Chapter 2 - Microsoft TCP/IP 2000

This document describes the framework, messages, and procedures for the Diameter Network address and port translation Control Application. This Diameter application allows per-endpoint control of Network Address Translators and Network Address and Port Translators, which are added to networks to cope with IPv4 address space depletion. This Diameter application allows external devices to configure and manage a Network Address Translator device -- expanding the existing Diameter- based Authentication, Authorization, and Accounting (AAA) and policy control capabilities with a Network Address Translator and Network Address and Port Translator control component. These external devices can be network elements in the data plane such as a Network Access Server, or can be more centralized control plane devices such as AAA- servers. This Diameter application establishes a context to commonly identify and manage endpoints on a gateway or server and a Network Address Translator and Network Address and Port Translator device. This includes, for example, the control of the total number of Network Address Translator bindings allowed or the allocation of a specific Network Address Translator binding for a particular endpoint. In addition, it allows Network Address Translator devices to provide information relevant to accounting purposes. [STANDARDS-TRACK]

Chapter 11 - Managing Windows 2000 Network Services Fast Track

Telemedicine is the use of Information and Communication Technology (ICT) in health ecosystem with a provision of visual communication, patient data transfer & collaborative learning. Government of India is actively taking initiatives for establishing digital high-speed internet connectivity though National Knowledge Network (NKN), State Wide Application Network (SWAN) & National Optical Fiber Network (NOFN) to super-specialist center, medical colleges, research organizations, Primary Health Center (PHC)/ Community Health Center (CHCs) up to block level and panchayat levels. Wellness centers and ‘DigiGaon’ bring digital inclusion and it enables people in rural areas to be able to access services like telemedicine and skill enhancement with the use of digital technologies. High-speed fiber-optic based internet bandwidth has deployed under NKN in as many as 250 medical colleges around the country. Many medical institutions have migrated to NKN to enhance their capacity of telemedicine activity using telemedicine platform funded by central and state government agencies. Majority of telemedicine in India funded by Ministry of Health & Family Welfare (MOH&FW) for interlinking Medical Colleges across the country with the purpose of education and National Rural Telemedicine Network (NRTN) for Healthcare delivery under National Health Mission (NHM), National Medical College Network (NMCN) and other public private partnership (PPP) models. Medical super-specialty institutes for the National Resource Centers (NRCs) and Regional Resource Centers (RRCs) for NMCN has defined and medical colleges will soon link to RRCs. India has diversified geographical region with availability of variable bandwidth in different part. Remote PHC/CHCs located outside city has bandwidth issue whereas majority of medical hospitals in the city has high-speed internet bandwidth. Video solutions given by hardware vendors and software vendors needs to be collaborate centrally which enables users to connect even with lower bandwidth or with the use of high-speed broadband (HSB) mobile dongle. It increases the reach to the remotest place in India through any of the available platform (Desktop, H.323 device, Android or IOS smart phone etc). Recording and streaming integration with video collaboration enhances the purpose of sharing the medical educational content during or after e-CME/ workshops/ seminars with remote doctors. Entire collaboration solution thus need direct content sharing, mobility, recording and reporting with support for multiple input sources from cameras, X-Ray, CT-SCAN, fundus camera, ultrasonography etc. Broadcast link needs to share simultaneously to multiple users and connectivity thus follow confidentiality, security and traceability with the usage of video firewall in data center. Traffic routed from outside the institute needs to convert in local IP pool through port address translation called Network Address Translation (NAT) for allowing traffic from known protocols like Internet Control Message Protocol (ICMP), Transmission Control Protocol/ Internet Protocol (TCP/IP) and User Datagram Protocol (UDP). The video collaboration telemedicine infrastructure were created at STBMI, SGPGIMS, Lucknow internetworking with Integrated Operation Theatre for live sharing, Medical Telepresence Room for sharing live surgical skill during workshop, e-Tumour Board for discussion between multiple specialties departments from different hospitals, 3D Lecture Theater for sharing medical CMEs created for sharing knowledge resources with networked institutions.

11 - FTP Software TCP/IP Internetworking Products

Nowadays, Network Address Translation (NAT) is widely used to allow multiple devices within a private network to make use of a less number of public IP addresses. NAT Overloading or Port Address Translation (PAT) is an extension of NAT that can translate both the IP address and the port number of a packet in order to identify which inside local address each packet belongs to. PAT is often used in a virtual environment, where multiple virtual machines are connected to the Internet by using the host machine's IP address. However, an apparent downside of PAT is the fact that when all of the ports are used, no more new outbound connection could be made from the local addresses. In this paper, we present Slow-port-exhaustion DoS Attack on a virtual network, a new type of DoS Attack that exploits some flaws of the TCP protocol. In this attack, a compromised internal virtual machine with a low amount of attack bandwidth can occupy host machine's ports for a long time and therefore makes other machines on the same virtual network could not connect to the external network. We created a virtual network with PAT implemented gateway and perform the experimental attack. In the analysis, we explore a gateway's behavior that could benefit this kind of attack. We also introduce some countermeasures against this kind of attack.

Network Address Translation (NAT) is a technique commonly employed in today's computer networks. NAT allows multiple devices to hide behind a single IP address. From a network management and security point of view, NAT may not be desirable or permitted as it allows rogue and unattended network access. In order to detect rogue NAT devices, we propose a novel passive remote source NAT detection approach based on behavior statistics derived from NetFlow. Our approach utilizes 9 distinct features that can directly be derived from NetFlow records. Furthermore, our approach does not require IP address information, but is capable of operating on anonymous identifiers. Hence, our approach is very privacy friendly. Our approach requires only a 120 seconds sample of NetFlow records to detect NAT traffic within the sample with a lower-bound accuracy of 89.35%. Furthermore, our approach is capable of operating in real-time.

Chapter 3 - MCSA/MCSE 70-291: The Dynamic Host Configuration Protocol

Many research activities have been provided to allow Session Initiation Protocol (SIP) based communication in Peer-to-Peer (P2P). We have contributed to these activities by proposing a scalable proxy topology building and routing in P2P SIP network where SIP location service is integrated in proxies that run over peer entities. Therefore as SIP cannot work efficiently through a NAT (Network Address Translation) device without using a specific NAT traversal mechanism, our proposed architecture needs an efficient NAT traversal technique which can work easily and make end-to-end communication effective in our framework by meeting our previously defining requirements. This paper provides a suitable technique to our P2P SIP framework for SIP signaling and media flow. Our NAT traversal solution proposes an implementation of a smart SIP registrar server which stores the client end device's public contact information (IP address and port) instead of its private address and maintains this public address in the NAT device table. This approach allows the proxy node to always send the SIP signaling message to the correct address by checking the Registrar server before each transmission. To enable media flow to be exchanged between the two SIP clients, we use a media relay located in the public network. The proxy server of the originator of the signaling message is allowed to replace suitably the private addresses in the message body by the public addresses of the media relay. We provide some relevant experimental results to show that the approach is feasible.

Chapter 3 - Developing the Network Services Design

Chapter 3 - The Internet and TCP/IP

CHAPTER 8 - Installing, Configuring as a Server

In this paper, Transmission Control Protocol/Internet Protocol (TCP/IP) over Stream Control Transmission Protocol (SCTP)/IP parallel transmission system is proposed to realize large TCP/IP throughput. The proposed system enables SCTP/IP connection between switches by protocol stacking. The proposed system is implemented on a software switch to evaluate its performance. The evaluation result indicates that proposed system can achieve 90% throughput compared with serial transmission when the delay difference among parallel routes is 20msec.

Early data networks were based on point-to-point or multipoint topologies. They were often of a star structure with a central processing unit (CPU) at the star's hub. Terminals in this network were “dumb” terminals and relied on the CPU's processing power for nearly all network activity. When the personal computer (PC) gained wide acceptance, distributed processing became the rule. As a result, data networks and data networking became much more complex. We now see complex multiple star, mesh, and tree like networks where many of the nodes have multiple inlets and outlets. Data rates were based on the limitations of the analog network. In the period of the 2nd edition of this book, this roughly equated to 9600 bps. Today, it is common to have 56-kbps access lines to a larger network where the basic channel data rate is 64 kbps. We can bring together these basic building blocks of 64 kbps to form aggregate channels of 128, 256, and 384 kbps up to 1.536 Mbps or 1.984 Mbps. Data protocols instilled order out of contentious chaos in data network operation. These protocols, applying to wide area networks (WANs), are the principal thrust of the chapter. Most are based on shipping user data in packets or frames. We discuss the transport of user data in cells in Chapter 28. Most packet networks are based on CCITT Rec. X.25. If we widen the definition of packet networks to include the transmission control protocol/internet protocol (TCP/IP), certainly X.25 will have a competitor. Both TCP/IP and X.25 have a comparatively high latency (latency is the time it takes from initiation to completion of a data transaction). Frame relay was introduced in the same period. This is a comparatively low latency system. This section provides design data and brief descriptions of wide area data networking as a whole with hypothetical reference circuits, the archetypical data link layer protocol, high-level data link control (HDLC), X.25 and its companion, link access protocol B-layer (LAPB), TCP/IP family of protocols, frame relay family of protocols, and a brief description of SMDS (switched multimegabit data service). Variants of LAPD are discussed in the frame relay section of this chapter. Keywords: enterprise networks; universal application; high-level data-link control; packet-switched; virtual connections; transmission control protocol; internet protocol; ISO transport protocol; frame relay; switched multimegabit data service; internetworking; ITU-T rec X.75; data network management

Many current implementations of protocols such as the Transmission Control Protocol/Internet Protocol (TCP/IP) are inefficient because data are often accessed more frequently than necessary. Three techniques that reduce the need for memory bandwidth are proposed. The techniques are copy-on-write, page remapping, and single-copy. Afterburner, a network-independent card that provides the services that are necessary for a single-copy protocol stack, is described. The card has 1 MByte of local buffers and provides a simple interface to a variety of network link adapters, including HIPPI and asynchronous transfer mode (ATM). Afterburner can support transfers to and from the link adapter card at rates up to 1 Gbit/s. An implementation of TCP/IP that uses the features provided by Afterburner to reduce the movement of data to a single copy is discussed. Measurements of the end-to-end performance of Afterburner and the single-copy implementation of TCP/IP are presented.< <ETX xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">&gt;</ETX>

The authors describe a connection-oriented transport-level protocol (local network transport protocol, LNTP) specifically designed for use on LANs (local area networks). The fundamental philosophy in the design of LNTP is simplicity. Features irrelevant to the LAN environment are not included, resulting in a simpler and more efficient protocol. LNTP uses a simple but effective two-region flow control mechanism which is activated only when the traffic intensity exceeds some value. This eliminates control packets during normal operation and increases concurrency between sender and receiver. LNTP runs under 4.2 BSD UNIX in place of TCP/IP (transmission control protocol/internet protocol). Detailed comparisons between LNTP and TCP/IP show that LNTP is several times faster, although end-to-end throughput rates are only 30% faster because of the overhead attributed to Ethernet and UNIX layers. However, the reduced CPU cycles as well as the increased network throughput indicate that LNTP is a viable replacement for TCP/IP. >