Table 9 An example of the reconstruction table for the DFM authenticated flow marking method
From: IP traceback through (authenticated) deterministic flow marking: an empirical evaluation
Flow ID | First mark frag | Second mark frag | Digital sign | Identification | Sign verification |
|---|---|---|---|---|---|
AC100C14055A5585 | Â | Â | Â | Â | Â |
B02A005006 | Â | Â | Â | Â | Â |
Srcip = 172.16.112.20 |  |  |  | EdgeRouter IP = |  |
SrcPort = 1370 | AC100001 | 4004005F | 42 bytes | 172.16.0.1 | Verified |
Dstip = 85.133.176.42 |  |  | sign data | NI-ID = 1 |  |
DstPort = 80 |  |  |  | Host-ID = 23 |  |
Protocol = tcp |  |  |  |  |  |
AC10715410925585 | Â | Â | Â | Â | Â |
B817001511 | Â | Â | Â | Â | Â |
Srcip = 172.16.113.84 |  |  |  | EdgeRouter IP = |  |
SrcPort = 4242 | AC100001 | 40080037 | 42 bytes | 172.16.0.1 | Failed |
Dstip = 85.133.184.23 |  |  | sign data | NI-ID = 2 |  |
DstPort = 21 |  |  |  | Host-ID = 13 |  |
Protocol = udp |  |  |  |  |  |