. The experimental results based on large-scale topology datasets and NS2 show that our scheme is better than traditional packet classification algorithms, especially under complex cyber environment.
The precision for fluid flow model of window-size behavior of the transmission control protocol

Hui Wang,Zhenzhou Ji,Huijie Qiao,Yandong Sun

2012-01-01

Abstract:The fiuid flow model described the window-size behavior in transmission control protocol (TCP) when there is traffic congestion in networks. Based on this, the explicit formulation of the TCP window-size is obtained through some tricky reformation while the round trip time (RTT) is a constant. Then some more precise calculations are carried out to obtain more fitted results. Further, some theoretical analysis results are obtained while RTT is an ordinary function or a Poisson process, which actually validates the fluid flow model in theory with respect to the window-size behavior of TCP. © 2012 ICIC International.
A Control Theoretic Analysis of Mixed TCP and UDP Traffic under RED Based on Nonlinear Dynamic Model

Zeng-zhi Li,Yan-ping Chen

DOI: https://doi.org/10.1109/ICITA.2005.6

2005-01-01

Abstract:A nonlinear dynamic model combined TCP and UDP under RED mechanism has been presented in this paper by modified a previously developed one. We linearized the model and added the feedback control mechanism that is introduced by RED, and then educed a proposition. Based on this proposition, we analyzed the impact of several parameters on the system stability, and we can present design guidelines for choosing network parameters that lead to stable operation of the linear feedback control system. We also performed simulations using NS2, and the results show that our analysis is suitable.
Modeling TCP Window Evolution Process with both Discrete and Fluid Models

Guohan Lu,Xing Li

2002-01-01

Abstract:Fluid model and discrete-packet model are two approaches to model TCP, where different loss processes are used in different models. In this paper, we present both a discrete SMP model and a fluid model to model the TCP window evolution process. Loss process is I.I.D. in the SMP model, and is a poisson process with window size dependent arrival rate in the fluid model. Analysis shows that the discrete SMP model approaches to the fluid model as 0 p → , which sets up a connection between discrete-packet models and fluid models. It allows us to understand the relationship between several existing fluid models and discrete-packet models, especially the relationship between different loss processes. In addition, we analyze the impact of maximum window size limitation ( lim W ) to the throughput, and a simple relation between the lim W and average window size ( aver W ) is obtained. Finally, a set of experiment is conducted over the real Internet and in simulation to validate the model. Keywords—TCP window evolution process, SMP, Fluid
Cross-layer modeling and analysis of TCP communications over turbulent FSO links

Yufei Luo,Yalong Hai,Anhong Dang

DOI: https://doi.org/10.1364/oe.486198

IF: 3.8

2023-01-01

Optics Express

Abstract:This paper addresses the accurate characterization of the performance of transmission control protocol (TCP) for end-to-end transport services over free-space optical (FSO) links. Unlike previous works on this topic, we introduce a second-order Markovian assumption for the variation of the TCP congestion window to capture the memory from turbulence channels and further propose a Markov chain model that maps two consecutive congestion windows along time into the state space to interpret TCP operations. The analytical expression of steady-state probability distribution vector of the proposed model in general cases where relay routers exist behind the TCP connection is derived, based on which the throughput efficiency of TCP is formulated. The high accuracy of the proposed model is verified by Monte-Carlo simulations and experiments. We further analyze the impact of different link/channel parameters on the TCP performance, and discuss briefly the effectiveness of bundle protocol-based schemes for improving the performance of FSO networks from a transport layer perspective.
Research of the Multi-protocol Proxy on the Application Layer Using Virtual C/S Model

Chen He

Abstract:This paper introduces the designing of the multiprotocol proxy on the application layer based on virtual C/S model. And FTP proxy is used as an example to illustrate the realization of the proposed designing scheme

Engineering,Computer Science
Modeling and analyzing of TCP fairness in Wireless Mesh Network

ZHANG Lei,YANG Shou-Bao,WANG Da-Peng,SUN Wei-Feng

2007-01-01

Abstract:TCP unfairness is a critical problem in Wireless Mesh Network.Fair TCP services with high quality are difficult to obtain.However,modeling for the related protocols of different layers will greatly help us analyze the active factors of TCP fair transmission and come up with better protocol design for Wireless Mesh Network.The state transitions of MAC and TCP were modelings based on Markov chain in typical IEEE 802.11b/g based Wireless Mesh Network.Then,the TCP delay and throughput were analyzed based on the modeling.The contrast between simulation results and theoretic values of delay and throughput proves that the modeling and analyzing are correct.The important factors found are helpful for research on TCP fairness in Wireless Mesh Network.
Generalized Modeling and Stability Analysis of HighSpeed TCP and Scalable TCP.

XM Huang,C Lin,FY Ren

DOI: https://doi.org/10.1093/ietcom/e89-b.2.605

2006-01-01

IEICE Transactions on Communications

Abstract:In this letter we examine two transport protocols, High-Speed TCP [1] and Scalable TCP [2] which are both sender-side varieties of TCP. Based on the fluid flow theory, we develop a general nonlinear model and use gain margin and phase margin to evaluate the stability of a closed-loop system which is composed of a transport protocol and an active queue management scheme. Our results indicate that HSTCP and STCP are stabler than standard TCP when link bandwidth, flow number and round-trip time vary.
Modeling TCP Sack steady state performance in lossy networks

Wei Xu,Yinlong Xu,Xiaohu Wu,Kaiqian Ou

DOI: https://doi.org/10.1109/ICOIN.2011.5723193

2011-01-01

Abstract:Modeling TCP performance is an important issue which has attracted research over the past two decades. Most literatures are to measure the steady state throughput of TCP Reno, however, few existing literatures are on modeling the throughput of the other important TCP variant, TCP Selective Acknowledgment (Sack). In this paper, an analytic model for the TCP Sack steady state throughput is proposed as a function of round trip time and packet loss rate. The presented model not only captures the behavior of fast recovery mechanism of Sack which is the main difference with Reno but also takes unsuccessful retransmission timeout in consideration. Those results simulated by ns2 show that our model can capture steady state TCP Sack throughput more accurately than existing TCP Sack model.

A Formalized Packet-filtering Model in TCP/IP Protocol Suite

A Formalized NAT Model in TCP/IP Protocol Suite

A Dynamic Model of TCP/IP Networks

A TCP-Friendly Fair Packet Marking Algorithm in DiffServ

A TCP-Friendly UDP Congestion Control Scheme Based on Explicit Rate

Modeling of TCP-Rab Throughput and Its Empirical Study

A Hybrid Simulating Framework of TCP Traffic at Aggregated Level

Implementation of Network Processor-Based Content Filtering

Design and Hardware Implementation of TCP Packet Filtering Based on State Detection

Fuzzy-Affine-Model-Based Filtering Design with Memory-Based Dynamic Event-Triggered Protocol

A Hierarchy Component Model of Linux TCP/IP Protocol Stack

Packet-Dropping Model of Multiple TCP Connections

A New Stateless Packet Classification and Filter Against DoS Attacks.

The precision for fluid flow model of window-size behavior of the transmission control protocol

A Control Theoretic Analysis of Mixed TCP and UDP Traffic under RED Based on Nonlinear Dynamic Model

Modeling TCP Window Evolution Process with both Discrete and Fluid Models

Cross-layer modeling and analysis of TCP communications over turbulent FSO links

Research of the Multi-protocol Proxy on the Application Layer Using Virtual C/S Model

Modeling and analyzing of TCP fairness in Wireless Mesh Network

Generalized Modeling and Stability Analysis of HighSpeed TCP and Scalable TCP.

Modeling TCP Sack steady state performance in lossy networks