Network topology generation using traceroute data
Embodiments provide systems, methods, and computer program products to generate a network topology. Internet Protocol (IP) addresses may be collected that immediately precede a first IP address in a set of IP-address-sequences to obtain a first set of previous-hop IP addresses, where each IP-address-sequence in the set of IP-address-sequences comprises a sequence of IP addresses traversed by at least one packet. Next, each IP address in the first set of previous-hop IP addresses may be associated with a first logical node in the network topology.
1. A method for generating a network topology, comprising:
collecting Internet Protocol (IP) addresses that immediately precede a first IP address in a set of IP-address-sequences to obtain a first set of previous-hop IP addresses, wherein each IP-address-sequence in the set of IP-address-sequences comprises a sequence of IP addresses traversed by at least one packet;
associating each IP address in the first set of previous-hop IP addresses with a first logical node in the network topology;
for a second IP address associated with the first logical node, collecting IP addresses that immediately follow the second IP address in the set of IP-address-sequences to obtain a first set of next-hop IP addresses;
determining a third IP address that is complementary to a fourth IP address in the first set of next-hop IP addresses; and
assigning the third IP address as an IP address of an egress port of the first logical node.
2. The method of claim 1 , wherein said associating each IP address in the first set of previous-hop IP addresses with the first logical node in the network topology comprises:
in response to detecting that a second IP address in the first set of previous-hop IP addresses is already associated with a second logical node in the network topology, flagging the second IP address for de-confliction.
3. The method of claim 1 , further comprising associating the first IP address with an ingress port of a second logical node.
4. The method of claim 3 , further comprising:
inferring a port type from a name associated with the first IP address; and
associating the port type with the ingress port of the second logical node.
5. The method of claim 3 , further comprising:
inferring a vendor type from a name associated with the first IP address; and
associating the vendor type with the second logical node.
6. The method of claim 3 , further comprising:
determining a geographic location based on the first IP address; and
associating the geographic location with the second logical node.
7. A non-transitory computer-readable storage medium storing instructions that, when executed by a computer, cause the computer to perform a method for generating a network topology, the method comprising:
collecting Internet Protocol (IP) addresses that immediately precede a first IP address in a set of IP-address-sequences to obtain a first set of previous-hop IP addresses, wherein each IP-address-sequence in the set of IP-address-sequences comprises a sequence of IP addresses traversed by at least one packet;
associating each IP address in the first set of previous-hop IP addresses with a first logical node in the network topology;
for a second IP address associated with the first logical node collectin IP addresses that immediately follow the second IP address in the set of IP-address-sequences to obtain a first set of next-hop IP addresses;
determining a third IP address that is complementary to a fourth IP address in the first set of next-hop IP addresses; and
assigning the third IP address as an IP address of an egress port of the first logical node.
8. The non-transitory computer-readable storage medium of claim 7 , wherein said associating each IP address in the first set of previous-hop IP addresses with the first logical node in the network topology comprises:
in response to detecting that a second IP address in the first set of previous-hop IP addresses is already associated with a second logical node in the network topology, flagging the second IP address for de-confliction.
9. The non-transitory computer-readable storage medium of claim 7 , wherein the method further comprises associating the first IP address with an ingress port of a second logical node.
10. The non-transitory computer-readable storage medium of claim 9 , wherein the method further comprises:
inferring a port type from a name associated with the first IP address; and
associating the port type with the ingress port of the second logical node.
11. The non-transitory computer-readable storage medium of claim 9 , wherein the method further comprises:
inferring a vendor type from a name associated with the first IP address; and
associating the vendor type with the second logical node.
12. The non-transitory computer-readable storage medium of claim 9 , wherein the method further comprises:
determining a geographic location based on the first IP address; and
associating the geographic location with the second logical node.
13. An apparatus, comprising:
a processor; and
a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the apparatus to perform a method for generating a network topology, the method comprising:
collecting Internet Protocol (IP) addresses that immediately precede a first IP address in a set of IP-address-sequences to obtain a first set of previous-hop IP addresses, wherein each IP-address-sequence in the set of IP-address-sequences comprises a sequence of IP addresses traversed by at least one packet; and
associating each IP address in the first set of previous-hop IP addresses with a first logical node in the network topology,
for a second IP address associated with the first logical node, collecting IP addresses that immediately follow the second IP address in the set of IP-address-sequences to obtain a first set of next-hop IP addresses;
determining a third IP address that is complementary to a fourth IP address in the first set of next-hop IP addresses; and
assigning the third IP address as an IP address of an egress port of the first logical node.
14. The apparatus of claim 13 , wherein said associating each IP address in the first set of previous-hop IP addresses with the first logical node in the network topology comprises:
in response to detecting that a second IP address in the first set of previous-hop IP addresses is already associated with a second logical node in the network topology, flagging the second IP address for de-confliction.
15. The apparatus of claim 13 , wherein the method further comprises associating the first IP address with an ingress port of a second logical node.
16. The apparatus of claim 15 , wherein the method further comprises:
inferring a port type from a name associated with the first IP address; and
associating the port type with the ingress port of the second logical node.
17. The apparatus of claim 15 , wherein the method further comprises:
inferring a vendor type from a name associated with the first IP address; and
associating the vendor type with the second logical node.