Summary

  • Alexander Männel told RIPE 92 that a table preserves each prefix but loses the shape of an operator's address space, while a conventional overview plot can average away the detail that matters.
  • His open-source Hilby map dynamically expands selected IPv4 or IPv6 areas. In the demonstration, a viewer moved from the full address space down to an individual /24 and back; Männel used RIPE RIS route-announcement data as the public example.

The neatest network picture may be the least willing to answer a follow-up question. A plot smooths thousands of prefixes into an overview. A table keeps every row and buries the pattern. Alexander Männel of TU Dresden used his RIPE 92 presentation to give the operator a third move: keep the overview, then force the selected square to open.

Männel studies address-related data that network operators already have: traffic, names pointing to addresses, and BGP announcements. He used public RIPE RIS announcements for the talk because a researcher cannot inspect a provider's private flow logs. The question was practical: how much address space does a network announce, and where should a human look more closely? The answer requires both a map and a path from the map to its underlying prefixes.

A Hilbert curve lays the ordered IP address space into a two-dimensional field while keeping nearby ranges near one another. In Männel's example, the four /10 subdivisions sit inside their parent /8. This makes a colored region meaningful at several scales. The official talk record describes Hilby as an interactive framework for both IPv4 and IPv6 rather than a finished static image.

In the demo, the viewer began with the whole address space, expanded an area of interest, reached an individual /24, and returned to the broad view. Hilby asks the user's data callback for the prefix currently in focus, so an operator can supply a color or label from its own evidence without pre-rendering every possible tile. The project also offers a playground for address-and-value CSV data. An image that can be interrogated is more useful than a poster on the wall.

The tool does not tell the operator which route is wrong. The color scheme, input records and choice of where to zoom remain human decisions. RIPE RIS data can show observed announcements, not private intent or every packet's path. A block that looks odd should send an analyst to dated route records and operational context, rather than directly to an incident ticket.

That distinction is Männel's wager. An overview is powerful because it removes detail; the danger is that its smoothness becomes an excuse to stop looking. Hilby makes inspection reversible. The operator can defend a conclusion by showing the small prefixes behind it, then place them back in the larger address space where the question began.

Sources: RIPE 92 primary transcript · official talk page · RIPE 92 RACI profile.