WAND Network Research Group University of Waikato Crest Of Arms

WITS: Auckland VI

Trace Format Some traces are Legacy ATM, others are Legacy Ethernet
Volume on Disk 17 GB
Number of Traces 80
Capture Start (Local) Thu May 10 16:23:11 2001
Capture End (Local) Wed Jun 13 08:54:05 2001
Total Duration 4 Days, 14 Hours, 54 Minutes and 49 Seconds
Packets Captured 844 million
Total Traffic 345 GB
Contiguity Contiguous, aside from the single trace taken in May when the DMZ was 10Mbps
Rotation Policy 6-hourly rotation based on Midnight local time

This is a continuous 4 and a half day GPS-synchronized IP header trace taken using 3 DAG 3 cards to capture traffic simulataneous at three different points in the University of Auckland Internet infrastructure.

A router connects the ISP ATM switch to a 100 Mbps Ethernet hub (Allied Telesyn CentreCOM FH812u V2i), which is linked via the firewall to a second identical hub. The very first trace, however, was taken when the DMZ was still working at 10 Mbps utilizing two 3Com hubs instead of the Allied Telesyn types. One pair of DAG 3 ATM cards tapped the link between the ISP and the ATM switch. A DAG 3 Ethernet card was connected with its port 0 to a hub outsize DMZ and with its port 1 to a hub inside DMZ. With this configuration, the entirety of the University's Internet traffic is being monitored.

Each trace file is named using the following format: yyyymmdd-HHMMSS-[format][direction].gz. The time and date refers to the local time when the capture was started. The direction refers to which half of the link is contained within the trace. Direction 0 is traffic coming into the University and direction 1 is traffic originating from the University. The Ethernet traces have their direction prefixed with the letter 'e' to signify their capture format. The ATM traces have no such letter.

All non-IP traffic has been discarded and only TCP, UDP and ICMP traffic is present in the trace. Any user payload within the 64 byte capture record has been zeroed.

The recommended method for processing these traces is to use Libtrace, which we have developed. There are a number of tools included with libtrace such as a packet dumping utility, a trace format converter (for example, to convert to pcap), a trace splitting/filtering tool and a few statistic generators. We suggest you examine the Libtrace Wiki for more details on the Libtrace tools and the library itself.

Acknowledgements: Some of the information presented on this page has been sourced from the NLANR page about this traceset.

Name Local Start Time Duration Total Packets Compressed Size
20010510-162311-0 Thu May 10 16:23:11 2001 1:00:01 3 million 74 MB
20010510-162311-1 Thu May 10 16:23:11 2001 1:00:01 3 million 70 MB
20010510-162311-e0 Thu May 10 16:23:11 2001 1:00:01 5 million 127 MB
20010510-162311-e1 Thu May 10 16:23:11 2001 1:00:01 5 million 125 MB
20010608-185916-0 Fri Jun 8 18:59:16 2001 5:00:43 7 million 151 MB
20010608-185916-1 Fri Jun 8 18:59:16 2001 5:00:43 7 million 149 MB
20010608-185916-e0 Fri Jun 8 18:59:16 2001 5:00:43 13 million 284 MB
20010608-185916-e1 Fri Jun 8 18:59:16 2001 5:00:43 13 million 285 MB
20010609-000000-0 Sat Jun 9 00:00:00 2001 6:00:00 3 million 73 MB
20010609-000000-1 Sat Jun 9 00:00:00 2001 6:00:00 3 million 77 MB
20010609-000000-e0 Sat Jun 9 00:00:00 2001 6:00:00 6 million 145 MB
20010609-000000-e1 Sat Jun 9 00:00:00 2001 6:00:00 6 million 144 MB
20010609-060000-0 Sat Jun 9 06:00:00 2001 6:00:00 5 million 110 MB
20010609-060000-1 Sat Jun 9 06:00:00 2001 6:00:00 5 million 107 MB
20010609-060000-e0 Sat Jun 9 06:00:00 2001 6:00:00 9 million 202 MB
20010609-060000-e1 Sat Jun 9 06:00:00 2001 6:00:00 9 million 200 MB
20010609-120000-0 Sat Jun 9 12:00:00 2001 6:00:00 11 million 238 MB
20010609-120000-1 Sat Jun 9 12:00:00 2001 6:00:00 10 million 214 MB
20010609-120000-e0 Sat Jun 9 12:00:00 2001 6:00:00 18 million 394 MB
20010609-120000-e1 Sat Jun 9 12:00:00 2001 6:00:00 18 million 387 MB
20010609-180000-0 Sat Jun 9 18:00:00 2001 6:00:00 6 million 130 MB
20010609-180000-1 Sat Jun 9 18:00:00 2001 6:00:00 6 million 134 MB
20010609-180000-e0 Sat Jun 9 18:00:00 2001 6:00:00 11 million 247 MB
20010609-180000-e1 Sat Jun 9 18:00:00 2001 6:00:00 11 million 247 MB
20010610-000000-0 Sun Jun 10 00:00:00 2001 6:00:00 2 million 58 MB
20010610-000000-1 Sun Jun 10 00:00:00 2001 6:00:00 3 million 62 MB
20010610-000000-e0 Sun Jun 10 00:00:00 2001 6:00:00 5 million 109 MB
20010610-000000-e1 Sun Jun 10 00:00:00 2001 6:00:00 5 million 108 MB
20010610-060000-0 Sun Jun 10 06:00:00 2001 6:00:00 3 million 80 MB
20010610-060000-1 Sun Jun 10 06:00:00 2001 6:00:00 4 million 82 MB
20010610-060000-e0 Sun Jun 10 06:00:00 2001 6:00:00 7 million 153 MB
20010610-060000-e1 Sun Jun 10 06:00:00 2001 6:00:00 7 million 153 MB
20010610-120000-0 Sun Jun 10 12:00:00 2001 6:00:00 10 million 221 MB
20010610-120000-1 Sun Jun 10 12:00:00 2001 6:00:00 10 million 216 MB
20010610-120000-e0 Sun Jun 10 12:00:00 2001 6:00:00 18 million 402 MB
20010610-120000-e1 Sun Jun 10 12:00:00 2001 6:00:00 18 million 396 MB
20010610-180000-0 Sun Jun 10 18:00:00 2001 6:00:00 8 million 172 MB
20010610-180000-1 Sun Jun 10 18:00:00 2001 6:00:00 8 million 177 MB
20010610-180000-e0 Sun Jun 10 18:00:00 2001 6:00:00 15 million 330 MB
20010610-180000-e1 Sun Jun 10 18:00:00 2001 6:00:00 15 million 324 MB
20010611-000000-0 Mon Jun 11 00:00:00 2001 6:00:00 2 million 58 MB
20010611-000000-1 Mon Jun 11 00:00:00 2001 6:00:00 2 million 60 MB
20010611-000000-e0 Mon Jun 11 00:00:00 2001 6:00:00 5 million 107 MB
20010611-000000-e1 Mon Jun 11 00:00:00 2001 6:00:00 4 million 103 MB
20010611-060000-0 Mon Jun 11 06:00:00 2001 6:00:00 11 million 249 MB
20010611-060000-1 Mon Jun 11 06:00:00 2001 6:00:00 10 million 219 MB
20010611-060000-e0 Mon Jun 11 06:00:00 2001 6:00:00 18 million 401 MB
20010611-060000-e1 Mon Jun 11 06:00:00 2001 6:00:00 18 million 399 MB
20010611-120000-0 Mon Jun 11 12:00:00 2001 6:00:00 20 million 431 MB
20010611-120000-1 Mon Jun 11 12:00:00 2001 6:00:00 18 million 382 MB
20010611-120000-e0 Mon Jun 11 12:00:00 2001 6:00:00 31 million 711 MB
20010611-120000-e1 Mon Jun 11 12:00:00 2001 6:00:00 31 million 706 MB
20010611-180000-0 Mon Jun 11 18:00:00 2001 6:00:00 9 million 207 MB
20010611-180000-1 Mon Jun 11 18:00:00 2001 6:00:00 9 million 204 MB
20010611-180000-e0 Mon Jun 11 18:00:00 2001 6:00:00 17 million 373 MB
20010611-180000-e1 Mon Jun 11 18:00:00 2001 6:00:00 17 million 370 MB
20010612-000000-0 Tue Jun 12 00:00:00 2001 6:00:00 3 million 69 MB
20010612-000000-1 Tue Jun 12 00:00:00 2001 6:00:00 3 million 72 MB
20010612-000000-e0 Tue Jun 12 00:00:00 2001 6:00:00 6 million 134 MB
20010612-000000-e1 Tue Jun 12 00:00:00 2001 6:00:00 6 million 133 MB
20010612-060000-0 Tue Jun 12 06:00:00 2001 6:00:00 11 million 245 MB
20010612-060000-1 Tue Jun 12 06:00:00 2001 6:00:00 10 million 218 MB
20010612-060000-e0 Tue Jun 12 06:00:00 2001 6:00:00 18 million 407 MB
20010612-060000-e1 Tue Jun 12 06:00:00 2001 6:00:00 18 million 399 MB
20010612-120000-0 Tue Jun 12 12:00:00 2001 6:00:00 20 million 430 MB
20010612-120000-1 Tue Jun 12 12:00:00 2001 6:00:00 17 million 377 MB
20010612-120000-e0 Tue Jun 12 12:00:00 2001 6:00:00 31 million 710 MB
20010612-120000-e1 Tue Jun 12 12:00:00 2001 6:00:00 31 million 713 MB
20010612-180000-0 Tue Jun 12 18:00:00 2001 6:00:00 10 million 218 MB
20010612-180000-1 Tue Jun 12 18:00:00 2001 6:00:00 9 million 203 MB
20010612-180000-e0 Tue Jun 12 18:00:00 2001 6:00:00 15 million 346 MB
20010612-180000-e1 Tue Jun 12 18:00:00 2001 6:00:00 15 million 343 MB
20010613-000000-0 Wed Jun 13 00:00:00 2001 6:00:00 3 million 71 MB
20010613-000000-1 Wed Jun 13 00:00:00 2001 6:00:00 3 million 73 MB
20010613-000000-e0 Wed Jun 13 00:00:00 2001 6:00:00 6 million 134 MB
20010613-000000-e1 Wed Jun 13 00:00:00 2001 6:00:00 6 million 133 MB
20010613-060000-0 Wed Jun 13 06:00:00 2001 2:54:04 3 million 64 MB
20010613-060000-1 Wed Jun 13 06:00:00 2001 2:54:05 2 million 57 MB
20010613-060000-e0 Wed Jun 13 06:00:00 2001 2:54:04 5 million 109 MB
20010613-060000-e1 Wed Jun 13 06:00:00 2001 2:54:04 5 million 107 MB