Creating a geographic database for network devices

• US 6,778,524 B1
• Filed: 06/09/2000
• Issued: 08/17/2004
• Est. Priority Date: 06/09/2000
• Status: Expired due to Term

• Current Assignee: Resource Consortium Limited, LLC
• Original Assignee: Steven Augart
• Inventors: Augart, Steven
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US09/591,288
• Time in Patent Office: 1,530 Days
• Field of Search: 370/248, 370/252, 370/351, 370/405, 370/465, 455/456.2, 455/456.5, 455/456.6, 709/203
• US Class Current: 370/351
• CPC Class Codes: H04L 45/26 Route discovery packet
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The source network identifier is then associated with a known geographic location for the POP in a database. The foregoing steps are then repeated for multiple different POPs. Also, a database is populated with geographic locations for network devices by providing a node on a network and making a connection into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP. A message is then transmitted to the node over the network connection obtained from the NSP. The message is received at the node and a source network identifier is extracted from the message. The route over the network between the node and the POP is then probed to obtain network identifiers for routers along the route. The foregoing steps are then repeated for multiple different POPs.

Claims

1. A method of populating a database with geographic locations for network devices, said method comprising:

a. providing a node on a network;

b. connecting into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP;

c. transmitting a message to the node over the network connection obtained from the NSP;

d. receiving the message at the node and extracting a source network identifier from the message;

e. associating the source network identifier with a known geographic location for the POP in a database; and

f. repeating steps (b) through (e) for plural different POPs.

2. A method according to claim 1, further comprising a step of:

(g) probing a route over the network between the node and the POP to obtain network identifiers for routers along the route.

3. A method according to claim 2, wherein said probing in step (g) comprises transmitting plural probe packets addressed to the network identifier extracted from the message.

4. A method according to claim 2, wherein said probing in step (g) comprises transmitting plural probe packets addressed to said node on the network.

5. A method according to claim 3, wherein said plural probe packets have different initial Time-To-Live (TTL) values.

6. A method according to claim 2, further comprising a step of:

(h) looking up the network identifiers for said routers in the database in an attempt to identify geographic locations for said routers.

7. A method according to claim 2, further comprising a step of:

(h) extracting geographic locations for said routers from responses to said probing performed in step (g).

8. A method according to claim 2, wherein said probing in step (g) is performed by said node on the network.

9. A method according to claim 1, wherein said plural different POPs are operated by plural different NSPs.

10. A method according to claim 1, wherein step (d) further comprises a substep of:

(d1) in response to the message, probing a route over the network between the POP and the node to obtain network identifiers for routers along the route.

11. A method according to claim 10, wherein said probing in step (d1) comprises transmitting plural probe packets addressed to the network identifier extracted from the message, and wherein said plural probe packets have different initial Time-To-Live (TTL) values.

12. A method according to claim 10, wherein said probing in step (d1) comprises probing all routers along said route.

13. A method according to claim 10, further comprising a step of using said routing information to identify anomalous routing patterns.

14. A method according to claim 10, further comprising a step of using said routing information to identify multi-path routing.

15. A method according to claim 10, further comprising a step of using said routing information to design probe packets for subsequent probing.

16. A method according to claim 10, wherein said probing in step (d1) comprises transmitting plural probe packets addressed to the network identifier extracted from the message.

17. A method according to claim 15, wherein said plural probe packets have different initial Time-To-Live (TTL) values.

18. A method according to claim 10, wherein step (d) further comprises a substep of:

(d2) looking up the network identifiers for said routers in the database in an attempt to identify geographic locations for said routers.

19. A method according to claim 10, further comprising a step of aggregating network nodes into groups.

20. A method according to claim 19, further comprising a step of aggregating the groups into higher level groups in a hierarchical fashion.

21. A method according to claim 19, further comprising a step of identifying a determining node on the network, based on plural probing results, wherein when probing a route to a source node, presence of the determining node in an identified route strongly suggests that the source node is in a particular group.

22. A method according to claim 21, wherein the particular group consists of network nodes in a specified geographic area.

23. A method according to claim 8, wherein plural nodes are provided in step (a), and the route over the network from the POP to each of said plural nodes is probed in step (d1).

24. A method according to claim 10, wherein steps (c) and (d) are repeated plural times for a single provided node.

25. A method according to claim 10, further comprising a step of identifying a determining node on the network, based on plural probing results, wherein when probing a route to a source node, presence of the determining node in an identified route strongly suggests that the source node is in a particular group.

26. A method according to claim 1, wherein the network is an internet.

27. A method of populating a database with geographic locations for network devices, said method comprising:

a. providing a node on a network;

b. connecting into a network service provider (NSP) point of presence (POP) to obtain a connection to the network via the NSP;

c. transmitting a message to the node over the network connection obtained from the NSP;

d. receiving the message at the node and extracting a source network identifier from the message;

e. probing a route over the network between the node and the POP to obtain network identifiers for routers along the route; and

f. repeating steps (b) through (e) for plural different POPs.

28. A method according to claim 27, wherein said probing in step (e) comprises transmitting plural probe packets addressed to the network identifier extracted from the message.

29. A method according to claim 28, wherein said plural probe packets have different initial Time-To-Live (TTL) values.

30. A method according to claim 27, further comprising a step of:

(g) looking up the network identifiers for said routers in the database in an attempt to identify geographic locations for said routers.

31. A method according to claim 27, further comprising a step of:

(g) extracting geographic locations for said routers from responses to said probing performed in step (e).

32. A method according to claim 27, wherein plural nodes are provided in step (a), and the route over the network from the POP to each of said plural nodes is probed in step (e).

33. A method according to claim 27, wherein said probing in step (e) comprises transmitting plural probe packets addressed to said node on the network.