wiki:ConvertingTracesets

Version 11 (modified by perry, 14 years ago) (diff)

document dag2toerf

libtrace comes with a program (traceconvert) that lets you convert from any trace type that libtrace understands, to any trace type libtrace can output.

Example usage:

  traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz

Note: The pcapfile: output specifier by defaults outputs compressed pcap files (which tcpdump can't natively understand). Use tcpdump -r <(zcat auck4-20010220-210122-0.pcap.gz) to read these files.

Note 2: Instead of converting to pcap you can use libtrace directly to access these files and enjoy the benefits of file format, link and network layer independance, a high level API, and transparent fast decompression/compression.

Conversions for common tracesets:

Abilene I

Available from: http://pma.nlanr.net/Traces/long/ipls1.html

These are in legacy Packet over Sonet format:

  traceconvert legacypos:abileneI-IPLS-KSCY-20020814-090000-0.gz pcapfile:abileneI-IPLS-KSCY-20020814-090000-0.pcap.gz

Auckland I

Libtrace does not currently support the DAG2 trace format. We have a program dag2toerf that will translate these files (losslessly) to erf which can be read by libtrace.

Auckland II

Available from: http://pma.nlanr.net/Traces/long/auck2.html

  traceconvert legacyatm:auck2-20000125-143640-0.gz pcapfile:auck2-20000125-143640-0.pcap.gz

Auckland IV

Available from: http://pma.nlanr.net/Traces/long/auck4.html

  traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz

Auckland VI

Available from: http://pma.nlanr.net/Traces/long/auck6.html

There are two types of traces, some are ATM and some are Ethernet. for the traces ending in -0 or -1 use:

  traceconvert legacyatm:auck6-20010510-162311-0.gz pcapfile:auck6.pcap.gz

for the traces ending in -e0 or -e1 use:

  traceconvert legacyeth:auck6-20010510-162311-e0.gz pcapfile:auck6.pcap.gz

Auckland VII

Available from: http://pma.nlanr.net/Traces/long/auck7.html

These traces are an ERF timestamp followed by the first 4 bytes of the ATM header. These traces contain no IP headers. Libtrace cannot read these traces at the moment, if you need the ability to read them, then contact us.

Auckland VIII

Available from: http://pma.nlanr.net/Special/auck8.html

These traces are in standard ERF format.

  traceconvert erf:auck8-20031215-220000.gz pcapfile:auck8-20031215-220000.pcap.gz

Leipzig II

Available from: http://pma.nlanr.net/Special/leip2.html

These traces are in legacy Packet over Sonet format:

  traceconvert legacypos:leip2-20030221-121359-0.gz pcapfile:leip2-20030221-121359-0.pcap.gz

NZIX II

Available from: http://pma.nlanr.net/Traces/long/nzix2.html

These traces are in legacy ethernet format.

  traceconvert legacyeth:nzixII-20000710-000000.gz pcapfile:nzixII-20000710-000000.pcap.gz

Waikato tracesets

These traces are in standard ERF format

  traceconvert erf:waikato1-20050525-000000-0.gz pcapfile:waikato1-20050525-000000-0.pcap.gz