Version 2 (modified by perry, 14 years ago) (diff) |
---|
libtrace comes with a program (traceconvert) that lets you convert from any trace type that libtrace understands, to any trace type libtrace can output.
Example usage:
traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz
Note: that the pcapfile: output specifier by defaults outputs compressed pcap files (which tcpdump can't natively understand). Use tcpdump -r <(zcat auck4-20010220-210122-0.pcap.gz) to read these files.
Conversions for common tracesets:
Auckland I
Libtrace does not currently support the DAG2 trace format. If you have a need for libtrace to understand the Auckland I or other DAG2 traceset then drop us a note and we'll add support.
Auckland II
Available from: http://pma.nlanr.net/Traces/long/auck2.html
traceconvert legacyatm:auck2-20000125-143640-0.gz pcapfile:auck2-20000125-143640-0.pcap.gz
Auckland IV
Available from: http://pma.nlanr.net/Traces/long/auck4.html
traceconvert legacyatm:auck4-20010220-210122-0.gz pcapfile:auck4-20010220-210122-0.pcap.gz
Auckland VI
Available from: http://pma.nlanr.net/Traces/long/auck6.html
There are two types of traces, some are ATM and some are Ethernet. for the traces ending in -0 or -1 use:
traceconvert legacyatm:auck6-0.gz pcapfile:auck6.pcap.gz
for the traces ending in -e0 or -e1 use:
traceconvert legacyatm:auck6-e0.gz pcapfile:auck6.pcap.gz
Auckland VII
Available from: http://pma.nlanr.net/Traces/long/auck7.html
These traces are an ERF timestamp followed by the first 4 bytes of the ATM header. These traces contain no IP headers. Libtrace cannot read these traces at the moment, if you need the ability to read them, then contact us.
Auckland VIII
Available from: http://pma.nlanr.net/Special/auck8.html
These traces are in standard ERF format.
traceconvert erf:auck8-20031215-220000.gz pcapfile:auck8-20031215-220000.pcap.gz
NZIX II
Available from: http://pma.nlanr.net/Traces/long/nzix2.html These traces are in legacy ethernet format.
traceconvert legacyerf:nzixII-20000710-000000.gz pcapfile:nzixII-20000710-000000.pcap.gz
Waikato tracesets
These traces are in standard ERF format
traceconvert erf:waikato1-20050525-000000-0.gz pcapfile:waikato1-20050525-000000-0.pcap.gz