Leveraging Traceroute Inconsistencies to Improve IP Geolocation

TL;DR

GeoTrace is a lightweight tool that improves IP geolocation accuracy in traceroute measurements by identifying and correcting anomalies using existing data, without additional probing.

Contribution

It introduces a systematic method to classify and resolve geolocation anomalies in traceroutes, enhancing measurement reliability.

Findings

Improves geolocation accuracy in traceroute data.

Identifies anomalies caused by MPLS and interface issues.

Enhances reliability of network measurement analyses.

Abstract

Traceroutes and geolocation are two essential network measurement tools that aid applications such as network mapping, topology generation, censorship, and Internet path analysis. However, these tools, individually and when combined, have significant limitations that can lead to inaccurate results. Prior research addressed specific issues with traceroutes and geolocation individually, often requiring additional measurements. In this paper, we introduce GeoTrace, a lightweight tool designed to identify, classify, and resolve geolocation anomalies in traceroutes using existing data. GeoTrace leverages the abundant information in traceroutes and geolocation databases to identify anomalous IP addresses with incorrect geolocation. It systematically classifies these anomalies based on underlying causes - such as MPLS effects or interface discrepancies - and refines their geolocation estimates where possible. By correcting these inaccuracies, GeoTrace enhances the reliability of traceroute-based analyses without the need for additional probing. Our work offers a streamlined solution that enhances the accuracy of geolocation in traceroute analysis, paving the way for more reliable measurement studies.