Re: [OPSEC] I-D Action: draft-ietf-opsec-probe-attribution-07.txt

"Eric Vyncke (evyncke)" <evyncke@cisco.com> Fri, 23 June 2023 07:30 UTC

Return-Path: <evyncke@cisco.com>
X-Original-To: opsec@ietfa.amsl.com
Delivered-To: opsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BB33C1BE869 for <opsec@ietfa.amsl.com>; Fri, 23 Jun 2023 00:30:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.596
X-Spam-Level:
X-Spam-Status: No, score=-14.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b="JZ+3zPQB"; dkim=pass (1024-bit key) header.d=cisco.com header.b="IQ4ZIigy"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FIivl07c9z4B for <opsec@ietfa.amsl.com>; Fri, 23 Jun 2023 00:30:54 -0700 (PDT)
Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 144F4C1BE86C for <opsec@ietf.org>; Fri, 23 Jun 2023 00:30:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3208; q=dns/txt; s=iport; t=1687505454; x=1688715054; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=EbHHV6yNA6+dw7XLtAn94BGK7IQb2UElj/bfTHh10bg=; b=JZ+3zPQBc3P6+iGBx57uW2ijPX4JjwyJMCQKCMggE4xQAIWpxU1M0QuW JLEfkTmE+k0zPFatJZcn0iFJrMOpwK6PxL1Ta5gami3IviVz7vSH86bzM lQUmY0F9IkjiipIoXq3pfRyiB650WZlVmpgW06UlnoKWdVhjOPc3uAkV3 g=;
X-CSE-ConnectionGUID: CVvHFdjsR3yBf6Aht4eNkA==
X-CSE-MsgGUID: wgmJUFdHS/CMxBbGvjNbpQ==
X-IPAS-Result: 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
IronPort-PHdr: A9a23:dwW8OBSHcKbVYbjJD1kU7lRYzNpso3DLVj580XJvo7tKdqLm+IztI wmCo/5sl1TOG47c7qEMh+nXtvX4UHcbqdaasX8EeYBRTRJNl8gMngIhDcLEQU32JfLndWo7S exJVURu+DewNk0GUN3maQjqq2appSUXBg25MAN0IurvHYuHgtqm0eux9rXYYh5Dg3y2ZrYhZ BmzpB/a49EfmpAqar5k0wbAuHJOZ+VQyCtkJEnGmRH664b48Mto8j9bvLQq8MsobA==
IronPort-Data: A9a23:M+UmBKr91t18gg2nvizsIItRUeNeBmK0ZxIvgKrLsJaIsI4StFCzt garIBmEb6nba2ahKYgiYY+z80gE6J+EyIcxQQc4+C9hRS0Q+OPIVI+TRqvS04x+DSFioGZPt Zh2hgzodZhsJpPkjk7wdOCn9T8khfzgqoPUUIbsIjp2SRJvVBAvgBdin/9RqoNziLBVOSvV0 T/Ji5OZYAbNNwJcaDpOsPrd8kg35ZwehRtB1rAATaET1LPhvyF94KI3fcmZM3b+S49IKe+2L 86rIGaRpz6xE78FU7tJo56jGqE4aue60Tum1hK6b5Ofbi1q/UTe5EqU2M00Mi+7gx3R9zx4J U4kWZaYEW/FNYWU8AgRvoUx/yxWZcV7FLH7zXeXmvKN72PKcWDWmOREAh8fPZFE98B0KDQbn RAYAGhlghGrjuayxvewTfNhw5tlJ8jwN4RZsXZlpd3bJa95GtaYHeOTvpkBgG9YasNmRZ4yY +IUdytpZxfNSxZOIVwQTpk5mY9Eg1GmK20A9ALL9PNfD2770wN08oXDPPruPfevVe9fsViag GjexjGsav0dHJnFodafyVqrnvTClgv6VZ4cUrqi+ZZXbEa7z2gXDlgdUkG25Kb/gU+lUNUZI EsRksYzkZUPGIWQZoCVdzWzoWWPuVgXXN84LgHwwFjlJnb8i+pBOlU5cw==
IronPort-HdrOrdr: A9a23:Gx/h+qxflzAELuwz2rApKrPxg+skLtp133Aq2lEZdPULSK2lfp GV8sjziyWatN9IYgBdpTnhAsO9qeu1z+843WBjB8bcYOCAghrmEGgC1/qu/9SEIU3DH4FmpN 9dmsRFebjN5B1B/LvHCWqDYpgdKbu8gduVbI7lph8HIXAIGsNdBkVCe3ym+yZNNW577O8CZe OhD7181lydkBosH6CG738+MtTrlpnurtbLcBQGDxko5E2lljWz8oP3FBCew1M3Ty5P6a1Kyx mEryXJooGY992rwB7V0GHeq75MnsH699dFDMuQzuAINzTXjBqybogJYczAgNl1mpDs1L8Zqq iJn/4SBbU115oXRBDynfLZ4Xik7N/p0Q669bbXuwq6nSWzfkNFNyMIv/MpTvKe0TtggDm5u5 g7hV5wcPFsfEj9dG6W3am5azh60kWzunYsiugVkjhWVpYfcqZYqcgF8FpSC4poJlOz1GkLKp gZMCjn3oceTXqKK3TC+mV/yt2lWXo+Wh+AX0gZo8SQlzxbhmpwwUcUzNEW2i5ozuN2d7BUo+ Dfdqh4nrBHScEbKap7GecaWMOyTmjAWwjFPm6eKUnuUKsHJ3XOoZjq56hd3pDgRLUYiJ8p3J jRWlJRsmA/P0roFM2VxZVOtgvARW2sNA6dvf22J6IJzoEUaICbRBFrEmpe4PdIi89vcPHmZw ==
X-Talos-CUID: 9a23:fiTp8WBGuaBVOQL6EwJZ6m46FsI+SCbM5nmOCk+kVWtPS5TAHA==
X-Talos-MUID: 9a23:Acd+5Qr0gHqQoWfTePEezy5tMeVVzaiOMwcmtIUsseaaNwp6Iw7I2Q==
X-IronPort-Anti-Spam-Filtered: true
Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-3.cisco.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 23 Jun 2023 07:30:53 +0000
Received: from alln-opgw-5.cisco.com (alln-opgw-5.cisco.com [173.37.147.253]) by alln-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id 35N7Uqts011296 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for <opsec@ietf.org>; Fri, 23 Jun 2023 07:30:53 GMT
Authentication-Results: alln-opgw-5.cisco.com; dkim=pass (signature verified) header.i=@cisco.com; spf=Pass smtp.mailfrom=evyncke@cisco.com; dmarc=pass (p=quarantine dis=none) d=cisco.com
X-IronPort-AV: E=Sophos;i="6.01,151,1684800000"; d="scan'208";a="3372343"
Received: from mail-co1nam11lp2168.outbound.protection.outlook.com (HELO NAM11-CO1-obe.outbound.protection.outlook.com) ([104.47.56.168]) by alln-opgw-5.cisco.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 23 Jun 2023 07:30:52 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=j3eMdbO1hm8XRerK4KIYVCqUDUR3oITzVFAHjMlgYkUzuiXTeeLRZZrtY9s1IXeBv2zvSMQk/fYyAmj9t/QzMcYVMlXni19IJtOkg/kkhM9mNwR6+nvi6hHrVmrP5URi/weMVlUVxt2j5neTrHMzdrBwlrORQvRg+jCQzlsdkj6hbwHk87ApHK32vfBJrInU3P+t9kYrH8JUBpTT1mw8B0oeBbfZv/fkcXCohmMBAFsn9ohSihjlU56vsMdxj89g5mnD5VnC5+jro+qaFyVHIBa1JbWMVO+hQLgXEo2Ei2QM4uoHabD43cS1oub8CFO1MSOnJePElW6gsoeLrnOr5w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=EbHHV6yNA6+dw7XLtAn94BGK7IQb2UElj/bfTHh10bg=; b=gDvqblsS5B+U0aleKCPb4PTQRo1y1JErmFhUf583yAJfMuc85ZuY94ePu9OsiCPXPblNNhC18imXzsBcl6dGSB3alUTjCNI1U8iCXQUnotTHh9e1RDcQmj9w+mlNNmAlZlWaDDQhKdgbZUXmlev6VwDsMa1c196aOIBgefGN7RJUJs5COFb5LKmHt0oN/dJwQZ+5Tx2bsQjLhhFTFfMaQf/64abUDvou2yTiLcgI/etA8I8ZRRlA8S/q8WXcjPkzVhcjvLnhnwmvuMePC0tQuIWSwbxGb2RTJU37zXFQcF906EFp7nStlq7t+PhxDWfCe0Tj6YNsTRCPHkRPH7zf0w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EbHHV6yNA6+dw7XLtAn94BGK7IQb2UElj/bfTHh10bg=; b=IQ4ZIigy7DRKuma+TLkwx4h3j80kYPMYDujWwUQtLMTh8ziWJ2JplIWOZ014qKsoDf+qZiIaEJOS7x0pJg7ib87nSRzrsxlNLS9DhSzFFOwt5cwQNdHmt3kp5jzJaHvRB7+6GMZWoZFjhusuQl5nTb6FEGE1/bHGWAP2OfzGFx8=
Received: from PH0PR11MB4966.namprd11.prod.outlook.com (2603:10b6:510:42::21) by MW6PR11MB8340.namprd11.prod.outlook.com (2603:10b6:303:23e::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6500.35; Fri, 23 Jun 2023 07:30:51 +0000
Received: from PH0PR11MB4966.namprd11.prod.outlook.com ([fe80::6098:a11f:49e5:c244]) by PH0PR11MB4966.namprd11.prod.outlook.com ([fe80::6098:a11f:49e5:c244%4]) with mapi id 15.20.6521.024; Fri, 23 Jun 2023 07:30:51 +0000
From: "Eric Vyncke (evyncke)" <evyncke@cisco.com>
To: "opsec@ietf.org" <opsec@ietf.org>
Thread-Topic: [OPSEC] I-D Action: draft-ietf-opsec-probe-attribution-07.txt
Thread-Index: AQHZpaPYT+6NIQZAt028bdamQESOV6+XiKQA
Date: Fri, 23 Jun 2023 07:30:51 +0000
Message-ID: <57337CA1-CA17-451C-95BC-F8A0703EA2BF@cisco.com>
References: <168750509730.56971.158848262649603794@ietfa.amsl.com>
In-Reply-To: <168750509730.56971.158848262649603794@ietfa.amsl.com>
Accept-Language: fr-BE, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.73.23052000
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH0PR11MB4966:EE_|MW6PR11MB8340:EE_
x-ms-office365-filtering-correlation-id: 8bfba3fa-bda6-406d-3af1-08db73bbc56f
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH0PR11MB4966.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230028)(376002)(366004)(39860400002)(136003)(346002)(396003)(451199021)(66574015)(38100700002)(122000001)(36756003)(33656002)(38070700005)(86362001)(966005)(6486002)(71200400001)(8936002)(186003)(6512007)(6506007)(8676002)(316002)(5660300002)(478600001)(76116006)(41300700001)(66946007)(91956017)(2906002)(66476007)(66556008)(64756008)(6916009)(66446008)(66899021)(83380400001)(2616005)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <EBB2C9B5A10F314D8BB8DF3B3509ACAD@namprd11.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4966.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 8bfba3fa-bda6-406d-3af1-08db73bbc56f
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jun 2023 07:30:51.1167 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: KkqlWSLy36iXAFIffBGObbwWb47z5MRuaxYMJVvP53wP45pvZFjkVq3AKJ3wyjKzbo6IK1ZUXdvjtPrCXxEG9g==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW6PR11MB8340
X-Outbound-SMTP-Client: 173.37.147.253, alln-opgw-5.cisco.com
X-Outbound-Node: alln-core-7.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/JSnTZZWV9BlHAT3cl6VUgaPSCvs>
Subject: Re: [OPSEC] I-D Action: draft-ietf-opsec-probe-attribution-07.txt
X-BeenThere: opsec@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: opsec wg mailing list <opsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsec>, <mailto:opsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsec/>
List-Post: <mailto:opsec@ietf.org>
List-Help: <mailto:opsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsec>, <mailto:opsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Jun 2023 07:30:58 -0000

This revised I-D should address the comments from TSV/OPS/SEC directorates. Thanks to Tiru, Mark, Linda, and Magnus.

-éric

On 23/06/2023, 09:25, "OPSEC on behalf of internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>" <opsec-bounces@ietf.org <mailto:opsec-bounces@ietf.org> on behalf of internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>> wrote:




A New Internet-Draft is available from the on-line Internet-Drafts
directories. This Internet-Draft is a work item of the Operational Security
Capabilities for IP Network Infrastructure (OPSEC) WG of the IETF.


Title : Attribution of Internet Probes
Authors : Éric Vyncke
Benoît Donnet
Justin Iurman
Filename : draft-ietf-opsec-probe-attribution-07.txt
Pages : 12
Date : 2023-06-23


Abstract:
Active measurements over the public Internet can target either
collaborating parties or non-collaborating ones. Sometimes these
measurements, also called probes, are viewed as unwelcome or
aggressive.


This document suggests some simple techniques for a source to
identify its probes, allowing any party or organization to understand
what an unsolicited probe packet is, what its purpose is, and more
importantly who to contact. The technique relies on off-line
analysis of the probe, therefore it does not require any change in
the data or control plane. It has been designed mainly for layer-3
measurements.


The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsec-probe-attribution/ <https://datatracker.ietf.org/doc/draft-ietf-opsec-probe-attribution/>


There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-opsec-probe-attribution-07.html <https://www.ietf.org/archive/id/draft-ietf-opsec-probe-attribution-07.html>


A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-opsec-probe-attribution-07 <https://author-tools.ietf.org/iddiff?url2=draft-ietf-opsec-probe-attribution-07>


Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts




_______________________________________________
OPSEC mailing list
OPSEC@ietf.org <mailto:OPSEC@ietf.org>
https://www.ietf.org/mailman/listinfo/opsec <https://www.ietf.org/mailman/listinfo/opsec>