WITS: Leipzig I
Trace Format | Legacy POS |
Volume on Disk | 64 GB |
Number of Traces | 38 |
Capture Start (Local) | Thu Nov 21 20:00:00 2002 |
Capture End (Local) | Tue Nov 26 13:59:59 2002 |
Total Duration | 4 Days, 18 Hours, 0 Minutes and 0 Seconds |
Packets Captured | 3,429 million |
Total Traffic | 1,615 GB |
Contiguity | Entirely contiguous |
Snapping Method | 64 byte fixed-length capture. |
Rotation Policy | Trace files were rotated on 6 hourly boundaries, based on the start of the day. |
Anonymization | IP addresses replaced using one-to-one mapping into 10.0.0.0/8 address space. Any payload beyond the transport header has been replaced with zeroes. |
Download | Link |
Download | Link (RIPE repository) |
This is a continuous short capture taken from the University of Leipzig Internet access link. A pair of DAG 3.2 cards were used to monitor the OC3 Packet-over-Sonet connection to the German research network (G-WiN). A diagram of the capture configuration can be found here.
Each trace file is named using the following format: yyyymmdd-HHMMSS-[direction].gz. The time and date refers to the local time when the capture was started. The direction refers to the half of the link that was monitored. It is not clear which directions correlate to incoming and outgoing traffic, unfortunately. Both traces can be combined to create a full bidirectional trace.
All non-IP traffic has been discarded and only TCP, UDP and ICMP traffic is present in each trace. Any user payload within the capture record has been zeroed.
The IP addresses in the traces have been replaced using a one-to-one mapping into the 10.0.0.0/8 address space. Each anonymised address was assigned sequentially so the first real-world address observed is mapped to 10.0.0.1, the next new address is 10.0.0.2 and so on. The mapping database was preserved across the entire trace set.
The recommended method for processing these traces is to use Libtrace, which we have developed. There are a number of tools included with libtrace such as a packet dumping utility, a trace format converter (for example, to convert to pcap), a trace splitting/filtering tool and a few statistic generators. We suggest you examine the Libtrace Wiki for more details on the Libtrace tools and the library itself.
Acknowledgements: Some of the information presented on this page has been sourced from the NLANR page about this trace, which no longer exists.
Name | Local Start Time | Duration | Total Packets | Compressed Size |
---|---|---|---|---|
20021121-200000-0 | Thu Nov 21 20:00:00 2002 | 6:00:00 | 111 million | 2,139 MB |
20021121-200000-1 | Thu Nov 21 20:00:00 2002 | 6:00:00 | 119 million | 2,398 MB |
20021122-020000-0 | Fri Nov 22 02:00:00 2002 | 6:00:00 | 42 million | 760 MB |
20021122-020000-1 | Fri Nov 22 02:00:00 2002 | 6:00:00 | 39 million | 763 MB |
20021122-080000-0 | Fri Nov 22 08:00:00 2002 | 6:00:00 | 97 million | 1,795 MB |
20021122-080000-1 | Fri Nov 22 08:00:00 2002 | 6:00:00 | 105 million | 2,010 MB |
20021122-140000-0 | Fri Nov 22 14:00:00 2002 | 6:00:00 | 117 million | 2,286 MB |
20021122-140000-1 | Fri Nov 22 14:00:00 2002 | 6:00:00 | 129 million | 2,606 MB |
20021122-200000-0 | Fri Nov 22 20:00:00 2002 | 6:00:00 | 93 million | 1,755 MB |
20021122-200000-1 | Fri Nov 22 20:00:00 2002 | 6:00:00 | 106 million | 2,026 MB |
20021123-020000-0 | Sat Nov 23 02:00:00 2002 | 6:00:00 | 44 million | 783 MB |
20021123-020000-1 | Sat Nov 23 02:00:00 2002 | 6:00:00 | 42 million | 798 MB |
20021123-080000-0 | Sat Nov 23 08:00:00 2002 | 6:00:00 | 60 million | 1,073 MB |
20021123-080000-1 | Sat Nov 23 08:00:00 2002 | 6:00:00 | 63 million | 1,176 MB |
20021123-140000-0 | Sat Nov 23 14:00:00 2002 | 6:00:00 | 83 million | 1,551 MB |
20021123-140000-1 | Sat Nov 23 14:00:00 2002 | 6:00:00 | 89 million | 1,729 MB |
20021123-200000-0 | Sat Nov 23 20:00:00 2002 | 6:00:00 | 67 million | 1,213 MB |
20021123-200000-1 | Sat Nov 23 20:00:00 2002 | 6:00:00 | 72 million | 1,345 MB |
20021124-020000-0 | Sun Nov 24 02:00:00 2002 | 6:00:00 | 43 million | 709 MB |
20021124-020000-1 | Sun Nov 24 02:00:00 2002 | 6:00:00 | 38 million | 674 MB |
20021124-080000-0 | Sun Nov 24 08:00:00 2002 | 6:00:00 | 67 million | 1,221 MB |
20021124-080000-1 | Sun Nov 24 08:00:00 2002 | 6:00:00 | 66 million | 1,276 MB |
20021124-140000-0 | Sun Nov 24 14:00:00 2002 | 6:00:00 | 108 million | 2,126 MB |
20021124-140000-1 | Sun Nov 24 14:00:00 2002 | 6:00:00 | 114 million | 2,324 MB |
20021124-200000-0 | Sun Nov 24 20:00:00 2002 | 6:00:00 | 119 million | 2,337 MB |
20021124-200000-1 | Sun Nov 24 20:00:00 2002 | 6:00:00 | 123 million | 2,548 MB |
20021125-020000-0 | Mon Nov 25 02:00:00 2002 | 6:00:00 | 51 million | 874 MB |
20021125-020000-1 | Mon Nov 25 02:00:00 2002 | 6:00:00 | 43 million | 822 MB |
20021125-080000-0 | Mon Nov 25 08:00:00 2002 | 6:00:00 | 105 million | 1,961 MB |
20021125-080000-1 | Mon Nov 25 08:00:00 2002 | 6:00:00 | 115 million | 2,240 MB |
20021125-140000-0 | Mon Nov 25 14:00:00 2002 | 6:00:00 | 155 million | 3,152 MB |
20021125-140000-1 | Mon Nov 25 14:00:00 2002 | 6:00:00 | 170 million | 3,617 MB |
20021125-200000-0 | Mon Nov 25 20:00:00 2002 | 6:00:00 | 117 million | 2,369 MB |
20021125-200000-1 | Mon Nov 25 20:00:00 2002 | 6:00:00 | 127 million | 2,697 MB |
20021126-020000-0 | Tue Nov 26 02:00:00 2002 | 6:00:00 | 45 million | 845 MB |
20021126-020000-1 | Tue Nov 26 02:00:00 2002 | 6:00:00 | 45 million | 883 MB |
20021126-080000-0 | Tue Nov 26 08:00:00 2002 | 6:00:00 | 155 million | 2,679 MB |
20021126-080000-1 | Tue Nov 26 08:00:00 2002 | 6:00:00 | 126 million | 2,617 MB |