The 802.11 standard for wireless networks includes a Wired Equivalent Privacy (WEP) protocol, used to protect link-layer communications from eavesdropping and other attacks. We have discovered several serious security flaws in the protocol, stemming from misapplication of cryptographic primitives. The flaws lead to a number of practical attacks that demonstrate that WEP fails to achieve its security goals. In this paper, we discuss in detail each of the flaws, the underlying security principle violations, and the ensuing attacks. 1.

This memo specifies the incorporation of ECN (Explicit Congestion Notification) to TCP and IP, including ECN's use of two bits in the IP header. Table of Contents 1.

Abstract-Aggressive research on gigabit-per-second networks has led to dramatic improvements in network transmission speeds. One result of these improvements has been to put pressure on router technology to keep pace. This paper describes a router, nearly completed, which is more than fast enough to keep up with the latest transmission technologies. The router has a backplane speed of 50 Gh/s and can forward tens of millions of packets per second. Index Terms-Data communications, internetworking, packet switching, routing.

This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards " (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. Copyright Notice Copyright (c) 2009 IETF Trust and the persons identified as the

Over the last years, interest for connecting small devices such as sensors to an existing network infrastructure such as the global Internet has steadily increased. Such devices often has very limited CPU and memory resources and may not be able to run an instance of the TCP/IP protocol suite.

this paper---is to support this deployment.

We describe a new family of error detection codes called Weighted Sum Codes. These codes are preferred over four existing codes (CRC, Fletcher checksum, Internet checksum, and XTP CXOR), because they combine powerful error detection properties (as good as the CRC) with attractive implementation properties. One variant, WSC-1, has efficient software and hardware implementations; while a second variant, WSC-2, is almost as efficient in software (still significantly better than CRC) and offers commutative processing (that enables efficient out-of-order, parallel, and incremental update processing). 1 Introduction We describe a new family of error detection codes called Weighted Sum Codes. Although there exist many good error detection codes, none had all the properties we desired for our broadband transport protocol [1]. The CRC [2] has powerful error detection capabilities, but is slow * and does not allow commutative processing (that enables efficient out-of-order, parallel, and incr...

Many emerging real-time applications generate layered data streams, which can be used effectively to adapt multicast real-time transmissions to heterogeneous bandwidth environments. However, these applications have not changed with regard to being sensitive to transient congestion and cannot wait a full round-trip time for sender-initiated adaptation. In this paper we propose the Selective Truncating Internetwork Protocol (STRIP) supporting layered data transfer, and capable of handling congestion at a finer level of granularity by truncating packets, i.e., stripping off less important data. STRIP interoperates with the traditional IP infrastructure and can be introduced in a step-by-step fashion, starting with routers where the bene ts are obvious, such as routers connected to bandwidth constrained links with a surplus of processing capacity. We describe the design and architecture of STRIP and compare it with solutions for differentiated forwarding on a per-packet basis. STRIP provides a simple mechanism that can meet the demands for real-time flows effectively by supporting low delay forwarding, avoiding data-unit reordering, and supporting various drop priorities at the same time.

In this paper we research an FPGA based Application Specific Instruction Set Processor (ASIP) tailored to the needs of a flow aware Ethernet access node. The processor has an architecture optimized to handle flow processing tasks such as parsing, classification and packet manipulation. The VLIW instruction set allows for high degree of parallelism among the functional units inside the ASIP and has dedicated instructions to accelerate typical packet processing tasks. This way, a single processor is capable of handling the complete throughput of a gigabit Ethernet link. To reach the target of a 10 Gbit/s Ethernet access node several processors operate in parallel in a multicore environment. Apart from scalability, programmability is also an important feature. Therefore, the processor is developed using a retargetable tool suite, creating the hardware and an optimized C compiler out of a single processor description. 1.

lwIP is an implementation of the TCP/IP protocol stack. The focus of the lwIP stack is to reduce memory usage and code size, making lwIP suitable for use in small clients with very limited resources such as embedded systems. In order to reduce processing and memory demands, lwIP uses a tailor made API that does not require any data copying. This report describes the design and implementation of lwIP. The algorithms and data structures used both in the protocol implementations and in the sub systems such as the memory and buffer management systems are described. Also included in this report is a reference manual for