draft-ietf-mboned-mtrace-v2-26.txt   rfc8487.txt 
MBONED Working Group H. Asaeda Internet Engineering Task Force (IETF) H. Asaeda
Internet-Draft NICT Request for Comments: 8487 NICT
Intended status: Standards Track K. Meyer Category: Standards Track K. Meyer
Expires: February 1, 2019 ISSN: 2070-1721 Dell EMC
W. Lee, Ed. W. Lee, Ed.
July 31, 2018 October 2018
Mtrace Version 2: Traceroute Facility for IP Multicast Mtrace Version 2: Traceroute Facility for IP Multicast
draft-ietf-mboned-mtrace-v2-26
Abstract Abstract
This document describes the IP multicast traceroute facility, named This document describes the IP multicast traceroute facility, named
Mtrace version 2 (Mtrace2). Unlike unicast traceroute, Mtrace2 Mtrace version 2 (Mtrace2). Unlike unicast traceroute, Mtrace2
requires special implementations on the part of routers. This requires special implementations on the part of routers. This
specification describes the required functionality in multicast specification describes the required functionality in multicast
routers, as well as how an Mtrace2 client invokes a query and routers, as well as how an Mtrace2 client invokes a Query and
receives a reply. receives a Reply.
Status of This Memo Status of This Memo
This Internet-Draft is submitted in full conformance with the This is an Internet Standards Track document.
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months This document is a product of the Internet Engineering Task Force
and may be updated, replaced, or obsoleted by other documents at any (IETF). It represents the consensus of the IETF community. It has
time. It is inappropriate to use Internet-Drafts as reference received public review and has been approved for publication by the
material or to cite them other than as "work in progress." Internet Engineering Steering Group (IESG). Further information on
Internet Standards is available in Section 2 of RFC 7841.
This Internet-Draft will expire on February 1, 2019. Information about the current status of this document, any errata,
and how to provide feedback on it may be obtained at
https://www.rfc-editor.org/info/rfc8487.
Copyright Notice Copyright Notice
Copyright (c) 2018 IETF Trust and the persons identified as the Copyright (c) 2018 IETF Trust and the persons identified as the
document authors. All rights reserved. document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents Provisions Relating to IETF Documents
(https://trustee.ietf.org/license-info) in effect on the date of (https://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents publication of this document. Please review these documents
skipping to change at page 2, line 22 skipping to change at page 3, line 7
modifications of such material outside the IETF Standards Process. modifications of such material outside the IETF Standards Process.
Without obtaining an adequate license from the person(s) controlling Without obtaining an adequate license from the person(s) controlling
the copyright in such materials, this document may not be modified the copyright in such materials, this document may not be modified
outside the IETF Standards Process, and derivative works of it may outside the IETF Standards Process, and derivative works of it may
not be created outside the IETF Standards Process, except to format not be created outside the IETF Standards Process, except to format
it for publication as an RFC or to translate it into languages other it for publication as an RFC or to translate it into languages other
than English. than English.
Table of Contents Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 4 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 5
2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 6 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.1. Definitions . . . . . . . . . . . . . . . . . . . . . . . 6 2.1. Definitions . . . . . . . . . . . . . . . . . . . . . . . 7
3. Packet Formats . . . . . . . . . . . . . . . . . . . . . . . 7 3. Packet Formats . . . . . . . . . . . . . . . . . . . . . . . 8
3.1. Mtrace2 TLV format . . . . . . . . . . . . . . . . . . . 8 3.1. Mtrace2 TLV Format . . . . . . . . . . . . . . . . . . . 9
3.2. Defined TLVs . . . . . . . . . . . . . . . . . . . . . . 8 3.2. Defined TLVs . . . . . . . . . . . . . . . . . . . . . . 10
3.2.1. Mtrace2 Query . . . . . . . . . . . . . . . . . . . . 9 3.2.1. Mtrace2 Query . . . . . . . . . . . . . . . . . . . . 10
3.2.2. Mtrace2 Request . . . . . . . . . . . . . . . . . . . 11 3.2.2. Mtrace2 Request . . . . . . . . . . . . . . . . . . . 12
3.2.3. Mtrace2 Reply . . . . . . . . . . . . . . . . . . . . 11 3.2.3. Mtrace2 Reply . . . . . . . . . . . . . . . . . . . . 12
3.2.4. IPv4 Mtrace2 Standard Response Block . . . . . . . . 12 3.2.4. IPv4 Mtrace2 Standard Response Block . . . . . . . . 13
3.2.5. IPv6 Mtrace2 Standard Response Block . . . . . . . . 16 3.2.5. IPv6 Mtrace2 Standard Response Block . . . . . . . . 18
3.2.6. Mtrace2 Augmented Response Block . . . . . . . . . . 19 3.2.6. Mtrace2 Augmented Response Block . . . . . . . . . . 20
3.2.7. Mtrace2 Extended Query Block . . . . . . . . . . . . 20 3.2.7. Mtrace2 Extended Query Block . . . . . . . . . . . . 21
4. Router Behavior . . . . . . . . . . . . . . . . . . . . . . . 21 4. Router Behavior . . . . . . . . . . . . . . . . . . . . . . . 22
4.1. Receiving Mtrace2 Query . . . . . . . . . . . . . . . . . 21 4.1. Receiving an Mtrace2 Query . . . . . . . . . . . . . . . 22
4.1.1. Query Packet Verification . . . . . . . . . . . . . . 21 4.1.1. Query Packet Verification . . . . . . . . . . . . . . 22
4.1.2. Query Normal Processing . . . . . . . . . . . . . . . 22 4.1.2. Query Normal Processing . . . . . . . . . . . . . . . 23
4.2. Receiving Mtrace2 Request . . . . . . . . . . . . . . . . 22 4.2. Receiving an Mtrace2 Request . . . . . . . . . . . . . . 23
4.2.1. Request Packet Verification . . . . . . . . . . . . . 22 4.2.1. Request Packet Verification . . . . . . . . . . . . . 24
4.2.2. Request Normal Processing . . . . . . . . . . . . . . 23 4.2.2. Request Normal Processing . . . . . . . . . . . . . . 24
4.3. Forwarding Mtrace2 Request . . . . . . . . . . . . . . . 24 4.3. Forwarding Mtrace2 Request . . . . . . . . . . . . . . . 26
4.3.1. Destination Address . . . . . . . . . . . . . . . . . 25 4.3.1. Destination Address . . . . . . . . . . . . . . . . . 26
4.3.2. Source Address . . . . . . . . . . . . . . . . . . . 25 4.3.2. Source Address . . . . . . . . . . . . . . . . . . . 26
4.3.3. Appending Standard Response Block . . . . . . . . . . 25 4.3.3. Appending Standard Response Block . . . . . . . . . . 26
4.4. Sending Mtrace2 Reply . . . . . . . . . . . . . . . . . . 26 4.4. Sending Mtrace2 Reply . . . . . . . . . . . . . . . . . . 27
4.4.1. Destination Address . . . . . . . . . . . . . . . . . 26 4.4.1. Destination Address . . . . . . . . . . . . . . . . . 27
4.4.2. Source Address . . . . . . . . . . . . . . . . . . . 26 4.4.2. Source Address . . . . . . . . . . . . . . . . . . . 27
4.4.3. Appending Standard Response Block . . . . . . . . . . 26 4.4.3. Appending Standard Response Block . . . . . . . . . . 27
4.5. Proxying Mtrace2 Query . . . . . . . . . . . . . . . . . 26 4.5. Proxying Mtrace2 Query . . . . . . . . . . . . . . . . . 28
4.6. Hiding Information . . . . . . . . . . . . . . . . . . . 27 4.6. Hiding Information . . . . . . . . . . . . . . . . . . . 28
5. Client Behavior . . . . . . . . . . . . . . . . . . . . . . . 29
5.1. Sending Mtrace2 Query . . . . . . . . . . . . . . . . . . 29
5.1.1. Destination Address . . . . . . . . . . . . . . . . . 29
5.1.2. Source Address . . . . . . . . . . . . . . . . . . . 29
5.2. Determining the Path . . . . . . . . . . . . . . . . . . 29
5.3. Collecting Statistics . . . . . . . . . . . . . . . . . . 29
5.4. Last-Hop Router (LHR) . . . . . . . . . . . . . . . . . . 30
5.5. First-Hop Router (FHR) . . . . . . . . . . . . . . . . . 30
5.6. Broken Intermediate Router . . . . . . . . . . . . . . . 30
5.7. Non-supported Router . . . . . . . . . . . . . . . . . . 30
5.8. Mtrace2 Termination . . . . . . . . . . . . . . . . . . . 31
5.8.1. Arriving at Source . . . . . . . . . . . . . . . . . 31
5.8.2. Fatal Error . . . . . . . . . . . . . . . . . . . . . 31
5.8.3. No Upstream Router . . . . . . . . . . . . . . . . . 31
5.8.4. Reply Timeout . . . . . . . . . . . . . . . . . . . . 31
5.9. Continuing after an Error . . . . . . . . . . . . . . . . 31
5. Client Behavior . . . . . . . . . . . . . . . . . . . . . . . 27 6. Protocol-Specific Considerations . . . . . . . . . . . . . . 32
5.1. Sending Mtrace2 Query . . . . . . . . . . . . . . . . . . 27 6.1. PIM-SM . . . . . . . . . . . . . . . . . . . . . . . . . 32
5.1.1. Destination Address . . . . . . . . . . . . . . . . . 28 6.2. Bidirectional PIM . . . . . . . . . . . . . . . . . . . . 32
5.1.2. Source Address . . . . . . . . . . . . . . . . . . . 28 6.3. PIM-DM . . . . . . . . . . . . . . . . . . . . . . . . . 32
5.2. Determining the Path . . . . . . . . . . . . . . . . . . 28 6.4. IGMP/MLD Proxy . . . . . . . . . . . . . . . . . . . . . 33
5.3. Collecting Statistics . . . . . . . . . . . . . . . . . . 28 7. Problem Diagnosis . . . . . . . . . . . . . . . . . . . . . . 33
5.4. Last Hop Router (LHR) . . . . . . . . . . . . . . . . . . 28 7.1. Forwarding Inconsistencies . . . . . . . . . . . . . . . 33
5.5. First Hop Router (FHR) . . . . . . . . . . . . . . . . . 29 7.2. TTL or Hop-Limit Problems . . . . . . . . . . . . . . . . 33
5.6. Broken Intermediate Router . . . . . . . . . . . . . . . 29 7.3. Packet Loss . . . . . . . . . . . . . . . . . . . . . . . 33
5.7. Non-Supported Router . . . . . . . . . . . . . . . . . . 29 7.4. Link Utilization . . . . . . . . . . . . . . . . . . . . 34
5.8. Mtrace2 Termination . . . . . . . . . . . . . . . . . . . 29 7.5. Time Delay . . . . . . . . . . . . . . . . . . . . . . . 34
5.8.1. Arriving at Source . . . . . . . . . . . . . . . . . 29 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 34
5.8.2. Fatal Error . . . . . . . . . . . . . . . . . . . . . 30 8.1. "Mtrace2 Forwarding Codes" Registry . . . . . . . . . . . 35
5.8.3. No Upstream Router . . . . . . . . . . . . . . . . . 30 8.2. "Mtrace2 TLV Types" Registry . . . . . . . . . . . . . . 35
5.8.4. Reply Timeout . . . . . . . . . . . . . . . . . . . . 30 8.3. UDP Destination Port . . . . . . . . . . . . . . . . . . 35
5.9. Continuing after an Error . . . . . . . . . . . . . . . . 30 9. Security Considerations . . . . . . . . . . . . . . . . . . . 35
6. Protocol-Specific Considerations . . . . . . . . . . . . . . 31 9.1. Addresses in Mtrace2 Header . . . . . . . . . . . . . . . 35
6.1. PIM-SM . . . . . . . . . . . . . . . . . . . . . . . . . 31 9.2. Verification of Clients and Peers . . . . . . . . . . . . 35
6.2. Bi-Directional PIM . . . . . . . . . . . . . . . . . . . 31 9.3. Topology Discovery . . . . . . . . . . . . . . . . . . . 36
6.3. PIM-DM . . . . . . . . . . . . . . . . . . . . . . . . . 31 9.4. Characteristics of Multicast Channel . . . . . . . . . . 36
6.4. IGMP/MLD Proxy . . . . . . . . . . . . . . . . . . . . . 32 9.5. Limiting Query/Request Rates . . . . . . . . . . . . . . 37
7. Problem Diagnosis . . . . . . . . . . . . . . . . . . . . . . 32 9.6. Limiting Reply Rates . . . . . . . . . . . . . . . . . . 37
7.1. Forwarding Inconsistencies . . . . . . . . . . . . . . . 32 9.7. Specific Security Concerns . . . . . . . . . . . . . . . 37
7.2. TTL or Hop Limit Problems . . . . . . . . . . . . . . . . 32 9.7.1. Request and Response Bombardment . . . . . . . . . . 37
7.3. Packet Loss . . . . . . . . . . . . . . . . . . . . . . . 32 9.7.2. Amplification Attack . . . . . . . . . . . . . . . . 37
7.4. Link Utilization . . . . . . . . . . . . . . . . . . . . 33 9.7.3. Leaking of Confidential Topology Details . . . . . . 38
7.5. Time Delay . . . . . . . . . . . . . . . . . . . . . . . 33 9.7.4. Delivery of False Information (Forged Reply Messages) 38
8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 33 10. References . . . . . . . . . . . . . . . . . . . . . . . . . 39
8.1. "Mtrace2 Forwarding Codes" Registry . . . . . . . . . . . 33 10.1. Normative References . . . . . . . . . . . . . . . . . . 39
8.2. "Mtrace2 TLV Types" Registry . . . . . . . . . . . . . . 34 10.2. Informative References . . . . . . . . . . . . . . . . . 40
8.3. UDP Destination Port . . . . . . . . . . . . . . . . . . 34 Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . . 41
9. Security Considerations . . . . . . . . . . . . . . . . . . . 34 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 41
9.1. Addresses in Mtrace2 Header . . . . . . . . . . . . . . . 34
9.2. Verification of Clients and Peers . . . . . . . . . . . . 34
9.3. Topology Discovery . . . . . . . . . . . . . . . . . . . 35
9.4. Characteristics of Multicast Channel . . . . . . . . . . 35
9.5. Limiting Query/Request Rates . . . . . . . . . . . . . . 35
9.6. Limiting Reply Rates . . . . . . . . . . . . . . . . . . 36
9.7. Specific Security Concerns . . . . . . . . . . . . . . . 36
9.7.1. Request and Response Bombardment . . . . . . . . . . 36
9.7.2. Amplification Attack . . . . . . . . . . . . . . . . 36
9.7.3. Leaking of Confidential Topology Details . . . . . . 36
9.7.4. Delivery of False Information (Forged Reply Messages) 37
10. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 38
11. References . . . . . . . . . . . . . . . . . . . . . . . . . 38
11.1. Normative References . . . . . . . . . . . . . . . . . . 38
11.2. Informative References . . . . . . . . . . . . . . . . . 39
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 39
1. Introduction 1. Introduction
Given a multicast distribution tree, tracing hop-by-hop downstream Given a multicast distribution tree, tracing hop-by-hop downstream
from a multicast source to a given multicast receiver is difficult from a multicast source to a given multicast receiver is difficult
because there is no efficient and deterministic way to determine the because there is no efficient and deterministic way to determine the
branch of the multicast routing tree on which that receiver lies. On branch of the multicast routing tree on which that receiver lies. On
the other hand, walking up the tree from a receiver to a source is the other hand, walking up the tree from a receiver to a source is
easy, as most existing multicast routing protocols know the upstream easy, as most existing multicast routing protocols know the upstream
router for each source. Tracing from a receiver to a source can router for each source. Tracing from a receiver to a source can
involve only the routers on the direct path. involve only the routers on the direct path.
This document specifies the multicast traceroute facility named This document specifies the multicast traceroute facility named
Mtrace version 2 or Mtrace2 which allows the tracing of an IP Mtrace version 2 or Mtrace2, which allows the tracing of an IP
multicast routing path. Mtrace2 is usually initiated from an Mtrace2 multicast routing path. Mtrace2 is usually initiated from an Mtrace2
client by sending an Mtrace2 Query to a Last Hop Router (LHR) or to a client by sending an Mtrace2 Query to a Last-Hop Router (LHR) or to a
Rendezvous Point (RP). The RP is a special router where sources and Rendezvous Point (RP). The RP is a special router where sources and
receivers meet in Protocol Independent Multicast - Sparse Mode (PIM- receivers meet in Protocol Independent Multicast - Sparse Mode
SM) [5]. From the LHR/RP receiving the query, the tracing is (PIM-SM) [5]. From the LHR/RP receiving the Query, the tracing is
directed towards a specified source if a source address is specified directed towards a specified source if a source address is specified
and source specific state exists on the receiving router. If no and a source-specific state exists on the receiving router. If no
source address is specified or if no source specific state exists on source address is specified or if no source-specific state exists on
a receiving LHR, the tracing is directed toward the RP for the a receiving LHR, the tracing is directed toward the RP for the
specified group address. Moreover, Mtrace2 provides additional specified group address. Moreover, Mtrace2 provides additional
information such as the packet rates and losses, as well as other information such as the packet rates and losses, as well as other
diagnostic information. Mtrace2 is primarily intended for the diagnostic information. Mtrace2 is primarily intended for the
following purposes: following purposes:
o To trace the path that a packet would take from a source to a o To trace the path that a packet would take from a source to a
receiver. receiver.
o To isolate packet loss problems (e.g., congestion). o To isolate packet-loss problems (e.g., congestion).
o To isolate configuration problems (e.g., Time to live (TTL) o To isolate configuration problems (e.g., Time to live (TTL)
threshold). threshold).
Figure 1 shows a typical case on how Mtrace2 is used. First-hop The following figure shows a typical case of how Mtrace2 is used.
router (FHR) represents the first-hop router, LHR represents the FHR represents the first-hop router, LHR represents the last-hop
last-hop router (LHR), and the arrow lines represent the Mtrace2 router, and the arrow lines represent the Mtrace2 messages that are
messages that are sent from one node to another. The numbers before sent from one node to another. The numbers before the Mtrace2
the Mtrace2 messages represent the sequence of the messages that messages represent the sequence of the messages that would happen.
would happen. Source, Receiver and Mtrace2 client are typically The source, receiver, and Mtrace2 client are typically hosts.
hosts.
2. Request 2. Request 2. Request 2. Request
+----+ +----+ +----+ +----+
| | | | | | | |
v | v | v | v |
+--------+ +-----+ +-----+ +----------+ +--------+ +-----+ +-----+ +----------+
| Source |----| FHR |----- The Internet -----| LHR |----| Receiver | | Source |----| FHR |----- The Internet -----| LHR |----| Receiver |
+--------+ +-----+ | +-----+ +----------+ +--------+ +-----+ | +-----+ +----------+
\ | ^ \ | ^
\ | / \ | /
\ | / \ | /
\ | / \ | /
3. Reply \ | / 1. Query 3. Reply \ | / 1. Query
\ | / \ | /
\ | / \ | /
\ +---------+ / \ +---------+ /
v | Mtrace2 |/ v | Mtrace2 |/
| client | | Client |
+---------+ +---------+
Figure 1
When an Mtrace2 client initiates a multicast trace, it sends an When an Mtrace2 client initiates a multicast trace, it sends an
Mtrace2 Query packet to an LHR or RP for a multicast group and, Mtrace2 Query packet to an LHR or RP for a multicast group and,
optionally, a source address. The LHR/RP turns the Query packet into optionally, a source address. The LHR/RP turns the Query packet into
a Request. The Request message type enables each of the upstream a Request. The Request message type enables each of the upstream
routers processing the message to apply different packet and message routers processing the message to apply different packet and message
validation rules than those required for handling of a Query message. validation rules than those required for the handling of a Query
The LHR/RP then appends a standard response block containing its message. The LHR/RP then appends a Standard Response Block
interface addresses and packet statistics to the Request packet, then containing its interface addresses and packet statistics to the
forwards the packet towards the source/RP. The Request packet is Request packet, then forwards the packet towards the source/RP. The
either unicasted to its upstream router towards the source/RP, or Request packet is either unicasted to its upstream router towards the
multicasted to the group if the upstream router's IP address is not source/RP or multicasted to the group if the upstream router's IP
known. In a similar fashion, each router along the path to the address is not known. In a similar fashion, each router along the
source/RP appends a standard response block to the end of the Request path to the source/RP appends a Standard Response Block to the end of
packet before forwarding it to its upstream router. When the FHR the Request packet before forwarding it to its upstream router. When
receives the Request packet, it appends its own standard response the FHR receives the Request packet, it appends its own Standard
block, turns the Request packet into a Reply, and unicasts the Reply Response Block, turns the Request packet into a Reply, and unicasts
back to the Mtrace2 client. the Reply back to the Mtrace2 client.
The Mtrace2 Reply may be returned before reaching the FHR under some The Mtrace2 Reply may be returned before reaching the FHR under some
circumstances. This can happen if a Request packet is received at an circumstances. This can happen if a Request packet is received at an
RP or gateway, or when any of several types of error or exception RP or gateway, or when any of several types of error or exception
conditions occur which prevent sending of a request to the next conditions occur that prevent the sending of a Request to the next
upstream router. upstream router.
The Mtrace2 client waits for the Mtrace2 Reply message and displays The Mtrace2 client waits for the Mtrace2 Reply message and displays
the results. When not receiving an Mtrace2 Reply message due to the results. When not receiving an Mtrace2 Reply message due to
network congestion, a broken router (see Section 5.6), or a non- network congestion, a broken router (see Section 5.6), or a non-
responding router (see Section 5.7), the Mtrace2 client may resend responding router (see Section 5.7), the Mtrace2 client may resend
another Mtrace2 Query with a lower hop count (see Section 3.2.1), and another Mtrace2 Query with a lower hop count (see Section 3.2.1) and
repeat the process until it receives an Mtrace2 Reply message. The repeat the process until it receives an Mtrace2 Reply message. The
details are Mtrace2 client specific and outside the scope of this details are specific to the Mtrace2 client and outside the scope of
document. this document.
Note that when a router's control plane and forwarding plane are out Note that when a router's control plane and forwarding plane are out
of sync, the Mtrace2 Requests might be forwarded based on the control of sync, the Mtrace2 Requests might be forwarded based on the control
states instead. In this case, the traced path might not represent states instead. In this case, the traced path might not represent
the real path the data packets would follow. the real path the data packets would follow.
Mtrace2 supports both IPv4 and IPv6. Unlike the previous version of Mtrace2 supports both IPv4 and IPv6. Unlike the previous version of
Mtrace, which implements its query and response as Internet Group Mtrace, which implements its query and response as Internet Group
Management Protocol (IGMP) messages [8], all Mtrace2 messages are Management Protocol (IGMP) messages [10], all Mtrace2 messages are
UDP-based. Although the packet formats of IPv4 and IPv6 Mtrace2 are UDP based. Although the packet formats of IPv4 and IPv6 Mtrace2 are
different because of the address families, the syntax between them is different because of the address families, the syntax between them is
similar. similar.
This document describes the base specification of Mtrace2 that can This document describes the base specification of Mtrace2 that can
serve as a basis for future proposals such as Mtrace2 for Automatic serve as a basis for future proposals such as Mtrace2 for Automatic
Multicast Tunneling (AMT) [9] and Mtrace2 for Multicast in MPLS/BGP Multicast Tunneling (AMT) [16] and Mtrace2 for Multicast in MPLS/BGP
IP VPNs (MVPN) [10]. They are therefore out of the scope of this IP VPNs (known as Multicast VPN (MVPN)) [15]. They are, therefore,
document. out of the scope of this document.
2. Terminology 2. Terminology
In this document, the key words "MUST", "MUST NOT", "REQUIRED", The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
and "OPTIONAL" are to be interpreted as described in RFC 2119 [1], "OPTIONAL" in this document are to be interpreted as described in
and indicate requirement levels for compliant Mtrace2 BCP 14 [1] [7] when, and only when, they appear in all capitals, as
implementations. shown here. The key words indicate requirement levels for compliant
Mtrace2 implementations.
2.1. Definitions 2.1. Definitions
Since Mtrace2 Queries and Requests flow in the opposite direction to Since Mtrace2 Queries and Requests flow in the opposite direction to
the data flow, we refer to "upstream" and "downstream" with respect the data flow, we refer to "upstream" and "downstream" with respect
to data, unless explicitly specified. to data, unless explicitly specified.
Incoming interface Incoming Interface:
The interface on which data is expected to arrive from the The interface on which data is expected to arrive from the
specified source and group. specified source and group.
Outgoing interface Outgoing Interface:
This is one of the interfaces to which data from the source or RP This is one of the interfaces to which data from the source or RP
is expected to be transmitted for the specified source and group. is expected to be transmitted for the specified source and group.
It is also the interface on which the Mtrace2 Request was It is also the interface on which the Mtrace2 Request was
received. received.
Upstream router Upstream router:
The router, connecting to the Incoming interface of the current The router, connecting to the Incoming Interface of the current
router, which is responsible for forwarding data for the specified router, which is responsible for forwarding data for the specified
source and group to the current router. source and group to the current router.
First-hop router (FHR) First-Hop Router (FHR):
The router that is directly connected to the source the Mtrace2 The router that is directly connected to the source the Mtrace2
Query specifies. Query specifies.
Last-hop router (LHR) Last-Hop Router (LHR):
A router that is directly connected to a receiver. It is also the A router that is directly connected to a receiver. It is also the
router that receives the Mtrace2 Query from an Mtrace2 client. router that receives the Mtrace2 Query from an Mtrace2 client.
Group state Group state:
The state a shared-tree protocol, such as PIM-SM [5], uses to The state a shared-tree protocol, such as Protocol Independent
choose the upstream router towards the RP for the specified group. Multicast - Sparse Mode (PIM-SM) [5], uses to choose the upstream
In this state, source-specific state is not available for the router towards the RP for the specified group. In this state,
corresponding group address on the router. source-specific state is not available for the corresponding group
address on the router.
Source-specific state Source-specific state:
The state that is used to choose the path towards the source for The state that is used to choose the path towards the source for
the specified source and group. the specified source and group.
ALL-[protocol]-ROUTERS group ALL-[protocol]-ROUTERS group:
Link-local multicast address for multicast routers to communicate Link-local multicast address for multicast routers to communicate
with their adjacent routers that are running the same routing with their adjacent routers that are running the same routing
protocol. For instance, the IPv4 'ALL-PIM-ROUTERS' group is protocol. For instance, the IPv4 'ALL-PIM-ROUTERS' group is
'224.0.0.13', and the IPv6 'ALL-PIM-ROUTERS' group is 'ff02::d' '224.0.0.13', and the IPv6 'ALL-PIM-ROUTERS' group is 'ff02::d'
[5]. [5].
3. Packet Formats 3. Packet Formats
This section describes the details of the packet formats for Mtrace2 This section describes the details of the packet formats for Mtrace2
messages. messages.
All Mtrace2 messages are encoded in the Type/Length/Value (TLV) All Mtrace2 messages are encoded in the Type/Length/Value (TLV)
format (see Section 3.1). The first TLV of a message is a message format (see Section 3.1). The first TLV of a message is a message
header TLV specifying the type of message and additional context header TLV specifying the type of message and additional context
information required for processing of the message and for parsing of information required for processing of the message and for parsing of
subsequent TLVs in the message. Subsequent TLVs in a message, subsequent TLVs in the message. Subsequent TLVs in a message,
referred to as Blocks, are appended after the header TLV to provide referred to as Blocks, are appended after the header TLV to provide
additional information associated with the message. If an additional information associated with the message. If an
implementation receives an unknown TLV type for any TLV in a message, implementation receives an unknown TLV Type for any TLV in a message,
it SHOULD ignore and silently discard the entire packet. If the it SHOULD ignore and silently discard the entire packet. If the
length of a TLV exceeds the available space in the containing packet, length of a TLV exceeds the available space in the containing packet,
the implementation MUST ignore and silently discard the TLV and any the implementation MUST ignore and silently discard the TLV and any
remaining portion of the containing packet. remaining portion of the containing packet.
All Mtrace2 messages are UDP packets. For IPv4, Mtrace2 All Mtrace2 messages are UDP packets. For IPv4, Mtrace2
Query/Request/Reply messages MUST NOT be fragmented. Therefore, Query/Request/Reply messages MUST NOT be fragmented. Therefore,
Mtrace2 clients and LHRs/RPs MUST set the IP header do-not-fragment Mtrace2 clients and LHRs/RPs MUST set the IP header do-not-fragment
(DF) bit for all Mtrace2 messages. For IPv6, the packet size for the (DF) bit for all Mtrace2 messages. For IPv6, the packet size for the
Mtrace2 messages MUST NOT exceed 1280 bytes, which is the smallest Mtrace2 messages MUST NOT exceed 1280 bytes, which is the smallest
Maximum Transmission Unit (MTU) for an IPv6 interface [2]. The Maximum Transmission Unit (MTU) for an IPv6 interface [8]. The
source port is uniquely selected by the local host operating system. source port is uniquely selected by the local host operating system.
The destination port is the IANA reserved Mtrace2 port number (see The destination port is the IANA-reserved Mtrace2 port number (see
Section 8). All Mtrace2 messages MUST have a valid UDP checksum. Section 8). All Mtrace2 messages MUST have a valid UDP checksum.
Additionally, Mtrace2 supports both IPv4 and IPv6, but not mixed. Additionally, Mtrace2 supports both IPv4 and IPv6, but not when
For example, if an Mtrace2 Query or Request message arrives in as an mixed. For example, if an Mtrace2 Query or Request message arrives
IPv4 packet, all addresses specified in the Mtrace2 messages MUST be as an IPv4 packet, all addresses specified in the Mtrace2 messages
IPv4 as well. Same rule applies to IPv6 Mtrace2 messages. MUST be IPv4 as well. The same rule applies to IPv6 Mtrace2
messages.
3.1. Mtrace2 TLV format 3.1. Mtrace2 TLV Format
0 1 2 3 0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | Value .... | | Type | Length | Value .... |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Type: 8 bits Type: 8 bits
Describes the format of the Value field. For all the available Describes the format of the Value field. For all the available
types, please see Section 3.2 types, please see Section 3.2.
Length: 16 bits Length: 16 bits
Length of Type, Length, and Value fields in octets. Minimum Length of Type, Length, and Value fields in octets. Minimum
length required is 4 octets. The length MUST be a multiple of 4 length required is 4 octets. The length MUST be a multiple of 4
octets. The maximum TLV length is not defined; however the entire octets. The maximum TLV length is not defined; however, the
Mtrace2 packet length MUST NOT exceed the available MTU. entire Mtrace2 packet length MUST NOT exceed the available MTU.
Value: variable length Value: variable length
The format is based on the Type value. The length of the value The format is based on the Type value. The length of the Value
field is Length field minus 3. All reserved fields in the Value field is the Length field minus 3. All reserved fields in the
field MUST be transmitted as zeros and ignored on receipt. Value field MUST be transmitted as zeros and ignored on receipt.
3.2. Defined TLVs 3.2. Defined TLVs
The following TLV Types are defined: The following TLV Types are defined:
Code Type Code Type
==== ================================ ==== ================================
0x00 Reserved 0x00 Reserved
0x01 Mtrace2 Query 0x01 Mtrace2 Query
0x02 Mtrace2 Request 0x02 Mtrace2 Request
0x03 Mtrace2 Reply 0x03 Mtrace2 Reply
0x04 Mtrace2 Standard Response Block 0x04 Mtrace2 Standard Response Block
0x05 Mtrace2 Augmented Response Block 0x05 Mtrace2 Augmented Response Block
0x06 Mtrace2 Extended Query Block 0x06 Mtrace2 Extended Query Block
Each Mtrace2 message MUST begin with either a Query, Request or Reply Each Mtrace2 message MUST begin with either a Query, a Request, or a
TLV. The first TLV determines the type of each Mtrace2 message. Reply TLV. The first TLV determines the type of each Mtrace2
Following a Query TLV, there can be a sequence of optional Extended message. Following a Query TLV, there can be a sequence of optional
Query Blocks. In the case of a Request or a Reply TLV, it is then Extended Query Blocks. In the case of a Request or a Reply TLV, it
followed by a sequence of Standard Response Blocks, each from a is then followed by a sequence of Standard Response Blocks, each from
multicast router on the path towards the source or the RP. In the a multicast router on the path towards the source or the RP. In the
case more information is needed, a Standard Response Block can be case where more information is needed, a Standard Response Block can
followed by one or multiple Augmented Response Blocks. be followed by one or multiple Augmented Response Blocks.
We will describe each message type in detail in the next few We will describe each message type in detail in the next few
sections. sections.
3.2.1. Mtrace2 Query 3.2.1. Mtrace2 Query
An Mtrace2 Query is originated by an Mtrace2 client which sends an An Mtrace2 Query is originated by an Mtrace2 client, which sends an
Mtrace2 Query message to the LHR. The LHR modifies only the Type Mtrace2 Query message to the LHR. The LHR modifies only the Type
field of the Query TLV (to turn it into a "Request") before appending field of the Query TLV (to turn it into a "Request") before appending
a Standard Response Block and forwarding it upstream. The LHR and a Standard Response Block and forwarding it upstream. The LHR and
intermediate routers handling the Mtrace2 message when tracing intermediate routers handling the Mtrace2 message when tracing
upstream MUST NOT modify any other fields within the Query/Request upstream MUST NOT modify any other fields within the Query/Request
TLV. Additionally, intermediate routers handling the message after TLV. Additionally, intermediate routers handling the message after
the LHR has converted the Query into a Request MUST NOT modify the the LHR has converted the Query into a Request MUST NOT modify the
type field of the Request TLV. If the actual number of hops is not Type field of the Request TLV. If the actual number of hops is not
known, an Mtrace2 client could send an initial Query message with a known, an Mtrace2 client could send an initial Query message with a
large # Hops (e.g., 0xff), in order to try to trace the full path. large # Hops (e.g., 0xff), in order to try to trace the full path.
An Mtrace2 Query message is shown as follows: An Mtrace2 Query message is shown as follows:
0 1 2 3 0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | # Hops | | Type | Length | # Hops |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
| Multicast Address | | Multicast Address |
| | | |
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
| | | |
| Source Address | | Source Address |
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
| Mtrace2 Client Address | | Mtrace2 Client Address |
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Query ID | Client Port # | | Query ID | Client Port # |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Figure 2
Length: 16 bits Length: 16 bits
The length field MUST be either 20 (i.e., 8 plus 3 * 4 (IPv4 The Length field MUST be either 20 (i.e., 8 + 3 * 4 (IPv4
addresses)) or 56 (i.e., 8 + 3 * 16 (IPv6 addresses)); if the addresses)) or 56 (i.e., 8 + 3 * 16 (IPv6 addresses)); if the
length is 20, then IPv4 addresses MUST be assumed and if the length is 20, then IPv4 addresses MUST be assumed, and if the
length is 56, then IPv6 addresses MUST be assumed. length is 56, then IPv6 addresses MUST be assumed.
# Hops: 8 bits # Hops: 8 bits
This field specifies the maximum number of hops that the Mtrace2 This field specifies the maximum number of hops that the Mtrace2
client wants to trace. If there are some error conditions in the client wants to trace. If there are some error conditions in the
middle of the path that prevent an Mtrace2 Reply from being middle of the path that prevent an Mtrace2 Reply from being
received by the client, the client MAY issue another Mtrace2 Query received by the client, the client MAY issue another Mtrace2 Query
with a lower number of hops until it receives a Reply. with a lower number of hops until it receives a Reply.
Multicast Address: 32 bits or 128 bits Multicast Address: 32 bits or 128 bits
This field specifies an IPv4 or IPv6 address, which can be either: This field specifies an IPv4 or IPv6 address, which can be either:
m-1: a multicast group address to be traced; or, m-1: a multicast group address to be traced or
m-2: all 1's in case of IPv4 or the unspecified address (::) in m-2: all ones in case of IPv4 or the unspecified address (::) in
case of IPv6 if no group-specific information is desired. case of IPv6 if no group-specific information is desired.
Source Address: 32 bits or 128 bits Source Address: 32 bits or 128 bits
This field specifies an IPv4 or IPv6 address, which can be either: This field specifies an IPv4 or IPv6 address, which can be either:
s-1: a unicast address of the source to be traced; or, s-1: a unicast address of the source to be traced or
s-2: all 1's in case of IPv4 or the unspecified address (::) in
s-2: all ones in case of IPv4 or the unspecified address (::) in
case of IPv6 if no source-specific information is desired. case of IPv6 if no source-specific information is desired.
For example, the client is tracing a (*,g) group state. For example, the client is tracing a (*,g) group state.
Note that it is invalid to have a source-group combination of Note that it is invalid to have a source-group combination of
(s-2, m-2). If a router receives such combination in an Mtrace2 (s-2, m-2). If a router receives such combination in an Mtrace2
Query, it MUST silently discard the Query. Query, it MUST silently discard the Query.
Mtrace2 Client Address: 32 bits or 128 bits Mtrace2 Client Address: 32 bits or 128 bits
This field specifies the Mtrace2 client's IPv4 address or IPv6 This field specifies the Mtrace2 client's IPv4 address or IPv6
global address. This address MUST be a valid unicast address, and global address. This address MUST be a valid unicast address;
therefore, MUST NOT be all 1's or an unspecified address. The therefore, it MUST NOT be all ones or an unspecified address. The
Mtrace2 Reply will be sent to this address. Mtrace2 Reply will be sent to this address.
Query ID: 16 bits Query ID: 16 bits
This field is used as a unique identifier for this Mtrace2 Query This field is used as a unique identifier for this Mtrace2 Query
so that duplicate or delayed Reply messages may be detected. so that duplicate or delayed Reply messages may be detected.
Client Port #: 16 bits Client Port #: 16 bits
This field specifies the destination UDP port number for receiving This field specifies the destination UDP port number for receiving
the Mtrace2 Reply packet. the Mtrace2 Reply packet.
3.2.2. Mtrace2 Request 3.2.2. Mtrace2 Request
The Mtrace2 Request TLV is exactly the same as an Mtrace2 Query The Mtrace2 Request TLV is exactly the same as an Mtrace2 Query
except for identifying the Type field of 0x02. except for identifying the Type field of 0x02.
When a LHR receives an Mtrace2 Query message, it turns the Query into When an LHR receives an Mtrace2 Query message, it turns the Query
a Request by changing the Type field of the Query from 0x01 to 0x02. into a Request by changing the Type field of the Query from 0x01 to
The LHR then appends an Mtrace2 Standard Response Block (see 0x02. The LHR then appends an Mtrace2 Standard Response Block (see
Section 3.2.4) of its own to the Request message before sending it Section 3.2.4) of its own to the Request message before sending it
upstream. The upstream routers do the same without changing the Type upstream. The upstream routers do the same without changing the Type
field until one of them is ready to send a Reply. field until one of them is ready to send a Reply.
3.2.3. Mtrace2 Reply 3.2.3. Mtrace2 Reply
The Mtrace2 Reply TLV is exactly the same as an Mtrace2 Query except The Mtrace2 Reply TLV is exactly the same as an Mtrace2 Query except
for identifying the Type field of 0x03. for identifying the Type field of 0x03.
When a FHR or an RP receives an Mtrace2 Request message which is When an FHR or an RP receives an Mtrace2 Request message that is
destined to itself, it appends an Mtrace2 Standard Response Block destined to itself, it appends an Mtrace2 Standard Response Block
(see Section 3.2.4) of its own to the Request message. Next, it (see Section 3.2.4) of its own to the Request message. Next, it
turns the Request message into a Reply by changing the Type field of turns the Request message into a Reply by changing the Type field of
the Request from 0x02 to 0x03 and by changing the UDP destination the Request from 0x02 to 0x03 and by changing the UDP destination
port to the port number specified in the Client Port number field in port to the port number specified in the Client Port Number field in
the Request. It then unicasts the Reply message to the Mtrace2 the Request. It then unicasts the Reply message to the Mtrace2
client specified in the Mtrace2 Client Address field. client specified in the Mtrace2 Client Address field.
There are a number of cases in which an intermediate router might There are a number of cases in which an intermediate router might
return a Reply before a Request reaches the FHR or the RP. See return a Reply before a Request reaches the FHR or the RP. See
Section 4.1.1, Section 4.2.2, Section 4.3.3, and Section 4.5 for more Sections 4.1.1, 4.2.2, 4.3.3, and 4.5 for more details.
details.
3.2.4. IPv4 Mtrace2 Standard Response Block 3.2.4. IPv4 Mtrace2 Standard Response Block
This section describes the message format of an IPv4 Mtrace2 Standard This section describes the message format of an IPv4 Mtrace2 Standard
Response Block. The Type field is 0x04. Response Block. The Type field is 0x04.
0 1 2 3 0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | MBZ | | Type | Length | MBZ |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Query Arrival Time | | Query Arrival Time |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Incoming Interface Address | | Incoming Interface Address |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Outgoing Interface Address | | Outgoing Interface Address |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Upstream Router Address | | Upstream Router Address |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
. Input packet count on incoming interface . . Input packet count on Incoming Interface .
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
. Output packet count on outgoing interface . . Output packet count on Outgoing Interface .
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
. Total number of packets for this source-group pair . . Total number of packets for this source-group pair .
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Rtg Protocol | Multicast Rtg Protocol | | Rtg Protocol | Multicast Rtg Protocol |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Fwd TTL | MBZ |S| Src Mask |Forwarding Code| | Fwd TTL | MBZ |S| Src Mask |Forwarding Code|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
skipping to change at page 13, line 16 skipping to change at page 14, line 21
of the fractional part. of the fractional part.
The following formula converts from a timespec (fractional part in The following formula converts from a timespec (fractional part in
nanoseconds) to a 32-bit NTP timestamp: nanoseconds) to a 32-bit NTP timestamp:
query_arrival_time query_arrival_time
= ((tv.tv_sec + 32384) << 16) + ((tv.tv_nsec << 7) / 1953125) = ((tv.tv_sec + 32384) << 16) + ((tv.tv_nsec << 7) / 1953125)
The constant 32384 is the number of seconds from Jan 1, 1900 to The constant 32384 is the number of seconds from Jan 1, 1900 to
Jan 1, 1970 truncated to 16 bits. ((tv.tv_nsec << 7) / 1953125) Jan 1, 1970 truncated to 16 bits. ((tv.tv_nsec << 7) / 1953125)
is a reduction of ((tv.tv_nsec / 1000000000) << 16). is a reduction of ((tv.tv_nsec / 1000000000) << 16), where "<<"
denotes a logical left shift.
Note that synchronized clocks are required on the traced routers Note that synchronized clocks are required on the traced routers
to estimate propagation and queueing delays between successive to estimate propagation and queuing delays between successive
hops. Nevertheless, even without this synchronization, an hops. Nevertheless, even without this synchronization, an
application can still estimate an upper bound on cumulative one application can still estimate an upper bound on cumulative one-
way latency by measuring the time between sending a Query and way latency by measuring the time between sending a Query and
receiving a Reply. receiving a Reply.
Additionally, Query Arrival Time is useful for measuring the Additionally, Query Arrival Time is useful for measuring the
packet rate. For example, suppose that a client issues two packet rate. For example, suppose that a client issues two
queries, and the corresponding requests R1 and R2 arrive at router Queries, and the corresponding Requests R1 and R2 arrive at router
X at time T1 and T2, then the client would be able to compute the X at time T1 and T2, then the client would be able to compute the
packet rate on router X by using the packet count information packet rate on router X by using the packet-count information
stored in the R1 and R2, and the time T1 and T2. stored in the R1 and R2 and using the time T1 and T2.
Incoming Interface Address: 32 bits Incoming Interface Address: 32 bits
This field specifies the address of the interface on which packets This field specifies the address of the interface on which packets
from the source or the RP are expected to arrive, or 0 if unknown from the source or the RP are expected to arrive, or 0 if unknown
or unnumbered. or unnumbered.
Outgoing Interface Address: 32 bits Outgoing Interface Address: 32 bits
This field specifies the address of the interface on which packets This field specifies the address of the interface on which packets
from the source or the RP are expected to transmit towards the from the source or the RP are expected to transmit towards the
receiver, or 0 if unknown or unnumbered. This is also the address receiver, or 0 if unknown or unnumbered. This is also the address
of the interface on which the Mtrace2 Query or Request arrives. of the interface on which the Mtrace2 Query or Request arrives.
Upstream Router Address: 32 bits Upstream Router Address: 32 bits
This field specifies the address of the upstream router from which This field specifies the address of the upstream router from which
this router expects packets from this source. This MAY be a this router expects packets from this source. This MAY be a
multicast group (e.g., ALL-[protocol]-ROUTERS group) if the multicast group (e.g., ALL-[protocol]-ROUTERS group) if the
upstream router is not known because of the workings of the upstream router is not known because of the workings of the
multicast routing protocol. However, it MUST be 0 if the incoming multicast routing protocol. However, it MUST be 0 if the Incoming
interface address is unknown or unnumbered. Interface address is unknown or unnumbered.
Input packet count on incoming interface: 64 bits Input packet count on Incoming Interface: 64 bits
This field contains the number of multicast packets received for This field contains the number of multicast packets received for
all groups and sources on the incoming interface, or all 1's if no all groups and sources on the Incoming Interface, or all ones if
count can be reported. This counter may have the same value as no count can be reported. This counter may have the same value as
ifHCInMulticastPkts from the Interfaces Group MIB (IF-MIB) [12] ifHCInMulticastPkts from the Interfaces Group MIB (IF-MIB) [9] for
for this interface. this interface.
Output packet count on outgoing interface: 64 bit Output packet count on Outgoing Interface: 64 bits
This field contains the number of multicast packets that have been This field contains the number of multicast packets that have been
transmitted or queued for transmission for all groups and sources transmitted or queued for transmission for all groups and sources
on the outgoing interface, or all 1's if no count can be reported. on the Outgoing Interface, or all ones if no count can be
This counter may have the same value as ifHCOutMulticastPkts from reported. This counter may have the same value as
the IF-MIB [12] for this interface. ifHCOutMulticastPkts from the IF-MIB [9] for this interface.
Total number of packets for this source-group pair: 64 bits Total number of packets for this source-group pair: 64 bits
This field counts the number of packets from the specified source This field counts the number of packets from the specified source
forwarded by the router to the specified group, or all 1's if no forwarded by the router to the specified group, or all ones if no
count can be reported. If the S bit is set (see below), the count count can be reported. If the S bit is set (see below), the count
is for the source network, as specified by the Src Mask field (see is for the source network, as specified by the Src Mask field (see
below). If the S bit is set and the Src Mask field is 127, below). If the S bit is set and the Src Mask field is 127,
indicating no source-specific state, the count is for all sources indicating no source-specific state, the count is for all sources
sending to this group. This counter should have the same value as sending to this group. This counter should have the same value as
ipMcastRoutePkts from the IP Multicast MIB [13] for this ipMcastRoutePkts from the IP Multicast MIB [14] for this
forwarding entry. forwarding entry.
Rtg Protocol: 16 bits Rtg Protocol: 16 bits
This field describes the unicast routing protocol running between This field describes the unicast routing protocol running between
this router and the upstream router, and it is used to determine this router and the upstream router, and it is used to determine
the RPF interface for the specified source or RP. This value the Reverse Path Forwarding (RPF) interface for the specified
should have the same value as ipMcastRouteRtProtocol from the IP source or RP. This value should have the same value as
Multicast MIB [13] for this entry. If the router is not able to ipMcastRouteRtProtocol from the IP Multicast MIB [14] for this
obtain this value, all 0's must be specified. entry. If the router is not able to obtain this value, all 0's
must be specified.
Multicast Rtg Protocol: 16 bits Multicast Rtg Protocol: 16 bits
This field describes the multicast routing protocol in use between This field describes the multicast routing protocol in use between
the router and the upstream router. This value should have the the router and the upstream router. This value should have the
same value as ipMcastRouteProtocol from the IP Multicast MIB [13] same value as ipMcastRouteProtocol from the IP Multicast MIB [14]
for this entry. If the router cannot obtain this value, all 0's for this entry. If the router cannot obtain this value, all 0's
must be specified. must be specified.
Fwd TTL: 8 bits Fwd TTL: 8 bits
This field contains the configured multicast TTL threshold, if This field contains the configured multicast TTL threshold, if
any, of the outgoing interface. any, of the Outgoing Interface.
S: 1 bit S: 1 bit
If this bit is set, it indicates that the packet count for the If this bit is set, it indicates that the packet count for the
source-group pair is for the source network, as determined by source-group pair is for the source network, as determined by
masking the source address with the Src Mask field. masking the source address with the Src Mask field.
Src Mask: 7 bits Src Mask: 7 bits
This field contains the number of 1's in the netmask the router This field contains the number of 1's in the netmask the router
has for the source (i.e. a value of 24 means the netmask is has for the source (i.e., a value of 24 means the netmask is
0xffffff00). If the router is forwarding solely on group state, 0xffffff00). If the router is forwarding solely on group state,
this field is set to 127 (0x7f). this field is set to 127 (0x7f).
Forwarding Code: 8 bits Forwarding Code: 8 bits
This field contains a forwarding information/error code. Values This field contains a forwarding information/error code. Values
with the high order bit set (0x80-0xff) are intended for use with with the high-order bit set (0x80-0xff) are intended for use with
conditions that are transitory or automatically recovered. Other conditions that are transitory or automatically recovered. Other
forwarding code values indicate a need to fix a problem in the Forwarding Code values indicate a need to fix a problem in the
Query or a need to redirect the Query. Section 4.1 and Query or a need to redirect the Query. Sections 4.1 and 4.2
Section 4.2 explain how and when the Forwarding Code is filled. explain how and when the Forwarding Code is filled. Defined
Defined values are as follows: values are as follows:
Value Name Description Value Name Description
----- -------------- ---------------------------------------------- ----- -------------- ----------------------------------------------
0x00 NO_ERROR No error 0x00 NO_ERROR No error.
0x01 WRONG_IF Mtrace2 Request arrived on an interface 0x01 WRONG_IF Mtrace2 Request arrived on an interface
to which this router would not forward for for which this router does not perform
the specified group towards the source or RP. forwarding for the specified group to the
0x02 PRUNE_SENT This router has sent a prune upstream which source or RP.
0x02 PRUNE_SENT This router has sent a prune upstream that
applies to the source and group in the applies to the source and group in the
Mtrace2 Request. Mtrace2 Request.
0x03 PRUNE_RCVD This router has stopped forwarding for this 0x03 PRUNE_RCVD This router has stopped forwarding for this
source and group in response to a request source and group in response to a Request
from the downstream router. from the downstream router.
0x04 SCOPED The group is subject to administrative 0x04 SCOPED The group is subject to administrative
scoping at this router. scoping at this router.
0x05 NO_ROUTE This router has no route for the source or 0x05 NO_ROUTE This router has no route for the source or
group and no way to determine a potential group and no way to determine a potential
route. route.
0x06 WRONG_LAST_HOP This router is not the proper LHR. 0x06 WRONG_LAST_HOP This router is not the proper LHR.
0x07 NOT_FORWARDING This router is not forwarding this source and 0x07 NOT_FORWARDING This router is not forwarding this source and
group out the outgoing interface for an group out the Outgoing Interface for an
unspecified reason. unspecified reason.
0x08 REACHED_RP Reached the Rendezvous Point. 0x08 REACHED_RP Reached the Rendezvous Point.
0x09 RPF_IF Mtrace2 Request arrived on the expected 0x09 RPF_IF Mtrace2 Request arrived on the expected
RPF interface for this source and group. RPF interface for this source and group.
0x0A NO_MULTICAST Mtrace2 Request arrived on an interface 0x0A NO_MULTICAST Mtrace2 Request arrived on an interface
which is not enabled for multicast. that is not enabled for multicast.
0x0B INFO_HIDDEN One or more hops have been hidden from this 0x0B INFO_HIDDEN One or more hops have been hidden from this
trace. trace.
0x0C REACHED_GW Mtrace2 Request arrived on a gateway (e.g., 0x0C REACHED_GW Mtrace2 Request arrived on a gateway (e.g.,
a NAT or firewall) that hides the a NAT or firewall) that hides the
information between this router and the information between this router and the
Mtrace2 client. Mtrace2 client.
0x0D UNKNOWN_QUERY A non-transitive Extended Query Type was 0x0D UNKNOWN_QUERY A non-transitive Extended Query Type was
received by a router which does not support received by a router that does not support
the type. the type.
0x80 FATAL_ERROR A fatal error is one where the router may 0x80 FATAL_ERROR A fatal error is one where the router may
know the upstream router but cannot forward know the upstream router but cannot forward
the message to it. the message to it.
0x81 NO_SPACE There was not enough room to insert another 0x81 NO_SPACE There was not enough room to insert another
Standard Response Block in the packet. Standard Response Block in the packet.
0x83 ADMIN_PROHIB Mtrace2 is administratively prohibited. 0x83 ADMIN_PROHIB Mtrace2 is administratively prohibited.
3.2.5. IPv6 Mtrace2 Standard Response Block 3.2.5. IPv6 Mtrace2 Standard Response Block
This section describes the message format of an IPv6 Mtrace2 Standard This section describes the message format of an IPv6 Mtrace2 Standard
Response Block. The Type field is also 0x04. Response Block. The Type field is also 0x04.
0 1 2 3 0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | MBZ | | Type | Length | MBZ |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Query Arrival Time | | Query Arrival Time |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Incoming Interface ID | | Incoming Interface ID |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Outgoing Interface ID | | Outgoing Interface ID |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
* Local Address * * Local Address *
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
* Remote Address * * Remote Address *
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
. Input packet count on incoming interface . . Input packet count on Incoming Interface .
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
. Output packet count on outgoing interface . . Output packet count on Outgoing Interface .
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| | | |
. Total number of packets for this source-group pair . . Total number of packets for this source-group pair .
| | | |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Rtg Protocol | Multicast Rtg Protocol | | Rtg Protocol | Multicast Rtg Protocol |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| MBZ 2 |S|Src Prefix Len |Forwarding Code| | MBZ 2 |S|Src Prefix Len |Forwarding Code|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
skipping to change at page 17, line 51 skipping to change at page 19, line 8
MBZ: 8 bits MBZ: 8 bits
This field MUST be zeroed on transmission and ignored on This field MUST be zeroed on transmission and ignored on
reception. reception.
Query Arrival Time: 32 bits Query Arrival Time: 32 bits
Same definition as in IPv4. Same definition as in IPv4.
Incoming Interface ID: 32 bits Incoming Interface ID: 32 bits
This field specifies the interface ID on which packets from the This field specifies the interface ID on which packets from the
source or RP are expected to arrive, or 0 if unknown. This ID source or RP are expected to arrive, or 0 if unknown. This ID
should be the value taken from InterfaceIndex of the IF-MIB [12] should be the value taken from InterfaceIndex of the IF-MIB [9]
for this interface. for this interface.
Outgoing Interface ID: 32 bits Outgoing Interface ID: 32 bits
This field specifies the interface ID to which packets from the This field specifies the interface ID to which packets from the
source or RP are expected to transmit, or 0 if unknown. This ID source or RP are expected to transmit, or 0 if unknown. This ID
should be the value taken from InterfaceIndex of the IF-MIB [12] should be the value taken from InterfaceIndex of the IF-MIB [9]
for this interface for this interface.
Local Address: 128 bits Local Address: 128 bits
This field specifies a global IPv6 address that uniquely This field specifies a global IPv6 address that uniquely
identifies the router. A unique local unicast address [11] SHOULD identifies the router. A unique local unicast address [12] SHOULD
NOT be used unless the router is only assigned link-local and NOT be used unless the router is only assigned link-local and
unique local addresses. If the router is only assigned link-local unique local addresses. If the router is only assigned link-local
addresses, its link-local address can be specified in this field. addresses, its link-local address can be specified in this field.
Remote Address: 128 bits Remote Address: 128 bits
This field specifies the address of the upstream router, which, in This field specifies the address of the upstream router, which, in
most cases, is a link-local unicast address for the upstream most cases, is a link-local unicast address for the upstream
router. router.
Although a link-local address does not have enough information to Although a link-local address does not have enough information to
identify a node, it is possible to detect the upstream router with identify a node, it is possible to detect the upstream router with
the assistance of Incoming Interface ID and the current router the assistance of the Incoming Interface ID and the current router
address (i.e., Local Address). address (i.e., Local Address).
Note that this may be a multicast group (e.g., ALL-[protocol]- Note that this may be a multicast group (e.g., ALL-[protocol]-
ROUTERS group) if the upstream router is not known because of the ROUTERS group) if the upstream router is not known because of the
workings of a multicast routing protocol. However, it should be workings of a multicast routing protocol. However, it should be
the unspecified address (::) if the incoming interface address is the unspecified address (::) if the Incoming Interface address is
unknown. unknown.
Input packet count on incoming interface: 64 bits Input packet count on Incoming Interface: 64 bits
Same definition as in IPv4. Same definition as in IPv4.
Output packet count on outgoing interface: 64 bits Output packet count on Outgoing Interface: 64 bits
Same definition as in IPv4. Same definition as in IPv4.
Total number of packets for this source-group pair: 64 bits Total number of packets for this source-group pair: 64 bits
Same definition as in IPv4, except if the S bit is set (see Same definition as in IPv4, except if the S bit is set (see
below), the count is for the source network, as specified by the below), the count is for the source network, as specified by the
Src Prefix Len field. If the S bit is set and the Src Prefix Len Src Prefix Len field. If the S bit is set and the Src Prefix Len
field is 255, indicating no source-specific state, the count is field is 255, indicating no source-specific state, the count is
for all sources sending to this group. This counter should have for all sources sending to this group. This counter should have
the same value as ipMcastRoutePkts from the IP Multicast MIB [13] the same value as ipMcastRoutePkts from the IP Multicast MIB [14]
for this forwarding entry. for this forwarding entry.
Rtg Protocol: 16 bits Rtg Protocol: 16 bits
Same definition as in IPv4. Same definition as in IPv4.
Multicast Rtg Protocol: 16 bits Multicast Rtg Protocol: 16 bits
Same definition as in IPv4. Same definition as in IPv4.
MBZ 2: 15 bits MBZ 2: 15 bits
This field MUST be zeroed on transmission and ignored on This field MUST be zeroed on transmission and ignored on
reception. reception.
S: 1 bit S: 1 bit
Same definition as in IPv4, except the Src Prefix Len field is Same definition as in IPv4, except the Src Prefix Len field is
used to mask the source address. used to mask the source address.
skipping to change at page 19, line 32 skipping to change at page 20, line 41
3.2.6. Mtrace2 Augmented Response Block 3.2.6. Mtrace2 Augmented Response Block
In addition to the Standard Response Block, a multicast router on the In addition to the Standard Response Block, a multicast router on the
traced path can optionally add one or multiple Augmented Response traced path can optionally add one or multiple Augmented Response
Blocks before sending the Request to its upstream router. Blocks before sending the Request to its upstream router.
The Augmented Response Block is flexible for various purposes such as The Augmented Response Block is flexible for various purposes such as
providing diagnosis information (see Section 7) and protocol providing diagnosis information (see Section 7) and protocol
verification. Its Type field is 0x05, and its format is as follows: verification. Its Type field is 0x05, and its format is as follows:
0 1 2 3 0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | MBZ | | Type | Length | MBZ |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Augmented Response Type | Value .... | | Augmented Response Type | Value .... |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
MBZ: 8 bits MBZ: 8 bits
This field MUST be zeroed on transmission and ignored on This field MUST be zeroed on transmission and ignored on
reception. reception.
skipping to change at page 20, line 18 skipping to change at page 21, line 26
When the NO_SPACE error occurs on a router, the router should send When the NO_SPACE error occurs on a router, the router should send
the original Mtrace2 Request received from the downstream router the original Mtrace2 Request received from the downstream router
as a Reply back to the Mtrace2 client and continue with a new as a Reply back to the Mtrace2 client and continue with a new
Mtrace2 Request. In the new Request, the router adds a Standard Mtrace2 Request. In the new Request, the router adds a Standard
Response Block followed by an Augmented Response Block with 0x01 Response Block followed by an Augmented Response Block with 0x01
as the Augmented Response Type, and the number of the returned as the Augmented Response Type, and the number of the returned
Mtrace2 Standard Response Blocks as the Value. Mtrace2 Standard Response Blocks as the Value.
Each upstream router recognizes the total number of hops the Each upstream router recognizes the total number of hops the
Request has been traced so far by adding this number and the Request has traced so far by adding this number and the number of
number of the Standard Response Block in the current Request the Standard Response Block in the current Request message.
message.
This document only defines one Augmented Response Type in the This document only defines one Augmented Response Type in the
Augmented Response Block. The description on how to provide Augmented Response Block. The description on how to provide
diagnosis information using the Augmented Response Block is out of diagnosis information using the Augmented Response Block is out of
the scope of this document, and will be addressed in separate the scope of this document and will be addressed in separate
documents. documents.
Value: variable length Value: variable length
The format is based on the Augmented Response Type value. The The format is based on the Augmented Response Type value. The
length of the value field is Length field minus 6. length of the Value field is Length field minus 6.
3.2.7. Mtrace2 Extended Query Block 3.2.7. Mtrace2 Extended Query Block
There may be a sequence of optional Extended Query Blocks that follow There may be a sequence of optional Extended Query Blocks that follow
an Mtrace2 Query to further specify any information needed for the an Mtrace2 Query to further specify any information needed for the
Query. For example, an Mtrace2 client might be interested in tracing Query. For example, an Mtrace2 client might be interested in tracing
the path the specified source and group would take based on a certain the path the specified source and group would take based on a certain
topology. In this case, the client can pass in the multi-topology ID topology. In this case, the client can pass in the multi-topology ID
as the Value for an Extended Query Type (see below). The Extended as the value for an Extended Query Type (see below). The Extended
Query Type is extensible and the behavior of the new types will be Query Type is extensible, and the behavior of the new types will be
addressed by separate documents. addressed by separate documents.
The Mtrace2 Extended Query Block's Type field is 0x06, and is The Mtrace2 Extended Query Block's Type field is 0x06 and is
formatted as follows: formatted as follows:
0 1 2 3 0 1 2 3
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Type | Length | MBZ |T| | Type | Length | MBZ |T|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Extended Query Type | Value .... | | Extended Query Type | Value .... |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
MBZ: 7 bits MBZ: 7 bits
This field MUST be zeroed on transmission and ignored on This field MUST be zeroed on transmission and ignored on
reception. reception.
T-bit (Transitive Attribute): 1 bit T-bit (Transitive Attribute): 1 bit
If the TLV type is unrecognized by the receiving router, then this If the TLV Type is unrecognized by the receiving router, then this
TLV is either discarded or forwarded along with the Query, TLV is either discarded or forwarded along with the Query,
depending on the value of this bit. If this bit is set, then the depending on the value of this bit. If this bit is set, then the
router MUST forward this TLV. If this bit is clear, the router router MUST forward this TLV. If this bit is clear, the router
MUST send an Mtrace2 Reply with an UNKNOWN_QUERY error. MUST send an Mtrace2 Reply with an UNKNOWN_QUERY error.
Extended Query Type: 16 bits Extended Query Type: 16 bits
This field specifies the type of the Extended Query Block. This field specifies the type of the Extended Query Block.
Value: 16 bits Value: 16 bits
This field specifies the value of this Extended Query. This field specifies the value of this Extended Query.
4. Router Behavior 4. Router Behavior
This section describes the router behavior in the context of Mtrace2 This section describes the router behavior in the context of Mtrace2
in detail. in detail.
4.1. Receiving Mtrace2 Query 4.1. Receiving an Mtrace2 Query
An Mtrace2 Query message is an Mtrace2 message with no response An Mtrace2 Query message is an Mtrace2 message with no response
blocks filled in, and uses TLV type of 0x01. blocks filled in and uses a TLV Type of 0x01.
4.1.1. Query Packet Verification 4.1.1. Query Packet Verification
Upon receiving an Mtrace2 Query message, a router MUST examine Upon receiving an Mtrace2 Query message, a router MUST examine
whether the Multicast Address and the Source Address are a valid whether the Multicast Address and the Source Address are a valid
combination as specified in Section 3.2.1, and whether the Mtrace2 combination as specified in Section 3.2.1, and whether the Mtrace2
Client Address is a valid IP unicast address. If either one is Client Address is a valid IP unicast address. If either one is
invalid, the Query MUST be silently ignored. invalid, the Query MUST be silently ignored.
Mtrace2 supports a non-local client to the LHR/RP. A router MUST, Mtrace2 supports a non-local client to the LHR/RP. A router MUST,
however, support a mechanism to drop Queries from clients beyond a however, support a mechanism to drop Queries from clients beyond a
specified administrative boundary. The potential approaches are specified administrative boundary. The potential approaches are
described in Section 9.2. described in Section 9.2.
In the case where a local LHR client is required, the router must In the case where a local LHR client is required, the router must
then examine the Query to see if it is the proper LHR/RP for the then examine the Query to see if it is the proper LHR/RP for the
destination address in the packet. It is the proper local LHR if it destination address in the packet. It is the proper local LHR if it
has a multicast-capable interface on the same subnet as the Mtrace2 has a multicast-capable interface on the same subnet as the Mtrace2
Client Address and is the router that would forward traffic from the Client Address and is the router that would forward traffic from the
given (S,G) or (*,G) onto that subnet. It is the proper RP if the given (S,G) or (*,G) onto that subnet. It is the proper RP if the
multicast group address specified in the query is 0 and if the IP multicast group address specified in the Query is 0 and if the IP
header destination address is a valid RP address on this router. header destination address is a valid RP address on this router.
If the router determines that it is not the proper LHR/RP, or it If the router determines that it is not the proper LHR/RP, or it
cannot make that determination, it does one of two things depending cannot make that determination, it does one of two things depending
on whether the Query was received via multicast or unicast. If the on whether the Query was received via multicast or unicast. If the
Query was received via multicast, then it MUST be silently discarded. Query was received via multicast, then it MUST be silently discarded.
If it was received via unicast, the router turns the Query into a If it was received via unicast, the router turns the Query into a
Reply message by changing the TLV type to 0x03 and appending a Reply message by changing the TLV Type to 0x03 and appending a
Standard Response Block with a Forwarding Code of WRONG_LAST_HOP. Standard Response Block with a Forwarding Code of WRONG_LAST_HOP.
The rest of the fields in the Standard Response Block MUST be zeroed. The rest of the fields in the Standard Response Block MUST be zeroed.
The router then sends the Reply message to the Mtrace2 Client Address The router then sends the Reply message to the Mtrace2 Client Address
on the Client Port # as specified in the Mtrace2 Query. on the Client Port # as specified in the Mtrace2 Query.
Duplicate Query messages as identified by the tuple (Mtrace2 Client Duplicate Query messages as identified by the tuple (Mtrace2 Client
Address, Query ID) SHOULD be ignored. This MAY be implemented using Address, Query ID) SHOULD be ignored. This MAY be implemented using
a cache of previously processed queries keyed by the Mtrace2 Client a cache of previously processed Queries keyed by the Mtrace2 Client
Address and Query ID pair. The duration of the cached entries is Address and Query ID pair. The duration of the cached entries is
implementation specific. Duplicate Request messages MUST NOT be implementation specific. Duplicate Request messages MUST NOT be
ignored in this manner. ignored in this manner.
4.1.2. Query Normal Processing 4.1.2. Query Normal Processing
When a router receives an Mtrace2 Query and it determines that it is When a router receives an Mtrace2 Query and it determines that it is
the proper LHR/RP, it turns the Query to a Request by changing the the proper LHR/RP, it turns the Query to a Request by changing the
TLV type from 0x01 to 0x02, and performs the steps listed in TLV Type from 0x01 to 0x02, and it performs the steps listed in
Section 4.2. Section 4.2.
4.2. Receiving Mtrace2 Request 4.2. Receiving an Mtrace2 Request
An Mtrace2 Request is an Mtrace2 message that uses TLV type of 0x02. An Mtrace2 Request is an Mtrace2 message that uses the TLV Type of
With the exception of the LHR, whose Request was just converted from 0x02. With the exception of the LHR, whose Request was just
a Query, each Request received by a router should have at least one converted from a Query, each Request received by a router should have
Standard Response Block filled in. at least one Standard Response Block filled in.
4.2.1. Request Packet Verification 4.2.1. Request Packet Verification
If the Mtrace2 Request does not come from an adjacent router, or if If the Mtrace2 Request does not come from an adjacent router, or if
the Request is not addressed to this router, or if the Request is the Request is not addressed to this router, or if the Request is
addressed to a multicast group which is not a link-scoped group addressed to a multicast group that is not a link-scoped group (i.e.,
(i.e., 224.0.0.0/24 for IPv4, FFx2::/16 [3] for IPv6), it MUST be 224.0.0.0/24 for IPv4 and FFx2::/16 for IPv6 [2]), it MUST be
silently ignored. The Generalized TTL Security Mechanism (GTSM) [14] silently ignored. The Generalized TTL Security Mechanism (GTSM) [13]
SHOULD be used by the router to determine whether the router is SHOULD be used by the router to determine whether the router is
adjacent or not. Source verification specified in Section 9.2 is adjacent or not. Source verification specified in Section 9.2 is
also considered. also considered.
If the sum of the number of the Standard Response Blocks in the If the sum of the number of the Standard Response Blocks in the
received Mtrace2 Request and the value of the Augmented Response Type received Mtrace2 Request and the value of the Augmented Response Type
of 0x01, if any, is equal or more than the # Hops in the Mtrace2 of 0x01, if any, is equal or more than the # Hops in the Mtrace2
Request, it MUST be silently ignored. Request, it MUST be silently ignored.
4.2.2. Request Normal Processing 4.2.2. Request Normal Processing
When a router receives an Mtrace2 Request message, it performs the When a router receives an Mtrace2 Request message, it performs the
following steps. Note that it is possible to have multiple following steps. Note that it is possible to have multiple
situations covered by the Forwarding Codes. The first one situations covered by the Forwarding Codes. The first one
encountered is the one that is reported, i.e. all "note Forwarding encountered is the one that is reported, i.e., all "note Forwarding
Code N" should be interpreted as "if Forwarding Code is not already Code N" should be interpreted as "if Forwarding Code is not already
set, set Forwarding Code to N". Note that in the steps described set, set Forwarding Code to N". Note that in the steps described
below the "Outgoing Interface" is the one on which the Mtrace2 below, the "Outgoing Interface" is the one on which the Mtrace2
Request message arrives. Request message arrives.
1. Prepare a Standard Response Block to be appended to the packet, 1. Prepare a Standard Response Block to be appended to the packet,
setting all fields to an initial default value of zero. setting all fields to an initial default value of zero.
2. If Mtrace2 is administratively prohibited, note the Forwarding 2. If Mtrace2 is administratively prohibited, note the Forwarding
Code of ADMIN_PROHIB and skip to step 4. Code of ADMIN_PROHIB and skip to step 4.
3. In the Standard Response Block, fill in the Query Arrival Time, 3. In the Standard Response Block, fill in the Query Arrival Time,
Outgoing Interface Address (for IPv4) or Outgoing Interface ID Outgoing Interface Address (for IPv4) or Outgoing Interface ID
(for IPv6), Output Packet Count, and Fwd TTL (for IPv4). (for IPv6), Output Packet Count, and Fwd TTL (for IPv4).
4. Attempt to determine the forwarding information for the 4. Attempt to determine the forwarding information for the
specified source and group, using the same mechanisms as would specified source and group, using the same mechanisms as would
be used when a packet is received from the source destined for be used when a packet is received from the source destined for
the group. A state need not be instantiated, it can be a the group. A state need not be instantiated, it can be a
"phantom" state created only for the purpose of the trace, such "phantom" state created only for the purpose of the trace, such
as "dry-run." as "dry-run".
If using a shared-tree protocol and there is no source-specific If using a shared-tree protocol and there is no source-specific
state, or if no source-specific information is desired (i.e., state, or if no source-specific information is desired (i.e.,
all 1's for IPv4 or unspecified address (::) for IPv6), group all ones for IPv4 or an unspecified address (::) for IPv6),
state should be used. If there is no group state or no group- group state should be used. If there is no group state or no
specific information is desired, potential source state (i.e., group-specific information is desired, potential source state
the path that would be followed for a source-specific Join) (i.e., the path that would be followed for a source-specific
should be used. "join") should be used.
5. If no forwarding information can be determined, the router notes 5. If no forwarding information can be determined, the router notes
a Forwarding Code of NO_ROUTE, sets the remaining fields that a Forwarding Code of NO_ROUTE, sets the remaining fields that
have not yet been filled in to zero, and then sends an Mtrace2 have not yet been filled in to zero, and then sends an Mtrace2
Reply back to the Mtrace2 client. Reply back to the Mtrace2 client.
6. If a Forwarding Code of ADMIN_PROHIB has been set, skip to step 6. If a Forwarding Code of ADMIN_PROHIB has been set, skip to step
7. Otherwise, fill in the Incoming Interface Address (or 7. Otherwise, fill in the Incoming Interface Address (or
Incoming Interface ID and Local Address for IPv6), Upstream Incoming Interface ID and Local Address for IPv6), Upstream
Router Address (or Remote Address for IPv6), Input Packet Count, Router Address (or Remote Address for IPv6), Input Packet Count,
Total Number of Packets, Routing Protocol, S, and Src Mask (or Total Number of Packets, Routing Protocol, S, and Src Mask (or
Src Prefix Len for IPv6) using the forwarding information Src Prefix Len for IPv6) using the forwarding information
determined in step 4. determined in step 4.
7. If the Outgoing interface is not enabled for multicast, note 7. If the Outgoing Interface is not enabled for multicast, note
Forwarding Code of NO_MULTICAST. If the Outgoing interface is Forwarding Code of NO_MULTICAST. If the Outgoing Interface is
the interface from which the router would expect data to arrive the interface from which the router would expect data to arrive
from the source, note forwarding code RPF_IF. If the Outgoing from the source, note Forwarding Code RPF_IF. If the Outgoing
interface is not one to which the router would forward data from Interface is not one to which the router would forward data from
the source or RP to the group, a Forwarding code of WRONG_IF is the source or RP to the group, a Forwarding Code of WRONG_IF is
noted. In the above three cases, the router will return an noted. In the above three cases, the router will return an
Mtrace2 Reply and terminate the trace. Mtrace2 Reply and terminate the trace.
8. If the group is subject to administrative scoping on either the 8. If the group is subject to administrative scoping on either the
Outgoing or Incoming interfaces, a Forwarding Code of SCOPED is Outgoing or Incoming Interfaces, a Forwarding Code of SCOPED is
noted. noted.
9. If this router is the RP for the group for a non-source-specific 9. If this router is the RP for the group for a non-source-specific
query, note a Forwarding Code of REACHED_RP. The router will Query, note a Forwarding Code of REACHED_RP. The router will
send an Mtrace2 Reply and terminate the trace. send an Mtrace2 Reply and terminate the trace.
10. If this router is directly connected to the specified source or 10. If this router is directly connected to the specified source or
source network on the Incoming interface, it sets the Upstream source network on the Incoming Interface, it sets the Upstream
Router Address (for IPv4) or the Remote Address (for IPv6) of Router Address (for IPv4) or the Remote Address (for IPv6) of
the response block to zero. The router will send an Mtrace2 the response block to zero. The router will send an Mtrace2
Reply and terminate the trace. Reply and terminate the trace.
11. If this router has sent a prune upstream which applies to the 11. If this router has sent a prune upstream that applies to the
source and group in the Mtrace2 Request, it notes a Forwarding source and group in the Mtrace2 Request, it notes a Forwarding
Code of PRUNE_SENT. If the router has stopped forwarding Code of PRUNE_SENT. If the router has stopped forwarding
downstream in response to a prune sent by the downstream router, downstream in response to a prune sent by the downstream router,
it notes a Forwarding Code of PRUNE_RCVD. If the router should it notes a Forwarding Code of PRUNE_RCVD. If the router should
normally forward traffic downstream for this source and group normally forward traffic downstream for this source and group
but is not, it notes a Forwarding Code of NOT_FORWARDING. but is not, it notes a Forwarding Code of NOT_FORWARDING.
12. If this router is a gateway (e.g., a NAT or firewall) that hides 12. If this router is a gateway (e.g., a NAT or firewall) that hides
the information between this router and the Mtrace2 client, it the information between this router and the Mtrace2 client, it
notes a Forwarding Code of REACHED_GW. The router continues the notes a Forwarding Code of REACHED_GW. The router continues the
skipping to change at page 25, line 8 skipping to change at page 26, line 24
in Section 4.3; otherwise, the packet is sent as an Mtrace2 in Section 4.3; otherwise, the packet is sent as an Mtrace2
Reply to the Mtrace2 client as described in Section 4.4. Reply to the Mtrace2 client as described in Section 4.4.
4.3. Forwarding Mtrace2 Request 4.3. Forwarding Mtrace2 Request
This section describes how an Mtrace2 Request should be forwarded. This section describes how an Mtrace2 Request should be forwarded.
4.3.1. Destination Address 4.3.1. Destination Address
If the upstream router for the Mtrace2 Request is known for this If the upstream router for the Mtrace2 Request is known for this
request, the Mtrace2 Request is sent to that router. If the Incoming Request, the Mtrace2 Request is sent to that router. If the Incoming
interface is known but the upstream router is not, the Mtrace2 Interface is known but the upstream router is not, the Mtrace2
Request is sent to an appropriate multicast address on the Incoming Request is sent to an appropriate multicast address on the Incoming
interface. The multicast address SHOULD depend on the multicast Interface. The multicast address SHOULD depend on the multicast
routing protocol in use, such as ALL-[protocol]-ROUTERS group. It routing protocol in use, such as ALL-[protocol]-ROUTERS group. It
MUST be a link-scoped group (i.e., 224.0.0.0/24 for IPv4, FF02::/16 MUST be a link-scoped group (i.e., 224.0.0.0/24 for IPv4 and
for IPv6), and MUST NOT be the all-systems multicast group FF02::/16 for IPv6) and MUST NOT be the all-systems multicast group
(224.0.0.1) for IPv4 and All Nodes Address (FF02::1) for IPv6. It (224.0.0.1) for IPv4 and All Nodes Address (FF02::1) for IPv6. It
MAY also be the all-routers multicast group (224.0.0.2) for IPv4 or MAY also be the all-routers multicast group (224.0.0.2) for IPv4 or
All Routers Address (FF02::2) for IPv6 if the routing protocol in use All Routers Address (FF02::2) for IPv6 if the routing protocol in use
does not define a more appropriate multicast address. does not define a more appropriate multicast address.
4.3.2. Source Address 4.3.2. Source Address
An Mtrace2 Request should be sent with the address of the Incoming An Mtrace2 Request should be sent with the address of the Incoming
interface. However, if the Incoming interface is unnumbered, the Interface. However, if the Incoming Interface is unnumbered, the
router can use one of its numbered interface addresses as the source router can use one of its numbered interface addresses as the source
address. address.
4.3.3. Appending Standard Response Block 4.3.3. Appending Standard Response Block
An Mtrace2 Request MUST be sent upstream towards the source or the RP An Mtrace2 Request MUST be sent upstream towards the source or the RP
after appending a Standard Response Block to the end of the received after appending a Standard Response Block to the end of the received
Mtrace2 Request. The Standard Response Block includes the multicast Mtrace2 Request. The Standard Response Block includes the multicast
states and statistics information of the router described in states and statistics information of the router described in
Section 3.2.4. Section 3.2.4.
If appending the Standard Response Block would make the Mtrace2 If appending the Standard Response Block would make the Mtrace2
Request packet longer than the MTU of the Incoming Interface, or, in Request packet longer than the MTU of the Incoming Interface, or, in
the case of IPv6, longer than 1280 bytes, the router MUST change the the case of IPv6, longer than 1280 bytes, the router MUST change the
Forwarding Code in the last Standard Response Block of the received Forwarding Code in the last Standard Response Block of the received
Mtrace2 Request into NO_SPACE. The router then turns the Request Mtrace2 Request into NO_SPACE. The router then turns the Request
into a Reply and sends the Reply as described in Section 4.4. into a Reply and sends the Reply as described in Section 4.4.
The router will continue with a new Request by copying from the old The router will continue with a new Request by copying the old
Request excluding all the response blocks, followed by the previously Request, excluding all the response blocks, followed by the
prepared Standard Response Block, and an Augmented Response Block previously prepared Standard Response Block and an Augmented Response
with Augmented Response Type of 0x01 and the number of the returned Block with 0x01 as the Augmented Response Type, and the number of the
Standard Response Blocks as the value. The new Request is then returned Standard Response Blocks as the Value.
forwarded upstream.
4.4. Sending Mtrace2 Reply 4.4. Sending Mtrace2 Reply
An Mtrace2 Reply MUST be returned to the client by a router if any of An Mtrace2 Reply MUST be returned to the client by a router if any of
the following conditions occur: the following conditions occur:
1. The total number of the traced routers are equal to the # of hops 1. The total number of the traced routers are equal to the # Hops in
in the request (including the one just added) plus the number of the Request (including the one just added) plus the number of the
the returned blocks, if any. returned blocks, if any.
2. Appending the Standard Response Block would make the Mtrace2 2. Appending the Standard Response Block would make the Mtrace2
Request packet longer than the MTU of the Incoming interface. Request packet longer than the MTU of the Incoming Interface.
(In case of IPv6 not more than 1280 bytes; see Section 4.3.3 for (In case of IPv6, not more than 1280 bytes; see Section 4.3.3 for
additional details on handling of this case.) additional details on the handling of this case.)
3. The request has reached the RP for a non source specific query or 3. The Request has reached the RP for a non-source-specific Query or
has reached the first hop router for a source specific query (see has reached the first-hop router for a source-specific Query (see
Section 4.2.2, items 9 and 10 for additional details). Section 4.2.2, items 9 and 10, for additional details).
4.4.1. Destination Address 4.4.1. Destination Address
An Mtrace2 Reply MUST be sent to the address specified in the Mtrace2 An Mtrace2 Reply MUST be sent to the address specified in the Mtrace2
Client Address field in the Mtrace2 Request. Client Address field in the Mtrace2 Request.
4.4.2. Source Address 4.4.2. Source Address
An Mtrace2 Reply SHOULD be sent with the address of the router's An Mtrace2 Reply SHOULD be sent with the address of the router's
Outgoing interface. However, if the Outgoing interface address is Outgoing Interface. However, if the Outgoing Interface address is
unnumbered, the router can use one of its numbered interface unnumbered, the router can use one of its numbered interface
addresses as the source address. addresses as the source address.
4.4.3. Appending Standard Response Block 4.4.3. Appending Standard Response Block
An Mtrace2 Reply MUST be sent with the prepared Standard Response An Mtrace2 Reply MUST be sent with the prepared Standard Response
Block appended at the end of the received Mtrace2 Request except in Block appended at the end of the received Mtrace2 Request except in
the case of NO_SPACE forwarding code. the case of NO_SPACE Forwarding Code.
4.5. Proxying Mtrace2 Query 4.5. Proxying Mtrace2 Query
When a gateway (e.g., a NAT or firewall), which needs to block When a gateway (e.g., a NAT or firewall), which needs to block
unicast packets to the Mtrace2 client, or hide information between unicast packets to the Mtrace2 client, or hide information between
the gateway and the Mtrace2 client, receives an Mtrace2 Query from an the gateway and the Mtrace2 client, receives an Mtrace2 Query from an
adjacent host or Mtrace2 Request from an adjacent router, it appends adjacent host or Mtrace2 Request from an adjacent router, it appends
a Standard Response Block with REACHED_GW as the Forwarding Code. It a Standard Response Block with REACHED_GW as the Forwarding Code. It
turns the Query or Request into a Reply, and sends the Reply back to turns the Query or Request into a Reply and sends the Reply back to
the client. the client.
At the same time, the gateway originates a new Mtrace2 Query message At the same time, the gateway originates a new Mtrace2 Query message
by copying the original Mtrace2 header (the Query or Request without by copying the original Mtrace2 header (the Query or Request without
any of the response blocks), and makes the changes as follows: any of the response blocks) and making the following changes:
o sets the RPF interface's address as the Mtrace2 Client Address; o setting the RPF interface's address as the Mtrace2 Client Address;
o uses its own port number as the Client Port #; and, o using its own port number as the Client Port #; and,
o decreases # Hops by ((number of the Standard Response Blocks that o decreasing # Hops by ((number of the Standard Response Blocks that
were just returned in a Reply) - 1). The "-1" in this expression were just returned in a Reply) - 1). The "- 1" in this expression
accounts for the additional Standard Response Block appended by accounts for the additional Standard Response Block appended by
the gateway router. the gateway router.
The new Mtrace2 Query message is then sent to the upstream router or The new Mtrace2 Query message is then sent to the upstream router or
to an appropriate multicast address on the RPF interface. to an appropriate multicast address on the RPF interface.
When the gateway receives an Mtrace2 Reply whose Query ID matches the When the gateway receives an Mtrace2 Reply whose Query ID matches the
one in the original Mtrace2 header, it MUST relay the Mtrace2 Reply one in the original Mtrace2 header, it MUST relay the Mtrace2 Reply
back to the Mtrace2 client by replacing the Reply's header with the back to the Mtrace2 client by replacing the Reply's header with the
original Mtrace2 header. If the gateway does not receive the original Mtrace2 header. If the gateway does not receive the
corresponding Mtrace2 Reply within the [Mtrace Reply Timeout] period corresponding Mtrace2 Reply within the [Mtrace Reply Timeout] period
(see Section 5.8.4), then it silently discards the original Mtrace2 (see Section 5.8.4), then it silently discards the original Mtrace2
Query or Request message, and terminates the trace. Query or Request message and terminates the trace.
4.6. Hiding Information 4.6. Hiding Information
Information about a domain's topology and connectivity may be hidden Information about a domain's topology and connectivity may be hidden
from the Mtrace2 Requests. The Forwarding Code of INFO_HIDDEN may be from Mtrace2 Requests. The Forwarding Code of INFO_HIDDEN may be
used to note that. For example, the incoming interface address and used to note that. For example, the Incoming Interface address and
packet count on the ingress router of a domain, and the outgoing packet count on the ingress router of a domain, and the Outgoing
interface address and packet count on the egress router of the domain Interface address and packet count on the egress router of the
can be specified as all 1's. Additionally, the source-group packet domain, can be specified as all ones. Additionally, the source-group
count (see Section 3.2.4 and Section 3.2.5) within the domain may be packet count (see Sections 3.2.4 and 3.2.5) within the domain may be
all 1's if it is hidden. all ones if it is hidden.
5. Client Behavior 5. Client Behavior
This section describes the behavior of an Mtrace2 client in detail. This section describes the behavior of an Mtrace2 client in detail.
5.1. Sending Mtrace2 Query 5.1. Sending Mtrace2 Query
An Mtrace2 client initiates an Mtrace2 Query by sending the Query to An Mtrace2 client initiates an Mtrace2 Query by sending the Query to
the LHR of interest. the LHR of interest.
skipping to change at page 28, line 22 skipping to change at page 29, line 31
See also Section 5.4 on determining the LHR. See also Section 5.4 on determining the LHR.
5.1.2. Source Address 5.1.2. Source Address
An Mtrace2 Query MUST be sent with the client's interface address, An Mtrace2 Query MUST be sent with the client's interface address,
which is the Mtrace2 Client Address. which is the Mtrace2 Client Address.
5.2. Determining the Path 5.2. Determining the Path
An Mtrace2 client could send an initial Query messages with a large # An Mtrace2 client could send an initial Query message with a large #
Hops, in order to try to trace the full path. If this attempt fails, Hops, in order to try to trace the full path. If this attempt fails,
one strategy is to perform a linear search (as the traditional one strategy is to perform a linear search (as the traditional
unicast traceroute program does); set the # Hops field to 1 and try unicast traceroute program does); set the # Hops field to 1 and try
to get a Reply, then 2, and so on. If no Reply is received at a to get a Reply, then 2, and so on. If no Reply is received at a
certain hop, this hop is identified as the probable cause of certain hop, this hop is identified as the probable cause of
forwarding failures on the path. Nevertheless, the sender may forwarding failures on the path. Nevertheless, the sender may
attempt to continue tracing past the non-responding hop by further attempt to continue tracing past the non-responding hop by further
increasing the hop count in the hopes that further hops may respond. increasing the hop count in the hope that further hops may respond.
Each of these attempts MUST NOT be initiated before the previous Each of these attempts MUST NOT be initiated before the previous
attempt has terminated either because of successful reception of a attempt has terminated either because of successful reception of a
Reply or because the [Mtrace Reply Timeout] timeout has occurred. Reply or because the [Mtrace Reply Timeout] timeout has occurred.
See also Section 5.6 on receiving the results of a trace. See also Section 5.6 on receiving the results of a trace.
5.3. Collecting Statistics 5.3. Collecting Statistics
After a client has determined that it has traced the whole path or as After a client has determined that it has traced the whole path or as
much as it can expect to (see Section 5.8), it might collect much as it can expect to (see Section 5.8), it might collect
statistics by waiting a short time and performing a second trace. If statistics by waiting a short time and performing a second trace. If
the path is the same in the two traces, statistics can be displayed the path is the same in the two traces, statistics can be displayed
as described in Section 7.3 and Section 7.4. as described in Sections 7.3 and 7.4.
5.4. Last Hop Router (LHR) 5.4. Last-Hop Router (LHR)
The Mtrace2 client may not know which is the last-hop router, or that The Mtrace2 client may not know which is the last-hop router, or that
router may be behind a firewall that blocks unicast packets but router may be behind a firewall that blocks unicast packets but
passes multicast packets. In these cases, the Mtrace2 Request should passes multicast packets. In these cases, the Mtrace2 Request should
be multicasted to the all-routers multicast group (224.0.0.2) for be multicasted to the all-routers multicast group (224.0.0.2) for
IPv4 or All Routers Address (FF02::2) for IPv6. All routers except IPv4 or All Routers Address (FF02::2) for IPv6. All routers except
the correct last-hop router SHOULD ignore any Mtrace2 Request the correct last-hop router SHOULD ignore any Mtrace2 Request
received via multicast. received via multicast.
5.5. First Hop Router (FHR) 5.5. First-Hop Router (FHR)
The IANA assigned 224.0.1.32 as the default multicast group for old The IANA assigned 224.0.1.32 as the default multicast group for old
IPv4 mtrace (v1) responses, in order to support mtrace clients that IPv4 mtrace (v1) responses, in order to support mtrace clients that
are not unicast reachable from the first-hop router. Mtrace2, are not unicast reachable from the first-hop router. Mtrace2,
however, does not require any IPv4/IPv6 multicast addresses for the however, does not require any IPv4/IPv6 multicast addresses for the
Mtrace2 Replies. Every Mtrace2 Reply is sent to the unicast address Mtrace2 Replies. Every Mtrace2 Reply is sent to the unicast address
specified in the Mtrace2 Client Address field of the Mtrace2 Reply. specified in the Mtrace2 Client Address field of the Mtrace2 Reply.
5.6. Broken Intermediate Router 5.6. Broken Intermediate Router
A broken intermediate router might simply not understand Mtrace2 A broken intermediate router might simply not understand Mtrace2
packets, and drop them. The Mtrace2 client will get no Reply at all packets and drop them. The Mtrace2 client will get no Reply at all
as a result. It should then perform a hop-by-hop search by setting as a result. It should then perform a hop-by-hop search by setting
the # Hops field until it gets an Mtrace2 Reply. The client may use the # Hops field until it gets an Mtrace2 Reply. The client may use
linear or binary search; however, the latter is likely to be slower linear or binary search; however, the latter is likely to be slower
because a failure requires waiting for the [Mtrace Reply Timeout] because a failure requires waiting for the [Mtrace Reply Timeout]
period. period.
5.7. Non-Supported Router 5.7. Non-supported Router
When a non-supported router receives an Mtrace2 Query or Request When a non-supported router receives an Mtrace2 Query or Request
message whose destination address is a multicast address, the router message whose destination address is a multicast address, the router
will silently discard the message. will silently discard the message.
When the router receives an Mtrace2 Query which is destined to When the router receives an Mtrace2 Query that is destined to itself,
itself, the router returns an Internet Control Message Protocol the router returns an Internet Control Message Protocol (ICMP) port
(ICMP) port unreachable to the Mtrace2 client. On the other hand, unreachable to the Mtrace2 client. On the other hand, when the
when the router receives an Mtrace2 Request which is destined to router receives an Mtrace2 Request that is destined to itself, the
itself, the router returns an ICMP port unreachable to its adjacent router returns an ICMP port unreachable to its adjacent router from
router from which the Request receives. Therefore, the Mtrace2 which the Request receives. Therefore, the Mtrace2 client needs to
client needs to terminate the trace when the [Mtrace Reply Timeout] terminate the trace when the [Mtrace Reply Timeout] timeout has
timeout has occurred, and may then issue another Query with a lower occurred, and it may then issue another Query with a lower number of
number of # Hops. # Hops.
5.8. Mtrace2 Termination 5.8. Mtrace2 Termination
When performing an expanding hop-by-hop trace, it is necessary to When performing an expanding hop-by-hop trace, it is necessary to
determine when to stop expanding. determine when to stop expanding.
5.8.1. Arriving at Source 5.8.1. Arriving at Source
A trace can be determined to have arrived at the source if the A trace can be determined to have arrived at the source if the
Incoming Interface of the last router in the trace is non-zero, but Incoming Interface of the last router in the trace is non-zero, but
the Upstream Router is zero. the upstream router is zero.
5.8.2. Fatal Error 5.8.2. Fatal Error
A trace has encountered a fatal error if the last Forwarding Error in A trace has encountered a fatal error if the last Forwarding Error in
the trace has the 0x80 bit set. the trace has the 0x80 bit set.
5.8.3. No Upstream Router 5.8.3. No Upstream Router
A trace cannot continue if the last Upstream Router in the trace is A trace cannot continue if the last upstream router in the trace is
set to 0. set to 0.
5.8.4. Reply Timeout 5.8.4. Reply Timeout
This document defines the [Mtrace Reply Timeout] value, which is used This document defines the [Mtrace Reply Timeout] value, which is used
to time out an Mtrace2 Reply as seen in Section 4.5, Section 5.2, and to time out an Mtrace2 Reply as seen in Sections 4.5, 5.2, and 5.7.
Section 5.7. The default [Mtrace Reply Timeout] value is 10 The default [Mtrace Reply Timeout] value is 10 (seconds) and can be
(seconds), and can be manually changed on the Mtrace2 client and manually changed on the Mtrace2 client and routers.
routers.
5.9. Continuing after an Error 5.9. Continuing after an Error
When the NO_SPACE error occurs, as described in Section 4.2, a router When the NO_SPACE error occurs, as described in Section 4.2, a router
will send back an Mtrace2 Reply to the Mtrace2 client, and continue will send back an Mtrace2 Reply to the Mtrace2 client and continue
with a new Request (see Section 4.3.3). In this case, the Mtrace2 with a new Request (see Section 4.3.3). In this case, the Mtrace2
client may receive multiple Mtrace2 Replies from different routers client may receive multiple Mtrace2 Replies from different routers
along the path. When this happens, the client MUST treat them as a along the path. When this happens, the client MUST treat them as a
single Mtrace2 Reply message by collating the augmented response single Mtrace2 Reply message by collating the Augmented Response
blocks of subsequent Replies sharing the same query ID, sequencing Blocks of subsequent Replies sharing the same Query ID, sequencing
each cluster of augmented response blocks based on the order in which each cluster of Augmented Response Blocks based on the order in which
they are received. they are received.
If a trace times out, it is very likely that a router in the middle If a trace times out, it is very likely that a router in the middle
of the path does not support Mtrace2. That router's address will be of the path does not support Mtrace2. That router's address will be
in the Upstream Router field of the last Standard Response Block in in the Upstream Router field of the last Standard Response Block in
the last received Reply. A client may be able to determine (via the last received Reply. A client may be able to determine a list of
mrinfo or the Simple Network Management Protocol (SNMP) [11][13]) a neighbors of the non-responding router (e.g., by using the Simple
list of neighbors of the non-responding router. The neighbors Network Management Protocol (SNMP) [12] [14]). The neighbors
obtained in this way could then be probed (via the multicast MIB obtained in this way could then be probed (via the multicast MIB
[13]) to determine which one is the upstream neighbor (i.e., Reverse [14]) to determine which one is the upstream neighbor (i.e., an RPF
Path Forwarding (RPF) neighbor) of the non-responding router. This neighbor) of the non-responding router. This algorithm can identify
algorithm can identify the upstream neighbor because, even though the upstream neighbor because, even though there may be multiple
there may be multiple neighbors, the non-responding router should neighbors, the non-responding router should only have sent a "join"
only have sent a "join" to the one neighbor corresponding to its to the one neighbor corresponding to its selected RPF path. Because
selected RPF path. Because of this, only the RPF neighbor should of this, only the RPF neighbor should contain the non-responding
contain the non-responding router as a multicast next hop in its MIB router as a multicast next hop in its MIB output list for the
output list for the affected multicast route. affected multicast route.
6. Protocol-Specific Considerations 6. Protocol-Specific Considerations
This section describes the Mtrace2 behavior with the presence of This section describes the Mtrace2 behavior with the presence of
different multicast protocols. different multicast protocols.
6.1. PIM-SM 6.1. PIM-SM
When an Mtrace2 reaches a PIM-SM RP, and the RP does not forward the When an Mtrace2 reaches a PIM-SM RP, and the RP does not forward the
trace on, it means that the RP has not performed a source-specific trace on, it means that the RP has not performed a source-specific
join so there is no more state to trace. However, the path that join, so there is no more state to trace. However, the path that
traffic would use if the RP did perform a source-specific join can be traffic would use if the RP did perform a source-specific join can be
traced by setting the trace destination to the RP, the trace source traced by setting the trace destination to the RP, the trace source
to the traffic source, and the trace group to 0. This Mtrace2 Query to the traffic source, and the trace group to 0. This Mtrace2 Query
may be unicasted to the RP, and the RP takes the same actions as an may be unicasted to the RP, and the RP takes the same actions as an
LHR. LHR.
6.2. Bi-Directional PIM 6.2. Bidirectional PIM
Bi-directional PIM [6] is a variant of PIM-SM that builds bi- Bidirectional PIM [4] is a variant of PIM-SM that builds
directional shared trees connecting multicast sources and receivers. bidirectional shared trees that connect multicast sources and
Along the bi-directional shared trees, multicast data is natively receivers. Along the bidirectional shared trees, multicast data is
forwarded from the sources to the Rendezvous Point Link (RPL), and natively forwarded from the sources to the Rendezvous Point Link
from which, to receivers without requiring source-specific state. In (RPL), and from which, to receivers without requiring source-specific
contrast to PIM-SM, Bi-directional PIM always has the state to trace. state. In contrast to PIM-SM, Bidirectional PIM always has the state
to trace.
A Designated Forwarder (DF) for a given Rendezvous Point Address A Designated Forwarder (DF) for a given Rendezvous Point Address
(RPA) is in charge of forwarding downstream traffic onto its link, (RPA) is in charge of forwarding downstream traffic onto its link and
and forwarding upstream traffic from its link towards the RPL that forwarding upstream traffic from its link towards the RPL that the
the RPA belongs to. Hence Mtrace2 Reply reports DF addresses or RPA RPA belongs to. Hence, Mtrace2 Reply reports DF addresses or RPA
along the path. along the path.
6.3. PIM-DM 6.3. PIM-DM
Routers running PIM Dense Mode [15] do not know the path packets Routers running PIM - Dense Mode (PIM-DM) [11] do not know the path
would take unless traffic is flowing. Without some extra protocol packets would take unless traffic is flowing. Without some extra
mechanism, this means that in an environment with multiple possible protocol mechanism, this means that in an environment with multiple
paths with branch points on shared media, Mtrace2 can only trace possible paths with branch points on shared media, Mtrace2 can only
existing paths, not potential paths. When there are multiple trace existing paths, not potential paths. When there are multiple
possible paths but the branch points are not on shared media, the possible paths but the branch points are not on shared media, the
upstream router is known, but the LHR may not know that it is the upstream router is known, but the LHR may not know that it is the
appropriate last hop. appropriate last hop.
When traffic is flowing, PIM Dense Mode routers know whether or not When traffic is flowing, PIM-DM routers know whether or not they are
they are the LHR for the link (because they won or lost an Assert the LHR for the link (because they won or lost an Assert battle) and
battle) and know who the upstream router is (because it won an Assert know who the upstream router is (because it won an Assert battle).
battle). Therefore, Mtrace2 is always able to follow the proper path Therefore, Mtrace2 is always able to follow the proper path when
when traffic is flowing. traffic is flowing.
6.4. IGMP/MLD Proxy 6.4. IGMP/MLD Proxy
When an IGMP or Multicast Listener Discovery (MLD) Proxy [7] receives When an IGMP or Multicast Listener Discovery (MLD) Proxy [3] receives
an Mtrace2 Query packet on an incoming interface, it notes a WRONG_IF an Mtrace2 Query packet on an Incoming Interface, it notes a WRONG_IF
in the Forwarding Code of the last Standard Response Block (see in the Forwarding Code of the last Standard Response Block (see
Section 3.2.4), and sends the Mtrace2 Reply back to the Mtrace2 Section 3.2.4) and sends the Mtrace2 Reply back to the Mtrace2
client. On the other hand, when an Mtrace2 Query packet reaches an client. On the other hand, when an Mtrace2 Query packet reaches an
outgoing interface of the IGMP/MLD proxy, it is forwarded onto its Outgoing Interface of the IGMP/MLD proxy, it is forwarded onto its
incoming interface towards the upstream router. Incoming Interface towards the upstream router.
7. Problem Diagnosis 7. Problem Diagnosis
This section describes different scenarios Mtrace2 can be used to This section describes different scenarios in which Mtrace2 can be
diagnose the multicast problems. used to diagnose the multicast problems.
7.1. Forwarding Inconsistencies 7.1. Forwarding Inconsistencies
The Forwarding Error code can tell if a group is unexpectedly pruned The Forwarding Error code can tell if a group is unexpectedly pruned
or administratively scoped. or administratively scoped.
7.2. TTL or Hop Limit Problems 7.2. TTL or Hop-Limit Problems
By taking the maximum of hops from the source and forwarding TTL By taking the maximum of hops from the source and forwarding the TTL
threshold over all hops, it is possible to discover the TTL or hop threshold over all hops, it is possible to discover the TTL or hop
limit required for the source to reach the destination. limit required for the source to reach the destination.
7.3. Packet Loss 7.3. Packet Loss
By taking multiple traces, it is possible to find packet loss By taking multiple traces, it is possible to find packet-loss
information by tracking the difference between the output packet information by tracking the difference between the output packet
count for the specified source-group address pair at a given upstream count for the specified source-group address pair at a given upstream
router and the input packet count on the next hop downstream router. router and the input packet count on the next-hop downstream router.
On a point-to-point link, any steadily increasing difference in these On a point-to-point link, any steadily increasing difference in these
counts implies packet loss. Although the packet counts will differ counts implies packet loss. Although the packet counts will differ
due to Mtrace2 Request propagation delay, the difference should due to Mtrace2 Request propagation delay, the difference should
remain essentially constant (except for jitter caused by differences remain essentially constant (except for jitter caused by differences
in propagation time among the trace iterations). However, this in propagation time among the trace iterations). However, this
difference will display a steady increase if packet loss is difference will display a steady increase if packet loss is
occurring. On a shared link, the count of input packets can be occurring. On a shared link, the count of input packets can be
larger than the number of output packets at the previous hop, due to larger than the number of output packets at the previous hop, due to
other routers or hosts on the link injecting packets. This appears other routers or hosts on the link injecting packets. This appears
as "negative loss" which may mask real packet loss. as "negative loss", which may mask real packet loss.
In addition to the counts of input and output packets for all In addition to the counts of input and output packets for all
multicast traffic on the interfaces, the Standard Response Block multicast traffic on the interfaces, the Standard Response Block
includes a count of the packets forwarded by a node for the specified includes a count of the packets forwarded by a node for the specified
source-group pair. Taking the difference in this count between two source-group pair. Taking the difference in this count between two
traces and then comparing those differences between two hops gives a traces and then comparing those differences between two hops gives a
measure of packet loss just for traffic from the specified source to measure of packet loss just for traffic from the specified source to
the specified receiver via the specified group. This measure is not the specified receiver via the specified group. This measure is not
affected by shared links. affected by shared links.
On a point-to-point link that is a multicast tunnel, packet loss is On a point-to-point link that is a multicast tunnel, packet loss is
usually due to congestion in unicast routers along the path of that usually due to congestion in unicast routers along the path of that
tunnel. On native multicast links, loss is more likely in the output tunnel. On native multicast links, loss is more likely in the output
queue of one hop, perhaps due to priority dropping, or in the input queue of one hop, perhaps due to priority dropping, or in the input
queue at the next hop. The counters in the Standard Response Block queue at the next hop. The counters in the Standard Response Block
do not allow these cases to be distinguished. Differences in packet do not allow these cases to be distinguished. Differences in packet
counts between the incoming and outgoing interfaces on one node counts between the Incoming and Outgoing Interfaces on one node
cannot generally be used to measure queue overflow in the node. cannot generally be used to measure queue overflow in the node.
7.4. Link Utilization 7.4. Link Utilization
Again, with two traces, you can divide the difference in the input or Again, with two traces, you can divide the difference in the input or
output packet counts at some hop by the difference in time stamps output packet counts at some hop by the difference in timestamps from
from the same hop to obtain the packet rate over the link. If the the same hop to obtain the packet rate over the link. If the average
average packet size is known, then the link utilization can also be packet size is known, then the link utilization can also be estimated
estimated to see whether packet loss may be due to the rate limit or to see whether packet loss may be due to the rate limit or the
the physical capacity on a particular link being exceeded. physical capacity on a particular link being exceeded.
7.5. Time Delay 7.5. Time Delay
If the routers have synchronized clocks, it is possible to estimate If the routers have synchronized clocks, it is possible to estimate
propagation and queuing delay from the differences between the propagation and queuing delay from the differences between the
timestamps at successive hops. However, this delay includes control timestamps at successive hops. However, this delay includes control
processing overhead, so is not necessarily indicative of the delay processing overhead, so is not necessarily indicative of the delay
that data traffic would experience. that data traffic would experience.
8. IANA Considerations 8. IANA Considerations
The following new registries are to be created and maintained under The following registries have been created and are maintained under
the "Specification Required" registry policy as specified in [4]. the "Specification Required" registry policy as specified in [6].
8.1. "Mtrace2 Forwarding Codes" Registry 8.1. "Mtrace2 Forwarding Codes" Registry
This is an integer in the range 0-255. Assignment of a Forwarding This registry holds integers in the range 0-255. Assignment of a
Code requires specification of a value and a name for the Forwarding Forwarding Code requires specification of a value and a name for the
Code. Initial values for the forwarding codes are given in the table Forwarding Code. Initial values for the Forwarding Codes are given
at the end of Section 3.2.4. Additional values (specific to IPv6) in the table at the end of Section 3.2.4. Additional values
may also be specified at the end of Section 3.2.5. Any additions to (specific to IPv6) may also be specified at the end of Section 3.2.5.
this registry are required to fully describe the conditions under Any additions to this registry are required to fully describe the
which the new Forwarding Code is used. conditions under which the new Forwarding Code is used.
8.2. "Mtrace2 TLV Types" Registry 8.2. "Mtrace2 TLV Types" Registry
Assignment of a TLV Type requires specification of an integer value Assignment of a TLV Type requires specification of an integer value
"Code" in the range 0-255 and a name ("Type"). Initial values for "Code" in the range 0-255 and a name ("Type"). Initial values for
the TLV Types are given in the table at the beginning of Section 3.2. the TLV Types are given in the table at the beginning of Section 3.2.
8.3. UDP Destination Port 8.3. UDP Destination Port
IANA has assigned UDP user port 33435 (mtrace) for use by this IANA has assigned UDP user port 33435 (mtrace) for use by this
protocol as the Mtrace2 UDP destination port. protocol as the Mtrace2 UDP destination port.
9. Security Considerations 9. Security Considerations
This section addresses some of the security considerations related to This section addresses some of the security considerations related to
Mtrace2. Mtrace2.
9.1. Addresses in Mtrace2 Header 9.1. Addresses in Mtrace2 Header
An Mtrace2 header includes three addresses, source address, multicast An Mtrace2 header includes three addresses: a source address, a
address, and Mtrace2 client address. These addresses MUST be multicast address, and an Mtrace2 Client Address. These addresses
congruent with the definition defined in Section 3.2.1 and forwarding MUST be congruent with the definition defined in Section 3.2.1, and
Mtrace2 messages having invalid addresses MUST be prohibited. For forwarding Mtrace2 messages that have invalid addresses MUST be
instance, if Mtrace2 Client Address specified in an Mtrace2 header is prohibited. For instance, if the Mtrace2 Client Address specified in
a multicast address, then a router that receives the Mtrace2 message an Mtrace2 header is a multicast address, then a router that receives
MUST silently discard it. the Mtrace2 message MUST silently discard it.
9.2. Verification of Clients and Peers 9.2. Verification of Clients and Peers
A router providing Mtrace2 functionality MUST support a source A router providing Mtrace2 functionality MUST support a source-
verification mechanism to drop Queries from clients and Requests from verification mechanism to drop Queries from clients and Requests from
peer router or client addresses that are unauthorized or that are peer router or client addresses that are unauthorized or that are
beyond a specified administrative boundary. This verification could, beyond a specified administrative boundary. This verification could,
for example, be specified via a list of allowed/disallowed client and for example, be specified via a list of allowed/disallowed clients
peer addresses or subnets for a given Mtrace2 message type sent to and peer addresses or subnets for a given Mtrace2 message type sent
the Mtrace2 protocol port. If a Query or Request is received from an to the Mtrace2 protocol port. If a Query or Request is received from
unauthorized address or one beyond the specified administrative an unauthorized address or one beyond the specified administrative
boundary, the Query/Request MUST NOT be processed. The router MAY, boundary, the Query/Request MUST NOT be processed. The router MAY,
however, perform rate limited logging of such events. however, perform rate-limited logging of such events.
The required use of source verification on the participating routers The required use of source verification on the participating routers
minimizes the possible methods for introduction of spoofed Query/ minimizes the possible methods for introduction of spoofed Query/
Request packets that would otherwise enable DoS amplification attacks Request packets that would otherwise enable DoS amplification attacks
targeting an authorized "query" host. The source verification targeting an authorized "query" host. The source verification
mechanisms provide this protection by allowing Query messages from an mechanisms provide this protection by allowing Query messages from an
authorized host address to be received only by the router(s) authorized host address to be received only by the router(s)
connected to that host, and only on the interface to which that host connected to that host and only on the interface to which that host
is attached. For protection against spoofed Request messages, the is attached. For protection against spoofed Request messages, the
source verification mechanisms allow Request messages only from a source-verification mechanisms allow Request messages only from a
directly connected routing peer and allow these messages to be directly connected routing peer and allow these messages to be
received only on the interface to which that peer is attached. received only on the interface to which that peer is attached.
Note that the following vulnerabilities cannot be covered by the Note that the following vulnerabilities cannot be covered by the
source verification methods described here. These methods can, source verification methods described here. These methods can,
nevertheless, prevent attacks launched from outside the boundaries of nevertheless, prevent attacks launched from outside the boundaries of
a given network as well as from any hosts within the network that are a given network as well as from any hosts within the network that are
not on the same LAN as an intended authorized query client. not on the same LAN as an intended authorized query client.
o A server/router "B" other than the server/router "A" that actually o A server/router "B" other than the server/router "A" that actually
skipping to change at page 35, line 26 skipping to change at page 36, line 36
to the address for server/router "A". This is not a significant to the address for server/router "A". This is not a significant
threat, however, if only trusted servers and routers are connected threat, however, if only trusted servers and routers are connected
to that LAN. to that LAN.
o A malicious application running on a trusted server or router o A malicious application running on a trusted server or router
could send packets that might cause an amplification problem. It could send packets that might cause an amplification problem. It
is beyond the scope of this document to protect against a DoS is beyond the scope of this document to protect against a DoS
attack launched from the same host that is the target of the attack launched from the same host that is the target of the
attack or from another "on path" host, but this is not a likely attack or from another "on path" host, but this is not a likely
threat scenario. In addition, routers on the path MAY rate-limit threat scenario. In addition, routers on the path MAY rate-limit
the packets as specified in Section 9.5 and Section 9.6. the packets as specified in Sections 9.5 and 9.6.
9.3. Topology Discovery 9.3. Topology Discovery
Mtrace2 can be used to discover any actively-used topology. If your Mtrace2 can be used to discover any actively used topology. If your
network topology is a secret, Mtrace2 may be restricted at the border network topology is a secret, Mtrace2 may be restricted at the border
of your domain, using the ADMIN_PROHIB forwarding code. of your domain, using the ADMIN_PROHIB Forwarding Code.
9.4. Characteristics of Multicast Channel 9.4. Characteristics of Multicast Channel
Mtrace2 can be used to discover what sources are sending to what Mtrace2 can be used to discover what sources are sending to what
groups and at what rates. If this information is a secret, Mtrace2 groups and at what rates. If this information is a secret, Mtrace2
may be restricted at the border of your domain, using the may be restricted at the border of your domain, using the
ADMIN_PROHIB forwarding code. ADMIN_PROHIB Forwarding Code.
9.5. Limiting Query/Request Rates 9.5. Limiting Query/Request Rates
A router may limit Mtrace2 Queries and Requests by ignoring some of A router may limit Mtrace2 Queries and Requests by ignoring some of
the consecutive messages. The router MAY randomly ignore the the consecutive messages. The router MAY randomly ignore the
received messages to minimize the processing overhead, i.e., to keep received messages to minimize the processing overhead, i.e., to keep
fairness in processing queries, or prevent traffic amplification. fairness in processing Queries or prevent traffic amplification. The
The rate limit is left to the router's implementation. rate limit is left to the router's implementation.
9.6. Limiting Reply Rates 9.6. Limiting Reply Rates
The proxying and NO_SPACE behaviors may result in one Query returning The proxying and NO_SPACE behaviors may result in one Query returning
multiple Reply messages. In order to prevent abuse, the routers in multiple Reply messages. In order to prevent abuse, the routers in
the traced path MAY need to rate-limit the Replies. The rate limit the traced path MAY need to rate-limit the Replies. The rate-limit
function is left to the router's implementation. function is left to the router's implementation.
9.7. Specific Security Concerns 9.7. Specific Security Concerns
9.7.1. Request and Response Bombardment 9.7.1. Request and Response Bombardment
A malicious sender could generate invalid and undesirable Mtrace2 A malicious sender could generate invalid and undesirable Mtrace2
traffic to hosts and/or routers on a network by eliciting responses traffic to hosts and/or routers on a network by eliciting responses
to spoofed or multicast client addresses. This could be done via to spoofed or multicast client addresses. This could be done via
forged or multicast client/source addresses in Mtrace2 Query or forged or multicast client/source addresses in Mtrace2 Query or
Request messages. The recommended protections against this type of Request messages. The recommended protections against this type of
attack are described in Section 9.1, Section 9.2, Section 9.5, and attack are described in Sections 9.1, 9.2, 9.5, and 9.6.
Section 9.6.
9.7.2. Amplification Attack 9.7.2. Amplification Attack
Because an Mtrace2 Query results in Mtrace2 Request and Mtrace2 Reply Because an Mtrace2 Query results in Mtrace2 Request and Mtrace2 Reply
messages that are larger than the original message, the potential messages that are larger than the original message, the potential
exists for an amplification attack from a malicious sender. This exists for an amplification attack from a malicious sender. This
threat is minimized by restricting the set of addresses from which threat is minimized by restricting the set of addresses from which
Mtrace2 messages can be received on a given router as specified in Mtrace2 messages can be received on a given router as specified in
Section 9.2. Section 9.2.
In addition, for a router running a PIM protocol (PIM-SM, PIM-DM, PIM In addition, for a router running a PIM protocol (PIM-SM, PIM-DM, PIM
Source-Specific Multicast, or Bi-Directional PIM), the router SHOULD - Source-Specific Multicast (PIM-SSM), or Bidirectional PIM), the
drop any Mtrace2 Request or Reply message that is received from an IP router SHOULD drop any Mtrace2 Request or Reply message that is
address that does not correspond to an authenticated PIM neighbor on received from an IP address that does not correspond to an
the interface from which the packet is received. The intent of this authenticated PIM neighbor on the interface from which the packet is
text is to prevent non-router endpoints from injecting Request received. The intent of this text is to prevent non-router endpoints
messages. Implementations of non-PIM protocols SHOULD employ some from injecting Request messages. Implementations of non-PIM
other mechanism to prevent this attack. protocols SHOULD employ some other mechanism to prevent this attack.
9.7.3. Leaking of Confidential Topology Details 9.7.3. Leaking of Confidential Topology Details
Mtrace2 Queries are a potential mechanism for obtaining confidential Mtrace2 Queries are a potential mechanism for obtaining confidential
topology information for a targeted network. Section 9.2 and topology information for a targeted network. Sections 9.2 and 9.4
Section 9.4 describe required and optional methods for ensuring that describe required and optional methods for ensuring that information
information delivered with Mtrace2 messages is not disseminated to delivered with Mtrace2 messages is not disseminated to unauthorized
unauthorized hosts. hosts.
9.7.4. Delivery of False Information (Forged Reply Messages) 9.7.4. Delivery of False Information (Forged Reply Messages)
Forged Reply messages could potentially provide a host with invalid Forged Reply messages could potentially provide a host with invalid
or incorrect topology information. They could also provide invalid or incorrect topology information. They could also provide invalid
or incorrect information regarding multicast traffic statistics, or incorrect information regarding multicast traffic statistics,
multicast stream propagation delay between hops, multicast and multicast stream propagation delay between hops, multicast and
unicast protocols in use between hops and other information used for unicast protocols in use between hops and other information used for
analyzing multicast traffic patterns and for troubleshooting analyzing multicast traffic patterns, and troubleshooting multicast
multicast traffic problems. This threat is mitigated by the traffic problems. This threat is mitigated by the following factors:
following factors:
o The required source verification of permissible source addresses o The required source verification of permissible source addresses
specified in Section 9.2 eliminates the origination of forged specified in Section 9.2 eliminates the origination of forged
Replies from addresses that have not been authorized to send Replies from addresses that have not been authorized to send
Mtrace2 messages to routers on a given network. This mechanism Mtrace2 messages to routers on a given network. This mechanism
can block forged Reply messages sent from any "off path" source. can block forged Reply messages sent from any "off path" source.
o To forge a Reply, the sender would need to somehow know (or guess) o To forge a Reply, the sender would need to somehow know (or guess)
the associated two byte Query ID for an extant Query and the the associated 2-byte Query ID for an extant Query and the
dynamically allocated source port number. Because "off path" dynamically allocated source port number. Because "off path"
sources can be blocked by a source verification mechanism, the sources can be blocked by a source verification mechanism, the
scope of this threat is limited to "on path" attackers. scope of this threat is limited to "on path" attackers.
o The required use of source verification (Section 9.2) and o The required use of source verification (Section 9.2) and
recommended use of PIM neighbor authentication (Section 9.7.2) for recommended use of PIM neighbor authentication (Section 9.7.2) for
messages that are only valid when sent by a multicast routing peer messages that are only valid when sent by a multicast routing peer
(Request and Reply messages) eliminate the possibility of (Request and Reply messages) eliminate the possibility of
reception of a forged Reply from an authorized host address that reception of a forged Reply from an authorized host address that
does not belong to a multicast peer router. does not belong to a multicast peer router.
skipping to change at page 37, line 49 skipping to change at page 39, line 7
forged Reply message that would pass validity checks at the forged Reply message that would pass validity checks at the
querying client. This type of cryptographic protection is not querying client. This type of cryptographic protection is not
practical, however, because the primary reason for executing an practical, however, because the primary reason for executing an
Mtrace2 is that the destination endpoint (and path to that Mtrace2 is that the destination endpoint (and path to that
endpoint) are not known by the querying client. While it is not endpoint) are not known by the querying client. While it is not
practical to provide cryptographic protection between a client and practical to provide cryptographic protection between a client and
the Mtrace2 endpoints (destinations), it may be possible to the Mtrace2 endpoints (destinations), it may be possible to
prevent forged responses from "off path" nodes attached to any prevent forged responses from "off path" nodes attached to any
Mtrace2 transit LAN by devising a scheme to encrypt the critical Mtrace2 transit LAN by devising a scheme to encrypt the critical
portions of an Mtrace2 message between each valid sender/receiver portions of an Mtrace2 message between each valid sender/receiver
pair at each hop to be used for multicast/mtrace transit. The use pair at each hop to be used for multicast/Mtrace2 transit. The
of encryption protection between nodes is, however, out of the use of encryption protection between nodes is, however, out of the
scope of this document. scope of this document.
10. Acknowledgements 10. References
This specification started largely as a transcription of Van 10.1. Normative References
Jacobson's slides from the 30th IETF, and the implementation in
mrouted 3.3 by Ajit Thyagarajan. Van's original slides credit Steve
Casner, Steve Deering, Dino Farinacci and Deb Agrawal. The original
multicast traceroute client, mtrace (version 1), has been implemented
by Ajit Thyagarajan, Steve Casner and Bill Fenner. The idea of the
"S" bit to allow statistics for a source subnet is due to Tom
Pusateri.
For the Mtrace version 2 specification, the authors would like to [1] Bradner, S., "Key words for use in RFCs to Indicate Requirement
give special thanks to Tatsuya Jinmei, Bill Fenner, and Steve Casner. Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997,
Also, extensive comments were received from David L. Black, Ronald <https://www.rfc-editor.org/info/rfc2119>.
Bonica, Yiqun Cai, Liu Hui, Bharat Joshi, Robert Kebler, John
Kristoff, Mankamana Mishra, Heidi Ou, Eric Rescorla, Pekka Savola,
Shinsuke Suzuki, Dave Thaler, Achmad Husni Thamrin, Stig Venaas, Cao
Wei, and the Mboned working group members.
11. References [2] Hinden, R. and S. Deering, "IP Version 6 Addressing
Architecture", RFC 4291, DOI 10.17487/RFC4291, February 2006,
<https://www.rfc-editor.org/info/rfc4291>.
11.1. Normative References [3] Fenner, B., He, H., Haberman, B., and H. Sandick, "Internet
Group Management Protocol (IGMP) / Multicast Listener Discovery
(MLD)-Based Multicast Forwarding ("IGMP/MLD Proxying")",
RFC 4605, DOI 10.17487/RFC4605, August 2006,
<https://www.rfc-editor.org/info/rfc4605>.
[1] Bradner, S., "Key words for use in RFCs to indicate [4] Handley, M., Kouvelas, I., Speakman, T., and L. Vicisano,
requirement levels", RFC 2119, March 1997. "Bidirectional Protocol Independent Multicast (BIDIR- PIM)",
RFC 5015, DOI 10.17487/RFC5015, October 2007,
<https://www.rfc-editor.org/info/rfc5015>.
[2] Deering, S. and R. Hinden, "Internet Protocol, Version 6 [5] Fenner, B., Handley, M., Holbrook, H., Kouvelas, I., Parekh,
(IPv6) Specification", RFC 8200, July 2017. R., Zhang, Z., and L. Zheng, "Protocol Independent Multicast -
Sparse Mode (PIM-SM): Protocol Specification (Revised)",
STD 83, RFC 7761, DOI 10.17487/RFC7761, March 2016,
<https://www.rfc-editor.org/info/rfc7761>.
[3] Hinden, R. and S. Deering, "IP Version 6 Addressing [6] Cotton, M., Leiba, B., and T. Narten, "Guidelines for Writing
Architecture", RFC 4291, February 2006. an IANA Considerations Section in RFCs", BCP 26, RFC 8126,
DOI 10.17487/RFC8126, June 2017,
<https://www.rfc-editor.org/info/rfc8126>.
[4] Cotton, M., Leiba, B., and T. Narten, "Guidelines for [7] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key
Writing an IANA Considerations Section in RFCs", RFC 8126, Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017,
June 2017. <https://www.rfc-editor.org/info/rfc8174>.
[5] Fenner, B., Handley, M., Holbrook, H., Kouvelas, I., [8] Deering, S. and R. Hinden, "Internet Protocol, Version 6 (IPv6)
Parekh, R., Zhang, Z., and L. Zheng, "Protocol Independent Specification", STD 86, RFC 8200, DOI 10.17487/RFC8200, July
Multicast - Sparse Mode (PIM-SM): Protocol Specification 2017, <https://www.rfc-editor.org/info/rfc8200>.
(Revised)", RFC 7761, March 2016.
[6] Handley, M., Kouvelas, I., Speakman, T., and L. Vicisano, 10.2. Informative References
"Bidirectional Protocol Independent Multicast (BIDIR-
PIM)", RFC 5015, October 2007.
[7] Fenner, B., He, H., Haberman, B., and H. Sandick, [9] McCloghrie, K. and F. Kastenholz, "The Interfaces Group MIB",
"Internet Group Management Protocol (IGMP) / Multicast RFC 2863, DOI 10.17487/RFC2863, June 2000,
Listener Discovery (MLD)-Based Multicast Forwarding <https://www.rfc-editor.org/info/rfc2863>.
("IGMP/MLD Proxying")", RFC 4605, August 2006.
11.2. Informative References [10] Cain, B., Deering, S., Kouvelas, I., Fenner, B., and A.
Thyagarajan, "Internet Group Management Protocol, Version 3",
RFC 3376, DOI 10.17487/RFC3376, October 2002,
<https://www.rfc-editor.org/info/rfc3376>.
[8] Cain, B., Deering, S., Kouvelas, I., Fenner, B., and A. [11] Adams, A., Nicholas, J., and W. Siadak, "Protocol Independent
Thyagarajan, "Internet Group Management Protocol, Version Multicast - Dense Mode (PIM-DM): Protocol Specification
3", RFC 3376, October 2002. (Revised)", RFC 3973, DOI 10.17487/RFC3973, January 2005,
<https://www.rfc-editor.org/info/rfc3973>.
[9] Bumgardner, G., "Automatic Multicast Tunneling", RFC 7450, [12] Draves, R. and D. Thaler, "Default Router Preferences and
February 2015. More-Specific Routes", RFC 4191, DOI 10.17487/RFC4191, November
2005, <https://www.rfc-editor.org/info/rfc4191>.
[10] Rosen, E. and R. Aggarwal, "Multicast in MPLS/BGP IP [13] Gill, V., Heasley, J., Meyer, D., Savola, P., Ed., and C.
VPNs", RFC 6513, February 2012. Pignataro, "The Generalized TTL Security Mechanism (GTSM)",
RFC 5082, DOI 10.17487/RFC5082, October 2007,
<https://www.rfc-editor.org/info/rfc5082>.
[11] Draves, R. and D. Thaler, "Default Router Preferences and [14] McWalter, D., Thaler, D., and A. Kessler, "IP Multicast MIB",
More-Specific Routes", RFC 4191, November 2005. RFC 5132, DOI 10.17487/RFC5132, December 2007,
<https://www.rfc-editor.org/info/rfc5132>.
[12] McCloghrie, K. and F. Kastenholz, "The Interfaces Group [15] Rosen, E., Ed. and R. Aggarwal, Ed., "Multicast in MPLS/ BGP IP
MIB", RFC 2863, June 2000. VPNs", RFC 6513, DOI 10.17487/RFC6513, February 2012,
<https://www.rfc-editor.org/info/rfc6513>.
[13] McWalter, D., Thaler, D., and A. Kessler, "IP Multicast [16] Bumgardner, G., "Automatic Multicast Tunneling", RFC 7450,
MIB", RFC 5132, December 2007. DOI 10.17487/RFC7450, February 2015,
<https://www.rfc-editor.org/info/rfc7450>.
[14] Gill, V., Heasley, J., Meyer, D., Savola, P., and C. Acknowledgements
Pignataro, "The Generalized TTL Security Mechanism
(GTSM)", RFC 5082, October 2007.
[15] Adams, A., Nicholas, J., and W. Siadak, "Protocol This specification started largely as a transcription of Van
Independent Multicast - Dense Mode (PIM-DM): Protocol Jacobson's slides from the 30th IETF meeting and the implementation
Specification (Revised)", RFC 3973, January 2005. in mrouted 3.3 by Ajit Thyagarajan. Van's original slides credit
Steve Casner, Steve Deering, Dino Farinacci, and Deb Agrawal. The
original multicast traceroute client, mtrace (version 1), has been
implemented by Ajit Thyagarajan, Steve Casner, and Bill Fenner. The
idea of the S bit to allow statistics for a source subnet is due to
Tom Pusateri.
For the Mtrace version 2 specification, the authors would like to
give special thanks to Tatsuya Jinmei, Bill Fenner, and Steve Casner.
Also, extensive comments were received from David L. Black, Ronald
Bonica, Yiqun Cai, Liu Hui, Bharat Joshi, Robert Kebler, John
Kristoff, Mankamana Mishra, Heidi Ou, Eric Rescorla, Pekka Savola,
Shinsuke Suzuki, Dave Thaler, Achmad Husni Thamrin, Stig Venaas, Cao
Wei, and the MBONED Working Group members.
Authors' Addresses Authors' Addresses
Hitoshi Asaeda Hitoshi Asaeda
National Institute of Information and Communications Technology National Institute of Information and Communications Technology
4-2-1 Nukui-Kitamachi 4-2-1 Nukui-Kitamachi
Koganei, Tokyo 184-8795 Koganei, Tokyo 184-8795
Japan Japan
Email: asaeda@nict.go.jp Email: asaeda@nict.go.jp
Kerry Meyer Kerry Meyer
Dell EMC
176 South Street
Hopkinton, MA 01748
United States
Email: kerry.meyer@me.com Email: kerry.meyer@me.com
WeeSan Lee (editor) WeeSan Lee (editor)
Email: weesan@weesan.com Email: weesan@weesan.com
 End of changes. 213 change blocks. 
518 lines changed or deleted 536 lines changed or added

This html diff was produced by rfcdiff 1.47. The latest version is available from http://tools.ietf.org/tools/rfcdiff/