Abstract: Aiming at the limitations on the reorganization of ID fields with mark in the IP packets, such as the inconsistency in the ID values and the ID field is illegally altered. A path reconfiguration strategy based on IPv4 options packet marking is proposed and used to reconfigure the attacking paths. Compared with the traditional ID-based marked strategy, the number of mistaken router nodes is less and the complexity is lower adopting this strategy. In addition, it possesses obvious advantages in the packet processing time of routers.

Key words: packet marking, path reconfiguration, IPv4 options, Time to Live(TTL)

摘要： 针对IP包头中带标记的ID字段在进行重组时存在的ID值不一致和ID字段容易被篡改等局限性，提出一种基于IPv4选项包标记的路径重构策略，用于对攻击路径的重构。同传统的基于ID字段进行标记的策略相比，采用该策略时不仅路由器节点的误报数较小，而且重构路径的复杂度有所降低，在路由器进行包处理的时间上具有明显的优势。

关键词: 包标记, 路径重构, IPv4选项, 生存时间

CLC Number: 

• TP393