A POX Controller Module to Prepare a List of Flow Header Information Extracted from SDN Traffic

Authors: Wisam H. Muragaa, Kamaruzzaman Seman, Mohd Fadzli Marhusin

Abstract:

Software Defined Networking (SDN) is a paradigm designed to facilitate the way of controlling the network dynamically and with more agility. Network traffic is a set of flows, each of which contains a set of packets. In SDN, a matching process is performed on every packet coming to the network in the SDN switch. Only the headers of the new packets will be forwarded to the SDN controller. In terminology, the flow header fields are called tuples. Basically, these tuples are 5-tuple: the source and destination IP addresses, source and destination ports, and protocol number. This flow information is used to provide an overview of the network traffic. Our module is meant to extract this 5-tuple with the packets and flows numbers and show them as a list. Therefore, this list can be used as a first step in the way of detecting the DDoS attack. Thus, this module can be considered as the beginning stage of any flow-based DDoS detection method.

Keywords: Matching, OpenFlow tables, POX controller, SDN, table-miss.

Digital Object Identifier (DOI): doi.org/10.5281/zenodo.1314781

References:

[1] Open Networking Foundation “Software Defined Networks: The new Norm of Networks” White paper 2012 Available at: https://www.opennetworking.org/images/stories/downloads/sdn-resources/white-papers/wp-sdn-newnorm.pdf. Accessed on: 22/9/2017.
[2] Sperotto, A., Schaffrath, G., Sadre, R., Morariu, C., Pras, A., & Stiller, B. (2010). An overview of ip flow-based intrusion detection. IEEE Communications Surveys and Tutorials, 12(3), 343-356.
[3] POX controller. Available: http://www.noxrepo.org/pox/about-pox/ Accessed at: 13/9/2017.
[4] OpenFlow Switch Specification Version 1.5.1. Available online: https://www.opennetworking.org/wp content/uploads/2014/10/openflow-switch-v1.5.1.pdf. Accessed on:
[5] Assigned Internet Protocol Numbers. Available at: https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml. Accessed on: 10/10/2017.
[6] Mininet. Available: http://mininet.org/ Accessed on: 3/9/2017.
[7] Muragaa, W. H., Seman, K., & Marhusin, M. F. A POX Controller Module to Collect Web Traffic Statistics in SDN Environment. World Academy of Science, Engineering and Technology, International Journal of Computer, Electrical, Automation, Control and Information Engineering, 10(12), 2051-2056.