Problem in setting down malicious node interfaces

[sinda]

Dear ns3-users

I implement my own IP traceback solution in wireless mesh network (HWMP) using NS3-3.26. So, when the solution detects the attack, it blocks the attacks by setting down its interfaces based on this function:

void HwmpProtocol::TearDownLink (Ptr<Node> nodeA, uint32_t interfaceA)

{

  nodeA->GetObject<Ipv4> ()->SetDown (interfaceA);

}

On the one hand, I don't understund why the attacker still send packets (this is deducted from throughputs, the throughput of the attacker is different to zero):

On the other hand, the packets loss rate of normal users becomes higher after using TearDownLink function , how can I update the structure of mesh network after setting down attacker interfaces in Hwmp-protocol.cc?Should I send a PREQ (sendPreq) ???? Please help me to resolve this issue and thanks in advance.

[Tommaso Pecorella]

Hi,

first and foremost, a methodology note: you're assuming that the attacker will tear down its interfaces ? Well, it will very kind of him/her, but I strongly doubt that this is a good assumption.

About the remaining throughput, it depends on how you calculate it. Even if you set an interface to down at IP level, it could still send and receive packets.

Perhaps the node will not be able to send IP packets, but HWMP (which works below IP) will still work.

About all the other side effects... no idea. Search for where the packets are lost and why.

T.

[sinda]

Dear Tommaso

Thank for your replay.

In my solution the last router, which receives the total trace, will block the attacker ( not the later blocks itsef). I understund well now why the attacker still send packets, because I set down its interfaces at HWMP level. But there is a way to block sending packets from the application layer by modifying HWMP code??

[Tommaso Pecorella]

You have to find the NetDevices of the node and set these down.

T.