Dr. Johannes Zirngibl

Research

I focus on large scale analysis and measurements targeting the Internet. My core areas are the analysis of network deployments and their peculiarities. My work relies on multiple protocols spanning networking layers, such as IPv6, DNS, TLS, QUIC.

The goal is to reach a better understanding of the Internet and understand the impact of often disregarded influences such as Off-Net deployments.

I am part of the Global Internet Observatory (GINO), an interest group at our chair focusing on Internet measurements. We maintain a variety of long-running measurement campaigns for DNS, QUIC, and we maintain the IPv6 Hitlist.

Besides these efforts, a colleague and I founded the QUIC Interest Group that brings together researchers and students with an interest in QUIC. Interests cover performance measurements, the analysis of different libraries but also Internet-wide measurements to evaluate QUIC deployments. For more information about myself and latest news, also see johanneszirngibl.de.

projects

  • PRIMEnet: Predictive Analysis of Routing and Network flows for an Intelligent Network Management (2021 – 2024)

Teaching

Professional Activities and Community Services

Publications

2025-10-01 Patrick Sattler, Matthias Kirstein, Lars Wüstrich, Johannes Zirngibl, Georg Carle, “Lazy Eye Inspection: Capturing the State of Happy Eyeballs Implementations,” in Proceedings of the 2025 Internet Measurement Conference, Oct. 2025. [Pdf] [Homepage] [Bib]
2025-06-01 Patrick Sattler, Johannes Zirngibl, Fahad Hilal, Oliver Gasser, Kevin Vermeulten, Georg Carle, Mattijs Jonker, “ECSeptional DNS Data: Evaluating Nameserver ECS Deployments with Response-Aware Scanning,” Proc. ACM Netw., vol. 3, no. CoNEXT2, Jun. 2025. [Pdf] [Homepage] [DOI] [Bib]
2025-04-01 Johannes Zirngibl, “Detecting and Evaluating QUIC Deployments as Part of the Internet Ecosystem,” PhD thesis, Technical University of Munich, Apr. 2025. [Url] [Slides] [Bib]
2024-07-01 Marcel Kempf, Benedikt Jaeger, Johannes Zirngibl, Kevin Ploch, Georg Carle, “QUIC on the Fast Lane: Extending Performance Evaluations on High-rate Links,” Computer Communications, vol. 223, Jul. 2024. [Url] [Homepage] [DOI] [Bib]
2024-07-01 Markus Sosnowski, Johannes Zirngibl, Patrick Sattler, Juliane Aulbach, Jonas Lang, Georg Carle, “An Internet-wide View on HTTPS Certificate Revocations: Observing the Revival of CRLs via Active TLS Scans,” in Proc. IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Jul. 2024. [Pdf] [DOI] [Bib]
2024-06-01 Marcel Kempf, Nikolas Gauder, Benedikt Jaeger, Johannes Zirngibl, Georg Carle, “A Quantum of QUIC: Dissecting Cryptography with Post-Quantum Insights,” in International Federation for Information Processing (IFIP) Networking Conference 2024, Thessaloniki, Greece, Jun. 2024. [Preprint] [Rawdata] [DOI] [Bib]
2024-06-01 Markus Sosnowski, Johannes Zirngibl, Patrick Sattler, Georg Carle, Claas Grohnfeldt, Michele Russo, Daniele Sgandurra, “EFACTLS: Effective Active TLS Fingerprinting for Large-scale Server Deployment Characterization,” IEEE Transactions on Network and Service Management, vol. 21, no. 3, pp. 2582–2595, Jun. 2024. [Homepage] [Rawdata] [DOI] [Bib]
2024-05-01 Markus Sosnowski, Patrick Sattler, Johannes Zirngibl, Tim Betzer, Georg Carle, “Propagating Threat Scores With a TLS Ecosystem Graph Model Derived by Active Measurements,” in Proc. Network Traffic Measurement and Analysis Conference (TMA), May 2024. [Pdf] [Slides] [Homepage] [DOI] [Bib]
2024-03-01 Johannes Zirngibl, Florian Gebauer, Patrick Sattler, Markus Sosnowski, Georg Carle, “QUIC Hunter: Finding QUIC Deployments and Identifying Server Libraries Across the Internet,” in Passive and Active Measurement Conference (PAM), Mar. 2024. [Homepage] [DOI] [Bib]
2023-12-01 Patrick Sattler, Johannes Zirngibl, Mattijs Jonker, Oliver Gasser, Georg Carle, Ralph Holz, “Packed to the Brim: Investigating the Impact of Highly Responsive Prefixes on Internet-wide Measurement Campaigns,” Proc. ACM Netw., vol. 1, no. CoNEXT3, Dec. 2023. [Url] [Pdf] [Homepage] [DOI] [Bib]
2023-07-01 Simon Bauer, Patrick Sattler, Johannes Zirngibl, Christoph Schwarzenberg, Georg Carle, “Evaluating the Benefits: Quantifying the Effects of TCP Options, QUIC, and CDNs on Throughput,” in Proceedings of the Applied Networking Research Workshop, Jul. 2023. [Pdf] [Sourcecode] [Bib]
2023-07-01 Johannes Naab, Patrick Sattler, Johannes Zirngibl, Stephan Günther, Georg Carle, “Gotta Query ’Em All, Again! Repeatable Name Resolution with Full Dependency Provenance,” in Proceedings of the Applied Networking Research Workshop, Jul. 2023. [Pdf] [Rawdata] [Bib]
2023-07-01 Johannes Zirngibl, Patrick Sattler, Georg Carle, “A First Look at SVCB and HTTPS DNS Resource Records in the Wild,” in 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Jul. 2023. [Pdf] [DOI] [Bib]
2023-06-01 Lion Steger, Liming Kuang, Johannes Zirngibl, Georg Carle, Oliver Gasser, “Target Acquired? Evaluating Target Generation Algorithms for IPv6,” in Proceedings of the Network Traffic Measurement and Analysis Conference (TMA), Jun. 2023. Best Paper Award [Pdf] [Bib]
2023-06-01 Benedikt Jaeger, Johannes Zirngibl, Marcel Kempf, Kevin Ploch, Georg Carle, “QUIC on the Highway: Evaluating Performance on High-Rate Links,” in International Federation for Information Processing (IFIP) Networking 2023 Conference (IFIP Networking 2023), Barcelona, Spain, Jun. 2023. [Preprint] [Rawdata] [DOI] [Bib]
2023-03-01 Markus Sosnowski, Johannes Zirngibl, Patrick Sattler, Georg Carle, “DissecTLS: A Scalable Active Scanner for TLS Server Configurations, Capabilities, and TLS Fingerprinting,” in Passive and Active Measurement, Mar. 2023, pp. 110–126. [Pdf] [Homepage] [Rawdata] [DOI] [Bib]
2022-10-01 Patrick Sattler, Juliane Aulbach, Johannes Zirngibl, Georg Carle, “Towards a Tectonic Traffic Shift? Investigating Apple’s New Relay Network,” in Proceedings of the 2022 Internet Measurement Conference, Oct. 2022. [Pdf] [Homepage] [Rawdata] [Bib]
2022-10-01 Johannes Zirngibl, Lion Steger, Patrick Sattler, Oliver Gasser, Georg Carle, “Rusty Clusters? Dusting an IPv6 Research Foundation,” in Proceedings of the 2022 Internet Measurement Conference, Oct. 2022. [Pdf] [Homepage] [Rawdata] [DOI] [Bib]
2022-06-01 Markus Sosnowski, Johannes Zirngibl, Patrick Sattler, Georg Carle, Claas Grohnfeldt, Michele Russo, Daniele Sgandurra, “Active TLS Stack Fingerprinting: Characterizing TLS Server Deployments at Scale,” in Proc. Network Traffic Measurement and Analysis Conference (TMA), Jun. 2022. Best Paper Award [Pdf] [Slides] [Homepage] [Rawdata] [Bib]
2022-06-01 Johannes Zirngibl, Steffen Deusch, Patrick Sattler, Juliane Aulbach, Georg Carle, Mattijs Jonker, “Domain Parking: Largely Present, Rarely Considered!,” in Proc. Network Traffic Measurement and Analysis Conference (TMA) 2022, Jun. 2022. [Pdf] [Bib]
2022-06-01 Fabian Franzen, Lion Steger, Johannes Zirngibl, Patrick Sattler, “Looking for Honey Once Again: Detecting RDP and SMB Honeypots on the Internet,” in International Workshop on Traffic Measurements for Cybersecurity 2022, Jun. 2022. [Pdf] [Slides] [Sourcecode] [Bib]
2021-11-01 Johannes Zirngibl, Philippe Buschmann, Patrick Sattler, Benedikt Jaeger, Juliane Aulbach, Georg Carle, “It’s over 9000: Analyzing early QUIC Deployments with the Standardization on the Horizon,” in Proceedings of the 2021 Internet Measurement Conference, New York, NY, USA, Nov. 2021. [Preprint] [Homepage] [Rawdata] [Recording] [DOI] [Bib]
2016-03-01 Quirin Scheitle, Matthias Wachs, Johannes Zirngibl, Georg Carle, “Analyzing Locality of Mobile Messaging Traffic using the MATAdOR Framework,” in Passive and Active Measurements Conference (PAM) 2016 , Heraklion, Greece, Mar. 2016, pp. 190–202. [Pdf] [Preprint] [Slides] [Homepage] [Rawdata] [DOI] [Bib]