WITS: Leipzig I

Trace Format Legacy POS
Volume on Disk 64 GB
Number of Traces 38
Capture Start (Local) Thu Nov 21 20:00:00 2002
Capture End (Local) Tue Nov 26 13:59:59 2002
Total Duration 4 Days, 18 Hours, 0 Minutes and 0 Seconds
Packets Captured 3,429 million
Total Traffic 1,615 GB
Contiguity Entirely contiguous
Snapping Method 64 byte fixed-length capture.
Rotation Policy Trace files were rotated on 6 hourly boundaries, based on the start of the day.
Anonymization IP addresses replaced using one-to-one mapping into 10.0.0.0/8 address space. Any payload beyond the transport header has been replaced with zeroes.
Download Link
Download Link (RIPE repository)

This is a continuous short capture taken from the University of Leipzig Internet access link. A pair of DAG 3.2 cards were used to monitor the OC3 Packet-over-Sonet connection to the German research network (G-WiN). A diagram of the capture configuration can be found here.

Each trace file is named using the following format: yyyymmdd-HHMMSS-[direction].gz. The time and date refers to the local time when the capture was started. The direction refers to the half of the link that was monitored. It is not clear which directions correlate to incoming and outgoing traffic, unfortunately. Both traces can be combined to create a full bidirectional trace.

All non-IP traffic has been discarded and only TCP, UDP and ICMP traffic is present in each trace. Any user payload within the capture record has been zeroed.

The IP addresses in the traces have been replaced using a one-to-one mapping into the 10.0.0.0/8 address space. Each anonymised address was assigned sequentially so the first real-world address observed is mapped to 10.0.0.1, the next new address is 10.0.0.2 and so on. The mapping database was preserved across the entire trace set.

The recommended method for processing these traces is to use Libtrace, which we have developed. There are a number of tools included with libtrace such as a packet dumping utility, a trace format converter (for example, to convert to pcap), a trace splitting/filtering tool and a few statistic generators. We suggest you examine the Libtrace Wiki for more details on the Libtrace tools and the library itself.

Acknowledgements: Some of the information presented on this page has been sourced from the NLANR page about this trace, which no longer exists.

Name Local Start Time Duration Total Packets Compressed Size
20021121-200000-0 Thu Nov 21 20:00:00 2002 6:00:00 111 million 2,139 MB
20021121-200000-1 Thu Nov 21 20:00:00 2002 6:00:00 119 million 2,398 MB
20021122-020000-0 Fri Nov 22 02:00:00 2002 6:00:00 42 million 760 MB
20021122-020000-1 Fri Nov 22 02:00:00 2002 6:00:00 39 million 763 MB
20021122-080000-0 Fri Nov 22 08:00:00 2002 6:00:00 97 million 1,795 MB
20021122-080000-1 Fri Nov 22 08:00:00 2002 6:00:00 105 million 2,010 MB
20021122-140000-0 Fri Nov 22 14:00:00 2002 6:00:00 117 million 2,286 MB
20021122-140000-1 Fri Nov 22 14:00:00 2002 6:00:00 129 million 2,606 MB
20021122-200000-0 Fri Nov 22 20:00:00 2002 6:00:00 93 million 1,755 MB
20021122-200000-1 Fri Nov 22 20:00:00 2002 6:00:00 106 million 2,026 MB
20021123-020000-0 Sat Nov 23 02:00:00 2002 6:00:00 44 million 783 MB
20021123-020000-1 Sat Nov 23 02:00:00 2002 6:00:00 42 million 798 MB
20021123-080000-0 Sat Nov 23 08:00:00 2002 6:00:00 60 million 1,073 MB
20021123-080000-1 Sat Nov 23 08:00:00 2002 6:00:00 63 million 1,176 MB
20021123-140000-0 Sat Nov 23 14:00:00 2002 6:00:00 83 million 1,551 MB
20021123-140000-1 Sat Nov 23 14:00:00 2002 6:00:00 89 million 1,729 MB
20021123-200000-0 Sat Nov 23 20:00:00 2002 6:00:00 67 million 1,213 MB
20021123-200000-1 Sat Nov 23 20:00:00 2002 6:00:00 72 million 1,345 MB
20021124-020000-0 Sun Nov 24 02:00:00 2002 6:00:00 43 million 709 MB
20021124-020000-1 Sun Nov 24 02:00:00 2002 6:00:00 38 million 674 MB
20021124-080000-0 Sun Nov 24 08:00:00 2002 6:00:00 67 million 1,221 MB
20021124-080000-1 Sun Nov 24 08:00:00 2002 6:00:00 66 million 1,276 MB
20021124-140000-0 Sun Nov 24 14:00:00 2002 6:00:00 108 million 2,126 MB
20021124-140000-1 Sun Nov 24 14:00:00 2002 6:00:00 114 million 2,324 MB
20021124-200000-0 Sun Nov 24 20:00:00 2002 6:00:00 119 million 2,337 MB
20021124-200000-1 Sun Nov 24 20:00:00 2002 6:00:00 123 million 2,548 MB
20021125-020000-0 Mon Nov 25 02:00:00 2002 6:00:00 51 million 874 MB
20021125-020000-1 Mon Nov 25 02:00:00 2002 6:00:00 43 million 822 MB
20021125-080000-0 Mon Nov 25 08:00:00 2002 6:00:00 105 million 1,961 MB
20021125-080000-1 Mon Nov 25 08:00:00 2002 6:00:00 115 million 2,240 MB
20021125-140000-0 Mon Nov 25 14:00:00 2002 6:00:00 155 million 3,152 MB
20021125-140000-1 Mon Nov 25 14:00:00 2002 6:00:00 170 million 3,617 MB
20021125-200000-0 Mon Nov 25 20:00:00 2002 6:00:00 117 million 2,369 MB
20021125-200000-1 Mon Nov 25 20:00:00 2002 6:00:00 127 million 2,697 MB
20021126-020000-0 Tue Nov 26 02:00:00 2002 6:00:00 45 million 845 MB
20021126-020000-1 Tue Nov 26 02:00:00 2002 6:00:00 45 million 883 MB
20021126-080000-0 Tue Nov 26 08:00:00 2002 6:00:00 155 million 2,679 MB
20021126-080000-1 Tue Nov 26 08:00:00 2002 6:00:00 126 million 2,617 MB