|
|
Longest Prefix Match Algorithms
Kováčik, Michal ; Tobola, Jiří (referee) ; Kořenek, Jan (advisor)
This thesis focuses on algorithms for longest prefix match (LPM), which is the key operation in packet classification and routing in TCP/IP networks. A space for analysis of commonly used algorithms with emphasis on their speed and memory efficiency is dedicated along with necessary theory. Focus is then oriented on IPv6 networks, their typical prefix sets and comparison of suitable algorithms. Afterwards, the optimization for selected algorithm is suggested and implemented in programming language Python.
|
|
|
Longest Prefix Match Algorithms
Sedlář, František ; Matoušek, Jiří (referee) ; Tobola, Jiří (advisor)
This master's thesis explains basics of the longest prefix match (LPM) problem. It analyzes and describes chosen LPM algorithms considering their speed, memory requirements and an ability to implement them in hardware. On the basis of former findings it proposes a new algorithm Generic Hash Tree Bitmap. It is much faster than many other approaches, while its memory requirements are even lower. An implementation of the proposed algorithm has become a part of the Netbench library.
|
|
|
Longest Prefix Match in High-Speed Networks
Skačan, Martin ; Tobola, Jiří (referee) ; Kořenek, Jan (advisor)
This thesis deals with the Longest Prefix Matching (LPM), which is a time-critical operation in packet forwarding. To achieve 100Gbps throughput, this operation has to be implemented in hardware and a forwarding table has to fit into the on-chip memory, which is limited by its small size. Current LPM algorithms need large memory to store IPv6 forwarding tables or cannot be simply implemented in HW. Therefore we performed an analysis of available IPv6 forwarding tables and several LPM algorithms. Based on this analysis, we propose a new algorithm which is able to provide very low memory demands for IPv4/IPv6 lookups. To the best of our knowledge, the proposed algorithm has the lowest memory requirements in comparison to existing LPM algorithms. Moreover, the proposed algorithm is suitable for IP lookup in 100Gbps networks, which is shown on new pipelined hardware architecture with 140Gbps throughput.
|
|
|
Detection of P2P Networks
Březina, Matej ; Matoušek, Petr (referee) ; Tobola, Jiří (advisor)
This document deals with design, implementation and testing of software system for detecting p2p (peer-to-peer) networks based on combination of BPF prefiltering and POSIX regular expressions packet payload matching with known p2p protocol communications. The proposed detection system includes a database with some rules of most effuse p2p protocols in format resembling to definitions for L7-filter classifier. The application is implemented in C, runs in userspace and is targeted to all POSIX compatible platforms. The combination of detector with user attached QoS controlling is complete solution for traffic reduction of common p2p protocols.
|
|
|
Packet Classification Using FPGA Technology
Puš, Viktor ; Tobola, Jiří (referee) ; Kořenek, Jan (advisor)
This diploma thesis deals with packet classification in computer networks. The problem of packet classification is described, together with requirements for classification algorithm. Then, necessary theoretical background is introduced. Contemporary approaches to the classification are described, together with the critique of the current state of the field. The main focus of the work is the new algorithm of packet classification based on problem decomposition. Unique property of the algorithm is constant time complexity in terms of external memory accesses. Algorithm implemetation is proposed, using FPGA and one external memory. Planned prototype may achieve throughput of 64 Gbit/s in the worst case.
|
|
|
HTTP Analyzer with Web User Interface
Žižka, Martin ; Straka, Martin (referee) ; Tobola, Jiří (advisor)
This thesis provides a issue of the analysis HTTP traffic. It describes the principle and the procedure of HTTP protocol. It is interested in the structure and function of the existing tool for the analysis HTTP traffic HTTPry. It is also interested in the extension of the HTTPry tool about saving records in the database MySQL, IPv6 protocol maintenance and the VLAN technology. It also describes the methods of the testing tool and compares achieved results of modified version with the original tool version. It mentions the proposal and implementation of the information system, which views the captured informations. In the end, there are the results and another opinions of the extension discussed.
|
|
|
Hardware Acceleration of Longest Prefix Match
Kekely, Lukáš ; Tobola, Jiří (referee) ; Kořenek, Jan (advisor)
This bachelor's thesis describes design and implementation of hardware architecture for longest prefix match in order to achieve high throughput, which is required in today's high-speed computer networks. It is focused on IPv4 as-well-as IPv6 networks. Designed hardware architecture has throughput 75 Gbps on the shortest IPv4 and IPv6 packets. Performance of designed architecture is also compared with performance of chosen algorithms, which are used in nowadays commercial devices. These algorithms are: Tree Bitmap, Shape-Shifting Trie and Binary Search on Prefixes. All algorithms were implemented in C language using multi-threaded processing.
|
|
|
Eluding and Evasion of IDS Systems
Černý, Marek ; Tobola, Jiří (referee) ; Žádník, Martin (advisor)
This paper analyzes network security devices called intrusion detection (ID) systems. In order to point out possible flaws, especially ID systems using signature analysis are examined. Based on this, methods to exploit possible vulnerabilities of these systems were designed. These methods were implemented into a simple program for ID systems efficiency evaluation. It can be used in a way entirely independent of particular network attack used in the test.
|
|
|
Web Portal for Network Traffic Reporting
Lízal, Miroslav ; Žádník, Martin (referee) ; Tobola, Jiří (advisor)
This thesis focuses on development of a web portal, which provides information about network traffic. It describes available technologies, which can be used for the network monitoring. It puts emphasis especially on NeTFlow. This paper also descirebs the whole development cycle from analysis to implementation and testing. The outcome of this work is a online system, based on PHP language and PostgreSQL database, which creates reports on the network traffic and makes them accessible via WWW. It is also able to save these reports to a PDF file.
|
|
|
Company CRM Concept and Implementation Project
Špringl, Petr ; Tobola, Jiří (referee) ; Chlebovský, Vít (advisor)
This thesis deals with analysis and possibilities of improvements in the area of customer relationship management in a company. There is a theoretical framework regarding customer relationship management and CRM systems including their implementation. The thesis includes analysis of current state of CRM in a concrete company and a proposal of a new CRM system implementation schedule based on the analysis. Finally, there is a discussion of benefits of the proposed project and author's proposals heading to improvements of CRM in the company.
|
guest ::
