Graphical Network Simulator Research Articles

Comparative Analysis of PCC and ECMP Methods in Load Balancing Using GNS3 Simulator

Judging from daily activities, human beings heavily rely on the internet for communication purposes. and exchange information using either social media applications or browsers, vonsistently fast internet speeds are incredibly beneficial for performing tasks and activities, particularly for students and professionals. A sluggish internet connection can be frustrating and may lead to interruptions in online activities and tasks if it persists. Hence, this study examines a comparative evaluation of two approaches, Per Connection Classifier (PCC) and Equal Cost Multi-Path (ECMP) in Load Balancing through GNS3 simulation. Load balancing, as a method for evenly distributing traffic loads, and failover, as a backup mechanism when the main connection experiences problems. GNS3 is a graphical network simulator program that can transmit more complex network topologies compared to other simulators, for example Cisco Packet Tracer. The primary aim of this study is to comprehend how efficiently both techniques distribute traffic loads, maintaining smooth internet access, and increasing reliability. The PCC method produces better throughput, delay and jitter compared to the ECMP method, even though it has slightly different values for each QoS parameter. In testing traffic distribution, the PCC method outperforms the ECMP method. The PCC method can distribute traffic evenly across both ISP lines when downloading and uploading data packets. Meanwhile, the ECMP method can only carry out download and upload activities on one traffic path.

Towards a Critical Review of Cybersecurity Risks in Anti-Poaching Systems

Anti-poaching operations increasingly make use of a wide variety of technology for intelligence and communications. These technologies introduce cybersecurity risk, and they need to be secured to provide greater protection to the information and people involved in anti-poaching operations, ultimately protecting vulnerable animals better. A hypothetical network of anti-poaching technologies was simulated in Graphical Network Simulator 3 (GNS3), consisting of various field devices identified in the literature, and a main control room with relevant hardware devices. A virtual Kali Linux machine was connected to the network and played the role of a digital attacker or intruder. Several cyber-attacks were carried out, to show the risks inherent to such an interoperable and socio-technical network. These attacks included Man in the Middle (MitM) and Denial of Service (DoS) attacks. These attacks were then mitigated via system configurations. Further risks and threat considerations were identified in the literature. Using the STRIDE, DREAD and Attack Tree threat models, the risks to an anti-poaching network were classified and calculated. The most prevalent threats and the attacks performed in the simulation were all calculated to have a high risk level, posing a great threat to an unsecured network. The STRIDE classes of Denial of Service and Elevation of Privilege posed the most risk to the system, both having a calculated average risk score of 9 out of 10. Mitigations to general network threats and those identified in the simulation are mentioned. Additionally, authentication for such a system was investigated, as improper authentication practices were deemed a risk and provides a foothold for further risks in the network. Recommendations made, include the proper configuration of network devices, especially the router and switch, and the use of anti-virus, firewalls, and intrusion detection systems, as well as having an external audit performed annually. Multi-factor authentication, with a password/fingerprint combination, is recommended.

A New Machine Learning-based Hybrid Intrusion Detection System and Intelligent Routing Algorithm for MPLS Network

Machine Learning (ML) is seen as a promising application that offers autonomous learning and provides optimized solutions to complex problems. The current Multiprotocol Label Switching (MPLS)-based communication system is packed with exponentially increasing applications and different Quality-of-Services (QoS) requirements. As the network is getting complex and congested, it will become challenging to satisfy the QoS requirements in the MPLS network. This study proposes a hybrid ML-based intrusion detection system (ML-IDS) and ML-based intelligent routing algorithm (ML-RA) for MPLS network. The research is divided into three parts, which are (1) dataset development, (2) algorithm development, and (3) algorithm performance evaluation. The dataset development for both algorithms is carried out via simulations in Graphical Network Simulator 3 (GNS3). The datasets are then fed into MATLAB to train ML classifiers and regression models to classify the incoming traffic as normal or attack and predict traffic delays for all available routes, respectively. Only the normal traffic predicted by the ML-IDS algorithm will be allowed to enter the network domain, and the route with the fastest delay predicted by the ML-RA is assigned for routing. The ML-based routing algorithm is compared to the conventional routing algorithm, Routing Information Protocol version 2 (RIPv2). From the performance evaluations, the ML-RA shows 100 percent accuracy in predicting the fastest route in the network. During network congestion, the proposed ML outperforms the RIPv2 in terms of delay and throughput on average by 57.61 percent and 46.57 percent, respectively.

Microgrid Power Sharing Framework for Software Defined Networking and Cybersecurity Analysis

Hierarchical control is a widely used strategy that can increase resilience and improve the reliability of the electrical network based on microgrid global variables. The large amounts of data required during transitions prompt the use of more reliable and flexible communications to achieve the control objectives. Such communications can involve potential cyber vulnerabilities and latency restrictions, which cannot be always addressed in real-time. To accurately capture the system’s overall operation, this paper proposes a co-simulation framework driven by flexible communications and a resilient control algorithm to regulate the frequency and voltage deviations in a networked microgrid. Model-based predictive control has been implemented, to avoid slow transient response associated with linear hierarchical control. Software-Defined Networking (SDN) is responsible for increasing the communication intelligence during the power-sharing process. The effects of critical communications and overall system performance are reviewed and compared for different co-simulation scenarios. Graphical Network Simulator (GNS3) is used in combination with model-based predictive control and SDN, to provide latency below 100 ms, as defined in IEC 61850. Testing of the proposed system under different cyber attack scenarios demonstrate its excellent performance. The novel control architecture presented in the paper provides a reference framework for future cloud computing-based microgrids.

Performance of VoIP Using Routing Open Shortest Path First with Multi-Protocol Label Switching

Voice over internet protocol is a communication technology in the world of computer network that can be used for sending voice or video and data transmission over Internet Protocol in real time. VoIP network can be implemented with Asterisk applications as a server to a Private Automatic Branch eXchange applied in a Graphical Network Simulator 3. In this study, VoIP communication using routing OSPF within MPLS will be calculated, the QoS value collected based on impact performance under normal condition and not normal condition (link failure) different varian bandwidth in the network. The results from the simulation show that in normal condition and not normal condition there is average delay value with routing OSPF 4 ms and routing OSPF with MPLS 5 ms, the value of jitter max which same of 6 ms using varian bandwidth from 256 kbps and 512 kbps. All of the QoS parameters, such as delay, jitter and packet loss will be compare to standard ITU-T G.114. This research can be extended with addition of another measurement or another protocol.

Farklı türdeki ağ ataklarının GNS3 platformunda analizi

In this study, DDoS, SQL injection and XSS attacks that hackers use most in cyber attacks are modeled on GNS3 emulator platform and network security is analyzed. A network scenario was designed using Graphical Network Simulator (GNS3), virtual machines, VMware workstation, firewall, router, and switches in order to examine the attacks on networks in real environment. Attacks were performed on this network with different techniques and target servers and devices were affected by the attacks. At the time of the attack, network traffic between the attacker and the target device was recorded with Wireshark software. Network traffic records and traces were examined and evaluations of attacks were made.

Application of OSPF Network in Spanning Tree Protocol Method to Prevent Looping Routing

Network is a basic thing that must exist in an agency or company, because the network can facilitate us in terms of data exchange and data transfer. In this study the application of the OSPF network to the Spanning Tree Protocol method to maintain Looping Routing using the Graphical Network Simulator 3 (GNS 3) simulator is expected to be the main objective in facilitating work completion, especially in terms of communication system data collection. With the help of Routing which serves to determine the route traveled by a packet that originates from a source node to the destination node on the network. Open shortest path first (OSPF) is one of the dynamic routing protocols that uses a link-state algorithm to build and calculate the shortest path to all known destinations. STP functions as a protocol for managing connections using the spanning tree algorithm.

Analysis of FHRP Design and Implementation in RIPv2 and OSPF Routing Protocols

The high reliability of data access has become a problem faced by many companies, institutions, and universities. For this reason, a protocol required that can protect the network from a communication breakdown. One method used to maintain communication is by implementing a protocol redundancy system. One or more routers will act as the primary router for load balancing, and some routers are in standby mode if one main router is down. First hop redundancy protocols (FHRP) is a protocol that implements redundancy and load balancing systems. This protocol can transfer access data traffic if one of the routers on the network is down. FHRP divided into virtual router redundancy protocol (VRRP) and gateway load balancing Protocol (GLBP). This research analyzes the design and implementation to provide information about the quality of VRRP and GLBP services on the main router and the backup router, by using an application graphical network simulator (GNS) simulation 3. In the GNS3 application, a LAN network topology is designed with eight router devices in the form of a ring topology using RIPv2 and OSPF routing protocols, then implemented in protocols VRRP and GLBP. The analysis results show that GLBP can back up the network faster than VRRP when the primary router is down. If implemented into a LAN network with RIPv2 and OSPF routing protocols, VRRP has better service quality than GLBP.

Use of Access Control List Application for Bandwidth Management among Selected Public Higher Education Institutions in Ethiopia

A cross-sectional survey on use of access control list application for bandwidth management among selected public higher education institutions in Ethiopia was conducted. The objective was to help academic institutions achieve sustainable quality of network service and bandwidth management. 100 information and communication technology staff of 3 directorates of universities and located at Haramaya, Dire Dawa and Odabutum were sampled, using purposive and simple random sampling techniques. Structured questionnaire, interview and observation checklist used for data collection and analyzed to answer the research question. Results revealed a set of procedures performed by hardware, software and administrators, to monitor access, identify users requesting access, record access attempts, and grant or deny access to resources on the internet was used as access control list application. Also, revealed was qualitative data analysis that allowed students to bring their own devices (no matter the number) to connect to the campus-wide network. The implication of results in the three universities was that they were not taking bandwidth management seriously, which was evidenced by the absence of access control list application. It concludes that access control list application for bandwidth management is a necessity and Graphical Network Simulator software version 3 was recommended as appropriate for implementation.

Implementation flow control to improve quality of service on computer networks

<p>Quality of Service (QoS) is the collective effect of service performances, which determine the degree of satisfaction of a user of the service. In addition, QoS defined as the ability of a network to provide good service. QoS aims to provide different quality of services for various needs in the IP network. QoS parameters that can be used to analyze the data communication services are jitter, packet loss, throughput, and delay. The quality of QoS parameters in the network is affected by congestion. Congestion occurs because there is an excessive queue in the network. Congestion can be prevented by implementing flow control on network. Flow control is a method to control the data packet flow in a network. By controlling of the data packet flow, it can improve of QoS. This study intends to find out value of QoS on the internet network at Faculty Engineering, State University of Semarang by measuring network performance using QoS parameters. Then, in this research will be implemented the token bucket method as a flow control mechanism at the network to improve the QoS. After research and data analysis, internet network at Faculty Engineering State University of Semarang has QoS value was 3,5 with 87,5 % of percentage and classified in satisfying of category. When measuring the network performance, there are decreases of performance at access point that having data rates 150 Mbps with many users connected. It has 9,0 ms of delay value, 0.046 ms of jitter, 16,6% of packet loss and, 1293407 bps of throughput. After token bucket was applied as flow control mechanism that be simulated on Graphical Network Simulator 3, the internet network has QoS values 3,75 with 93,75 % of percentage and classified as “satisfying” category. Furthermore, the percentage of the throughput value obtained on network by implementing flow control is 62%, while on the existing network is 41%.</p>

Optimal computer network based on graph topology model

In large computer network design, it is desirable to have connections which achieve the most efficient and reliable communication. In such design, there are several factors which should be considered. Two of the factors which seem to appear most frequently are, (a) the number of connection which can be attached to a computer is limited, and (b) a short communication route between any two computers is required. Thus, it will end up with a large network subject to these constraints. The computer network can be modelled as a graph, where each computer is represented by a vertex, and the connection between the two computers is represented by an edge. In this paper, we compare the efficiency and reliability of computer networks based on their graph topology model. The method used in this study is literature study, designing the new topology, and making simulation and testing using a software simulator called Graphical Network Simulator 3 (GNS3). The results of this study are the comparison of the application of prism and petersen graph topologies in computer networks topology.

MODELING OF INFORMATION SECURITY SYSTEM IN COMPUTER NETWORK

This article presents simulation modeling process as the way to study the behavior of the Information Security system. Graphical Network Simulator is used for modeling such system and Kali Linux is used for penetration testing and security audit. To implement the project GNS3 package is selected. GNS3 is a graphical network emulator that allows you to simulate a virtual network of more than 20 different manufacturers on a local computer, connect a virtual network to a real one, add a full computer to the network, Third-party Applications for network packet analysis are supported. Depending on the hardware platform on which GNS3 will be used, it is possible to build complex projects consisting of routers Cisco, Cisco ASA, Juniper, as well as servers running network operating systems. Using modeling in the design of computing systems, you can: estimate the bandwidth of the network and its components; identify vulnerability in the structure of computing system; compare different organizations of a computing system; make a perspective development forecast for computer system; predict future requirements for network bandwidth; estimate the performance and the required number of servers in the network; compare various options for computing system upgrading; estimate the impact of software upgrades, workstations or servers power, network protocols changes on the computing system. Research computing system parameters with different characteristics of the individual components allows us to select the network and computing equipment, taking into account its performance, quality of service, reliability and cost. As the cost of a single port in active network equipment can vary depends on the manufacturer's equipment, technology used, reliability, manageability. The modeling can minimize the cost of equipment for the computing system. The modeling becomes effective when the number of workstations is 50-100, and when it more than 300, the total savings could reach 30-40% of project cost.

A Comparison between the Use of Cisco Packet Tracer and Graphical Network Simulator 3 as Learning Media on Students’ Achievement

Usually in studying the practice of computer networks, it is encountered several obstacles such as (1) limited computer networks design tools, (2) limited learning time to design computer networks and (3) technical difficulties for finding the solutions of errors. To overcome those barriers as proposed in this study, computer network simulators were used. Computer network simulators were expected to help students designing and simulating networks planned to be applied to computer network practices. This study used two simulators to compare its effectiveness in assisting the students to learn computer networks, which were Cisco Packet Tracer and Graphical Network Simulator 3 (GNS3). This study was aimed to determine the difference of the influence of network simulators to (1) learning achievement, and (2) learning achievement improvement. The quasi-experiment method was used and data were collected through conducting testing before and after the utilization of the simulators. Based on the testing results it was concluded that (1) different effect of using Cisco Packet Tracer and GNS3, the average grade achievement in the class using GNS3 and using Cisco packet tracer were 76.67 and 70 respectively, and (2) improved learning achievement using GNS3 for around 35%, higher than using Cisco Packet Tracer.

Construction and testing of the simulation polygon for the protection of critical information resources

In this article, the process of constructing an imitation polygon as a method for studying the behavior of the system of protection of critical information resources is considered. The graphical network simulator application is used to construct the simulation polygon. The functionality of the GNS3 package is explored. The main properties of the simulation ground of protection of critical information resources are considered. The testing of a built-up simulation ground for protecting critical information resources by software was performed and network port scan was performed using the Zenmap utility. Information on the internal network and internal interface of Cisco ASA are gathered. Using the hping3 utility, a stress test of the network is implemented - the Syn-Flood attack on the server's failure. The counteraction of this attack with the use of TCP SYN Cookies is implemented.

DESIGN AND RESEARCH OF MATHEMATICAL MODEL FOR INFORMATION SECURITY SYSTEM IN COMPUTER NETWORK

This article presents simulation modeling process as the way to study the behavior of the Information Security system. Graphical Network Simulator is used for modeling such system and Kali Linux is used for penetration testing and security audit. The main approaches to simulation of computer networks are considered. The functional capabilities of the GNS3 package are explored. When building an imitation model, the main components of information protection were used. The Kali Linux package implements a number of attacks. Using simulation in the design of computer systems done the following: estimated bandwidth network and its components identified bottlenecks in the structure of computer systems; compared different options for computer systems; made a promising forecast for the development of computer systems; provides future requirements for bandwidth.

An Empirical Study of IPV6 Multicast Routing over a Virtual Local Area Network

The Internet Protocol Version 6 was designed to efficiently improve on the existing functionalities of Internet Protocol Version 4 and to introduce new constructs that it lacks. Though IPv6 is not an extension of IPv4, as the two protocols have different specifications. Both the new and the formal protocol use multicast routing for many of their operations; this implies multicast routing is core in the protocols. This experiment became imperative especially in this era everyone is looking forward to using IPv6 as the default network. This paper tested the performance of IPv6 multicast routing over a virtual local area network. Graphical Network Simulator 3 was used to configure the network and Microsoft Hyper-V was used as the hypervisor on which the six virtual machines (hosts) reside. Parameters such as throughput, latency variations, data loss and the network over heads were examined. The experiment has shown that, IPv6 multicast routing over a virtual network has 100% throughput, the jitter (variations in latency) varies among the hosts in all the running scenarios, but low and stabled jitters were noticed as the running duration increases and the number of streaming increase from one multicast stream to running two multicast streams simultaneously. There was no data loss.

Green Computing in WAN Through Intensified Teredo IPv6 Tunneling to Route Multifarious Symmetric NAT

IPv4---IPv6 transition rolls out numerous challenges to the world of Internet as the Internet is drifting from IPv4 to IPv6. IETF recommends few transition techniques which includes Dual stack, translation and tunneling. By means of tunneling the IPv6 packets over IPv4 UDP, Teredo maintains IPv4/IPv6 Dual stack node in isolated IPv4 networks behindhand Network Address Translation (NAT). However, the proposed tunneling protocol works with the symmetric and asymmetric NAT. In order to make a Teredo support several symmetric NATs along with several asymmetric NAT, we propose Multifarious Sym Teredo, which is an extension of Teredo with a capability of navigating through several symmetric NAT using Graphical Network Simulator 3. The work preserves the Teredo architecture and also offers a backward compatibility with the original Teredo protocol.

HTTP Packet Inspection Policy for Improvising Internal Network Security

Past few years the use of Internet and its applications has increased to a great extent. There is also an enormous growth in the establishment of computer networks by large, medium and small organizations, for data transfer and information exchange. Due to this huge growth, incidents of cyber-attacks and security breaches have also increased. Data on a network is transferred using protocols such as Hyper Text Transfer Protocol, which is very vulnerable. Many types of malicious contents are hidden in packets that are transferred over a network or system, which may can to get it slow, crash or buffer overflow etc. Thus it is very important to secure networks from such types of attacks. There are lots of mechanisms available but still they are not good enough because of dynamic environment. Such kind of attacks can be countered by applying appropriate policies on network edge devices like Adaptive Security Appliance, firewalls, web servers, router etc. Also the packets which are transferred between networks, they should deeply inspect for malicious or any insecure contents. In this paper firstly we would study Network security issues and available mechanism to counter them our focus would be on inspecting the HTTP packets deeply by applying policies on ASA. Finally we would use Graphical Network Simulator (GNS3) to test such a policy.

Performance Analysis of EIGRP via OSPF Based on OPNET and GNS3

In this study we present a simulation based comparative performance analysis between OSPF and EIGRP for real time applications by using Optimized Network Engineering Tools (OPNET) and Graphical Network Simulator (GNS3). In order to evaluate OSPF and EIGRP’s performance, we have designed three network models where the first, second and third Network model are configured, respectively with OSPF, EIGRP and combination of EIGRP and OSPF. This study shows the estimation of proposed routing protocols based on the quantitative metrics such as Convergence Time, Throughput, End to End delay, Jitter and Packet Loss through the simulated network models. The evaluation results show that EIGRP routing protocol provides a better performance than OSPF routing protocol for real time applications.

Practical Security Approaches against Border Gateway Protocol (BGP) Session Hijacking Attacks between Autonomous Systems

The border gateway protocol (BGP) is the default inter domain routing protocol used on the internet for exchanging information between autonomous systems. Available literature suggests that BGP is vulnerable to session hijacking attacks. There are a number of proposals aimed at improving BGP security which have not been fully implemented. This paper examines a number of approaches for securing BGP through a comparative study and identifies the reasons why these proposals have not been implemented commercially. This paper analyses the architecture of internet routing and the design of BGP while focusing on the problem of BGP session hijacking attacks. Using Graphical Network Simulator 3 (GNS-3), a session hijack is demonstrated and a solution which involves the implementation of route filtering, policy-maps and route-maps on CISCO routers representing ASes is carried out. In the end, a workable industry standard framework for securing and protecting BGP sessions and border routers from exploitation with little or no modification to the existing routing infrastructure is demonstrated.