libtrace comes with a program ({{{traceconvert}}}) that lets you convert from any trace type that libtrace understands, to any trace type libtrace can output. Example usage: {{{ traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz }}} '''Note''': that the {{{pcapfile:}}} output specifier by defaults outputs compressed pcap files (which tcpdump can't natively understand). Use {{{tcpdump -r <(zcat auck4-20010220-210122-0.pcap.gz)}}} to read these files. == Conversions for common tracesets: == === Auckland I === Libtrace does not currently support the DAG2 trace format. If you have a need for libtrace to understand the Auckland I or other DAG2 traceset then drop us a note and we'll add support. === Auckland II === Available from: http://pma.nlanr.net/Traces/long/auck2.html {{{ traceconvert legacyatm:auck2-20000125-143640-0.gz pcapfile:auck2-20000125-143640-0.pcap.gz }}} === Auckland IV === Available from: http://pma.nlanr.net/Traces/long/auck4.html {{{ traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz }}} === Auckland VI === Available from: http://pma.nlanr.net/Traces/long/auck6.html There are two types of traces, some are ATM and some are Ethernet. for the traces ending in -0 or -1 use: {{{ traceconvert legacyatm:auck6-0.gz pcapfile:auck6.pcap.gz }}} for the traces ending in -e0 or -e1 use: {{{ traceconvert legacyatm:auck6-e0.gz pcapfile:auck6.pcap.gz }}} === Auckland VII === Available from: http://pma.nlanr.net/Traces/long/auck7.html These traces are an ERF timestamp followed by the first 4 bytes of the ATM header. These traces contain no IP headers. Libtrace cannot read these traces at the moment, if you need the ability to read them, then contact us. === Auckland VIII === Available from: http://pma.nlanr.net/Special/auck8.html These traces are in standard ERF format. {{{ traceconvert erf:auck8-20031215-220000.gz pcapfile:auck8-20031215-220000.pcap.gz }}} === NZIX II === Available from: http://pma.nlanr.net/Traces/long/nzix2.html These traces are in legacy ethernet format. {{{ traceconvert legacyerf:nzixII-20000710-000000.gz pcapfile:nzixII-20000710-000000.pcap.gz }}} === Waikato tracesets === These traces are in standard ERF format {{{ traceconvert erf:waikato1-20050525-000000-0.gz pcapfile:waikato1-20050525-000000-0.pcap.gz }}}