Presentation 2005-03-04
Design and implementation of IP version independent Connection Tracking System on Linux
Yasuyuki KOZAKAI, Hideaki YOSHIFUJI, Hiroshi ESAKI, Jun MURAI,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Recently, the number of IPv6 users has increased and many firewall products have supported IPv6 functions. Linux is one of them, and it already contains IPv6 packet filter. However, it lacked in the Connection Tracking System for IPv6 which would be able to track the states of network flows. So, it couldn't inspect packets by a filter rule using such states. We implemented the generalized Connection Tracking System, so that it can handle not only IPv4 packets but also IPv6 packets. In this paper, we describe the design and implementation of the abovementioned system. In addtion, we compare its capability with the traditional IPv4 Connection Tracking System.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) packet filter / firewall / Linux / IPv6 / Connection Tracking
Paper # NS2004-248,IN2004-248
Date of Issue

Conference Information
Committee NS
Conference Date 2005/2/25(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Network Systems(NS)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Design and implementation of IP version independent Connection Tracking System on Linux
Sub Title (in English)
Keyword(1) packet filter
Keyword(2) firewall
Keyword(3) Linux
Keyword(4) IPv6
Keyword(5) Connection Tracking
1st Author's Name Yasuyuki KOZAKAI
1st Author's Affiliation Corporate Research & Development Center Toshiba Corporation()
2nd Author's Name Hideaki YOSHIFUJI
2nd Author's Affiliation Faculty of Environmental Information, Keio University
3rd Author's Name Hiroshi ESAKI
3rd Author's Affiliation Graduate School of Information Science and Technology, The University of Tokyo
4th Author's Name Jun MURAI
4th Author's Affiliation Faculty of Environmental Information, Keio University
Date 2005-03-04
Paper # NS2004-248,IN2004-248
Volume (vol) vol.104
Number (no) 690
Page pp.pp.-
#Pages 5
Date of Issue