User login
WAND News
17
Jan
2012
Shane is having a practice for his NZNOG presentation.
G1.15, 5pm Friday 20/1/12.
09
Jan
2012
Libtrace 3.0.13 has been released. Full info can be found here.
14
Dec
2011
Libprotoident 2.0.4 has been released. More info can be found here.
01
Dec
2011
The WAND Christmas Party has been moved to the 8th of December. Be sure to update the party wiki-page if you are now able to attend the new date.
17
Nov
2011
Christmas party time is fast approaching. It will be Saturday December 3 at Richard's house.
WAND Group
WAND is a research group at the University of Waikato Computer Science Department. The group is involved with a range of computer networks projects mostly focused around network measurement. The group has a strong international reputation and has close links, including collaborative research, with several other network measurement groups. These include CAIDA, Sprint and Agilent.
Our work includes collection of very long trace sets, network analysis and software to support this, active measurement systems, wireless networks for rural communities, rapid deployment networks, OS code based network simulation and network visualisation. Spinoffs from our work include Endace and Rural Link.
WAND Interesting Blogs
09
Jan
2012
Libtrace 3.0.13 has been released!
This release adds support for OSPFv2, extending the libtrace API to allow easy access to OSPF headers, LSAs and Router Links and updating libpacketdump to decode OSPFv2 packets. This version also fixes some major bugs, including one where traces written using zlib were occasionally slightly truncated. A bug where trace_get_payload_from_ip was incorrectly calculating the number of bytes remaining has also been fixed.
There are also several other performance enhancements and minor bug fixes.
The full list of changes in this release can be found in the libtrace ChangeLog.
You can download the new version of libtrace from the libtrace website.
14
Dec
2011
Libprotoident 2.0.4 has been released today.
This release adds support for 9 new protocols (including QQLive, Paltalk and DriveShare). It also improves the rules for many existing protocols and adds a couple of new features to the lpi_live tool.
The full list of changes can be found in the libprotoident ChangeLog.
04
Oct
2011
Libprotoident 2.0.3 has been released today.
This release adds support for 13 new protocols (including RADIUS, Akamai and Youku) and 3 new categories (Logging, Printing and Translation). It also improves the rules for some existing protocols and fixes a few bugs.
The included tools have all been updated to support analysis of IPv6 traffic and also provide more options for determining the direction of analysed packets.
The full list of changes is described in the libprotoident ChangeLog.
22
Sep
2011
On the first of September this year, the New Zealand Government's Copyright Amendment Act (more colloquially known as the "Skynet law") came into effect. Briefly, the Act promises harsh penalties for Internet users who download copyrighted content illegally, culminating in the cancellation of their Internet account. This law unsurprisingly received a lot of media attention in New Zealand and there were conflicting accounts as to whether the law was having any effect on traffic levels (http://arstechnica.com/tech-policy/news/2011/09/nz-traffic-down-as-three...).
I therefore decided that this called for a quick spot of Internet measurement. I used a passive monitor that we have located inside the core network of a New Zealand ISP to capture traces of several days worth of traffic in early September. I've now started running the traces through an analysis program based on libprotoident to investigate the application protocols being used by the ISP customers, with a particular focus on P2P (which is what the Act is targeting).
The first graphs I produced turned out to be very interesting. This graph shows the inbound (i.e. originating from hosts outside the ISP's customer ranges) traffic mix for the September trace set, broken down by application category.
As a comparison, this graph shows the same traffic mix for a trace set captured from the same ISP in January this year.
We see that the proportion of traffic that is P2P (the orange segment) has decreased quite noticeably in the September dataset compared with earlier in the year. It is hard to say for certain whether this is a direct consequence of the new law, but this is a promising result nonetheless. Certainly it is enough to encourage me to start looking into this a bit further - expect more updates soon as I get more results!
12
Sep
2011
Libtrace 3.0.12 has been released.
This release adds a new tool called tracetopends which can be used to identify the endpoints that are contributing the most traffic in a trace. We've also improved the general performance of the protocol decoding code and fixed a few obscure bugs in that area as well.
The full list of changes in this release can be found in the libtrace ChangeLog.
You can download the new version of libtrace from the libtrace website.
18
Jul
2011
After a two year development hiatus, a new version of maji (our libtrace-based IPFIX meter) has finally been released.
This release adds support for encrypting IPFIX records exported using the TCP and UDP transports, fixes some bugs observed when measuring IPv6 traffic, adds new information elements for ICMPv6 and also fixes a few errors and warnings that have come about due to changes in supporting software over the past couple of years.
We would like to offer special thanks to Benjamin Black and Rong Zheng, who both contributed code towards this release of maji.
The full list of changes is described in the maji ChangeLog.
- 1 of 2
- ››
