Changes between Initial Version and Version 1 of ConvertingTracesets


Ignore:
Timestamp:
11/13/06 13:22:03 (14 years ago)
Author:
perry
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • ConvertingTracesets

    v1 v1  
     1libtrace comes with a program ({{{traceconvert}}}) that lets you convert from any trace type that libtrace understands, to any trace type libtrace can output.
     2
     3Example usage:
     4{{{
     5  traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz
     6}}}
     7
     8'''Note''': that the {{{pcapfile:}}} output specifier by defaults outputs compressed pcap files (which tcpdump can't natively understand).  Use {{{tcpdump -r <(zcat auck4-20010220-210122-0.pcap.gz)}}} to read these files.
     9
     10== Conversions for common tracesets: ==
     11=== Auckland I ===
     12Libtrace does not currently support the DAG2 trace format.  If you have a need for libtrace to understand the Auckland I or other DAG2 traceset then drop us a note and we'll add support.
     13
     14=== Auckland II ===
     15Available from: http://pma.nlanr.net/Traces/long/auck2.html
     16{{{
     17  traceconvert legacyatm:auck2-20000125-143640-0.gz pcapfile:auck2-20000125-143640-0.pcap.gz
     18}}}
     19
     20=== Auckland IV ===
     21Available from: http://pma.nlanr.net/Traces/long/auck4.html
     22
     23{{{
     24  traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz
     25}}}
     26
     27=== Auckland VI ===
     28Available from: http://pma.nlanr.net/Traces/long/auck6.html
     29There are two types of traces, some are ATM and some are Ethernet.
     30for the traces ending in -0 or -1 use:
     31{{{
     32  traceconvert legacyatm:auck6-0.gz pcapfile:auck6.pcap.gz
     33}}}
     34for the traces ending in -e0 or -e1 use:
     35{{{
     36  traceconvert legacyatm:auck6-e0.gz pcapfile:auck6.pcap.gz
     37}}}
     38
     39=== Auckland VII ===
     40Available from: http://pma.nlanr.net/Traces/long/auck7.html
     41These traces are an ERF timestamp followed by the first 4 bytes of the ATM header.  These traces contain no IP headers.  Libtrace cannot read these traces at the moment, if you need the ability to read them, then contact us.
     42
     43=== Auckland VIII ===
     44Available from: http://pma.nlanr.net/Special/auck8.html
     45These traces are in standard ERF format.
     46{{{
     47  traceconvert erf:auck8-20031215-220000.gz pcapfile:auck8-20031215-220000.pcap.gz
     48}}}
     49
     50=== NZIX II ===
     51Available from: http://pma.nlanr.net/Traces/long/nzix2.html
     52These traces are in legacy ethernet format.
     53{{{
     54  traceconvert legacyerf:nzixII-20000710-000000.gz pcapfile:nzixII-20000710-000000.pcap.gz
     55}}}
     56
     57=== Waikato tracesets ===
     58These traces are in standard ERF format
     59{{{
     60  traceconvert erf:waikato1-20050525-000000-0.gz pcapfile:waikato1-20050525-000000-0.pcap.gz
     61}}}