{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,12]],"date-time":"2026-02-12T10:01:12Z","timestamp":1770890472965,"version":"3.50.1"},"publisher-location":"Cham","reference-count":47,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030725815","type":"print"},{"value":"9783030725822","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-72582-2_32","type":"book-chapter","created":{"date-parts":[[2021,3,29]],"date-time":"2021-03-29T12:02:43Z","timestamp":1617019363000},"page":"547-563","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Zeroing in on Port 0 Traffic in the Wild"],"prefix":"10.1007","author":[{"given":"Aniss","family":"Maghsoudlou","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Oliver","family":"Gasser","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anja","family":"Feldmann","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,3,30]]},"reference":[{"key":"32_CR1","unstructured":"ACM: Artifact Review and Badging (2020). https:\/\/www.acm.org\/publications\/policies\/artifact-review-badging"},{"key":"32_CR2","unstructured":"Aitken, P.: RFC Erratum 1738 (2009). http:\/\/www.rfc-editor.org\/errata_search.php?eid=1738"},{"key":"32_CR3","unstructured":"Alcock, S., Nelson, R.: Libprotoident: traffic classification using lightweight packet inspection. WAND Network Research Group, Technical report (2012)"},{"key":"32_CR4","unstructured":"Asghari, H.: pyasn on Github (2018). https:\/\/github.com\/hadiasghari\/pyasn"},{"key":"32_CR5","unstructured":"AT&T: Broadband Information - Network Practices (2020). https:\/\/about.att.com\/sites\/broadband\/network"},{"key":"32_CR6","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1007\/978-3-319-45719-2_14","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"M Backes","year":"2016","unstructured":"Backes, M., Holz, T., Rossow, C., Rytilahti, T., Simeonovski, M., Stock, B.: On the feasibility of TTL-based filtering for DRDoS mitigation. In: Monrose, F., Dacier, M., Blanc, G., Garcia-Alfaro, J. (eds.) RAID 2016. LNCS, vol. 9854, pp. 303\u2013322. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-45719-2_14"},{"key":"32_CR7","doi-asserted-by":"crossref","unstructured":"Beverly, R.: Yarrp\u2019ing the internet: randomized high-speed active topology discovery. In: Proceedings of the Internet Measurement Conference, pp. 413\u2013420 (2016)","DOI":"10.1145\/2987443.2987479"},{"key":"32_CR8","doi-asserted-by":"publisher","unstructured":"Bou-Harb, E., Debbabi, M., Assi, C.: On fingerprinting probing activities. Comput. Secur. 43, 35\u201348 (2014). https:\/\/doi.org\/10.1016\/j.cose.2014.02.005. http:\/\/www.sciencedirect.com\/science\/article\/pii\/S0167404814000248","DOI":"10.1016\/j.cose.2014.02.005"},{"key":"32_CR9","doi-asserted-by":"publisher","first-page":"S114","DOI":"10.1016\/j.diin.2014.05.012","volume":"11","author":"E Bou-Harb","year":"2014","unstructured":"Bou-Harb, E., Lakhdari, N.E., Binsalleeh, H., Debbabi, M.: Multidimensional investigation of source port 0 probing. Digit. Investig. 11, S114\u2013S123 (2014)","journal-title":"Digit. Investig."},{"key":"32_CR10","doi-asserted-by":"publisher","unstructured":"Bykova, M., Ostermann, S.: Statistical analysis of malformed packets and their origins in the modern internet. In: Proceedings of the 2nd ACM SIGCOMM Workshop on Internet Measurment, IMW 2002, pp. 83\u201388. Association for Computing Machinery, New York (2002). https:\/\/doi.org\/10.1145\/637201.637211","DOI":"10.1145\/637201.637211"},{"key":"32_CR11","unstructured":"CAIDA: The CAIDA Anonymized Internet Traces Data Access (2019). https:\/\/www.caida.org\/data\/passive\/passive_dataset_download.xml"},{"key":"32_CR12","unstructured":"CAIDA: A Day in the Life of the Internet (DITL) (2020). https:\/\/www.caida.org\/projects\/ditl\/"},{"key":"32_CR13","unstructured":"CAIDA: Routeviews Prefix-to-AS mappings (pfx2as) for IPv4 and IPv6 (2020). http:\/\/data.caida.org\/datasets\/routing\/routeviews-prefix2as\/"},{"key":"32_CR14","doi-asserted-by":"crossref","unstructured":"Czyz, J., Luckie, M., Allman, M., Bailey, M., et al.: Don\u2019t forget to lock the back door! A characterization of IPv6 network security policy. In: Proceedings of the Network and Distributed Systems Security Symposium (2016)","DOI":"10.14722\/ndss.2016.23047"},{"key":"32_CR15","doi-asserted-by":"crossref","unstructured":"Dittrich, D., et al.: The Menlo Report: Ethical Principles Guiding Information and Communication Technology Research. US DHS (2012)","DOI":"10.2139\/ssrn.2342036"},{"key":"32_CR16","unstructured":"Durumeric, Z., Wustrow, E., Halderman, J.A.: ZMap: fast internet-wide scanning and its security applications. In: Proceedings of the 22nd USENIX Security Symposium, pp. 605\u2013620 (2013)"},{"key":"32_CR17","unstructured":"Fischer, D.: nanog mailing list: TCP and UDP Port 0 - Should an ISP or ITP Block it? (2020). https:\/\/mailman.nanog.org\/pipermail\/nanog\/2020-August\/209228.html"},{"key":"32_CR18","doi-asserted-by":"publisher","unstructured":"Gasser, O.: Analysis scripts and raw data for active port 0 measurements (2021). https:\/\/doi.org\/10.17617\/3.5f","DOI":"10.17617\/3.5f"},{"key":"32_CR19","doi-asserted-by":"crossref","unstructured":"Gasser, O., et al.: Clusters in the expanse: understanding and unbiasing IPv6 hitlists. In: Proceedings of the Internet Measurement Conference, pp. 364\u2013378 (2018)","DOI":"10.1145\/3278532.3278564"},{"key":"32_CR20","unstructured":"Gasser, O., et al.: IPv6 Hitlist Service (2018). https:\/\/ipv6hitlist.github.io\/"},{"key":"32_CR21","unstructured":"Gasser, O., Scheitle, Q., Gebhard, S., Carle, G.: Scanning the IPv6 internet: towards a comprehensive hitlist. In: Proceedings of the Traffic Monitoring and Analysis Workshop (2016)"},{"key":"32_CR22","unstructured":"Hallman, R., Bryan, J., Palavicini, G., Divita, J., Romero-Mariona, J.: Ioddos-the internet of distributed denial of service attacks. In: 2nd International Conference on Internet of Things, Big Data and Security, pp. 47\u201358. SCITEPRESS (2017)"},{"key":"32_CR23","unstructured":"IANA: Service Name and Transport Protocol Port Number Registry (2020). https:\/\/www.iana.org\/assignments\/service-names-port-numbers\/service-names-port-numbers.xhtml"},{"key":"32_CR24","doi-asserted-by":"crossref","unstructured":"Jin, C., Wang, H., Shin, K.G.: Hop-count filtering: an effective defense against spoofed DDoS traffic. In: Proceedings of the ACM Computer and Communications Security Conference (2003)","DOI":"10.1145\/948109.948116"},{"key":"32_CR25","unstructured":"Jones, T.: DDoS Attacks on Port 0 - Does it mean what you think it does? (2013). https:\/\/blog.endace.com\/2013\/08\/27\/ddos-attacks-on-port-0-does-it-mean-what-you-think-it-does\/"},{"key":"32_CR26","doi-asserted-by":"crossref","unstructured":"Kopp, D., Dietzel, C., Hohlfeld, O.: DDoS never dies? An IXP perspective on DDoS amplification attacks. In: Proceedings of the Passive and Active Measurement Conference (2021)","DOI":"10.1007\/978-3-030-72582-2_17"},{"key":"32_CR27","unstructured":"Larzon, L.-A., Degermark, M., Pink, S., Jonsson, L.-E., Ericsson, Ed., Fairhurst, G.: The Lightweight User Datagram Protocol (UDP-Lite). RFC 3828, RFC Editor, July 2004. https:\/\/tools.ietf.org\/html\/rfc3828#section-3.1"},{"key":"32_CR28","unstructured":"Linux man-pages project: bind(2) \u2013 Linux manual page (2020). https:\/\/man7.org\/linux\/man-pages\/man2\/bind.2.html"},{"key":"32_CR29","doi-asserted-by":"crossref","unstructured":"Luchs, M., Doerr, C.: The curious case of port 0. In: Proceedings of the IFIP Networking Conference, pp. 1\u20139 (2019)","DOI":"10.23919\/IFIPNetworking.2019.8816853"},{"key":"32_CR30","unstructured":"Maghsoudlou, A., Gasser, O., Feldmann, A.: Reserved: Dissecting Internet Traffic on Port 0 (2020)"},{"key":"32_CR31","unstructured":"Majkowski, M.: Reflections on reflection (attacks) (2017). https:\/\/blog.cloudflare.com\/reflections-on-reflections\/"},{"key":"32_CR32","unstructured":"MAWI project: MAWI Working Group Traffic Archive (2020). http:\/\/mawi.wide.ad.jp\/mawi\/"},{"key":"32_CR33","unstructured":"Microsoft: Windows bind function (2018). https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/api\/winsock\/nf-winsock-bind"},{"key":"32_CR34","doi-asserted-by":"crossref","unstructured":"Mukaddam, A., Elhajj, I., Kayssi, A., Chehab, A.: IP spoofing detection using modified hop count. In: Proceedings of the Advanced Information Networking and Applications Conference (2014)","DOI":"10.1109\/AINA.2014.62"},{"key":"32_CR35","unstructured":"Nokia: Router Configuration Guide Release 16.0.R4 (2018). https:\/\/infoproducts.nokia.com\/cgi-bin\/dbaccessfilename.cgi\/3HE14136AAABTQZZA01_V1_7450%20ESS%207750%20SR%207950%20XRS%20and%20VSR%20Router%20Configuration%20Guide%2016.0.R4.pdf"},{"key":"32_CR36","doi-asserted-by":"crossref","unstructured":"Partridge, C., Allman, M.: Ethical considerations in network measurement papers. Commun. ACM 59(10), 58\u201364 (2016)","DOI":"10.1145\/2896816"},{"key":"32_CR37","unstructured":"Reynolds, J., Postel, J.: Assigned numbers. RFC 870, RFC Editor, Fremont, CA, USA, October 1983. 10.17487\/RFC0870. https:\/\/www.rfc-editor.org\/rfc\/rfc870.txt. obsoleted by RFC 900"},{"key":"32_CR38","doi-asserted-by":"crossref","unstructured":"Scheitle, Q., W\u00e4hlisch, M., Gasser, O., Schmidt, T.C., Carle, G.: Towards an ecosystem for reproducible research in computer networking. In: Proceedings of the ACM SIGCOMM Reproducibility Workshop (2017)","DOI":"10.1145\/3097766.3097768"},{"key":"32_CR39","doi-asserted-by":"crossref","unstructured":"Stewart, R.: Stream Control Transmission Protocol. RFC 4960, RFC Editor, September 2007. https:\/\/tools.ietf.org\/html\/rfc4960","DOI":"10.17487\/rfc4960"},{"key":"32_CR40","unstructured":"WAND Network Research Group: WITS: Waikato VIII (2020). https:\/\/wand.net.nz\/wits\/waikato\/8\/"},{"key":"32_CR41","unstructured":"Wanner, R.: Port 0 DDOS (2013). https:\/\/isc.sans.edu\/forums\/diary\/Port+0+DDOS\/17081\/"},{"key":"32_CR42","unstructured":"WIDE project: WIDE project website (2020). http:\/\/www.wide.ad.jp\/index_e.html"},{"key":"32_CR43","doi-asserted-by":"publisher","unstructured":"Wustrow, E., Karir, M., Bailey, M., Jahanian, F., Huston, G.: Internet background radiation revisited. In: Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement, IMC 2010, pp. 62\u201374. Association for Computing Machinery, New York (2010). https:\/\/doi.org\/10.1145\/1879141.1879149","DOI":"10.1145\/1879141.1879149"},{"key":"32_CR44","unstructured":"Xfinity: Blocked Internet Ports List (2020). https:\/\/www.xfinity.com\/support\/articles\/list-of-blocked-ports"},{"key":"32_CR45","unstructured":"Yarrp authors: Yarrp on Github (2020). https:\/\/github.com\/cmand\/yarrp\/"},{"key":"32_CR46","unstructured":"ZMap authors: ZMap on Github (2020). https:\/\/github.com\/zmap\/zmap\/"},{"key":"32_CR47","unstructured":"ZMapv6 authors: ZMapv6 on Github (2020). https:\/\/github.com\/tumi8\/zmap\/"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-72582-2_32","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,22]],"date-time":"2022-12-22T19:42:26Z","timestamp":1671738146000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-72582-2_32"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030725815","9783030725822"],"references-count":47,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-72582-2_32","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"30 March 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Cottbus","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Germany","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 March 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 March 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.pam2021.b-tu.de\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCrp","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"75","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"33","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"44% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.9","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}