Citation Context

...et data file format (pcap) which has become a de facto industry standard. Several network analyzer tools are built on top of libpcap, such as the Ethereal [7] protocol analyzer and NeTraMet (RFC 2722 =-=[5]-=- and RFC 2724 [8]), which are geared toward long term collection for metering and billing. Other network analysis tools include the MEHARI [12] ATM/IP analysis system; Narus [16] for long-term workloa...

Citation Context

...er) devices. The tcpdump tool also has a packet data file format (pcap) which has become a de facto industry standard. Several network analyzer tools are built on top of libpcap, such as the Ethereal =-=[7]-=- protocol analyzer and NeTraMet (RFC 2722 [5] and RFC 2724 [8]), which are geared toward long term collection for metering and billing. Other network analysis tools include the MEHARI [12] ATM/IP anal...

Citation Context

...with existing libpcap tools • parse_bgp_dump: converts Cisco router ‘‘sho ip bgp’’ output to the routing table format used by t2_ASmatrix, t2_report, and crl_bycountry • parse_bgp_mrtd: converts MRTd =-=[15]-=- output to the routing table format used by t2_ASmatrix, t2_report, and crl_bycountry Libraries • libcoral: reads trace files and live network interfaces, and provides common functionality for all crl...

Citation Context

...le enough for rapid in-house customization. Existing passive data collection tools are typically narrow in scope, designed for specific tasks from packet capture (tcpdump [9]) to accounting (NeTraMet =-=[4]-=-). In response, CAIDA has created the CoralReef suite designed to provide network administrators and researchers with a consistent interface for a wide range of network analysis applications, from raw...

Citation Context

...at (pcap) which has become a de facto industry standard. Several network analyzer tools are built on top of libpcap, such as the Ethereal [7] protocol analyzer and NeTraMet (RFC 2722 [5] and RFC 2724 =-=[8]-=-), which are geared toward long term collection for metering and billing. Other network analysis tools include the MEHARI [12] ATM/IP analysis system; Narus [16] for long-term workload and billing; th...

Citation Context

...mit them. Because of high variability in these kinds of measurements, larger intervals are usually more useful. In this example, we used a five minute interval. To limit the measured traffic to KaZaA =-=[10]-=-, we used a BPF filter to match only traffic to or from KaZaA’s well-known port (1214). In the first of the two intervals shown, there were about 1.33 Gigabytes of KaZaA traffic, or 35.5 Megabits per ...

Citation Context

...libraries, device drivers, classes, and applications written in, and for use with, several programming languages. The overall architecture and programming interfaces are described in a separate paper =-=[11]-=- and are not covered here. Figure 1 shows an overview of the relationships between 2001 LISA XV – December 2-7, 2001 – San Diego, CA 133The CoralReef Software Suite ... Moore, Keys, Koga, Lagache, an...

Citation Context

...the Ethereal [7] protocol analyzer and NeTraMet (RFC 2722 [5] and RFC 2724 [8]), which are geared toward long term collection for metering and billing. Other network analysis tools include the MEHARI =-=[12]-=- ATM/IP analysis system; Narus [16] for long-term workload and billing; the DAG ATM/POS capture cards and software [19] by the WAND group at the University of Waikato, New Zealand; Clevertool’s netboy...

Citation Context

...selves. t2_report uses a library called ASFinder and a routing table, as output by parse_bgp_*, to map IP addresses to AS numbers. To get countries and AS names from AS numbers, t2_report uses NetGeo =-=[14]-=-. Application names are found by the AppPorts library, which uses a prioritized ruleset to map protocol and port numbers to applications. Users can add or modify application rules by editing a simple ...

Citation Context

... is a Perl application, using C backends for speed, which receives (via a pipe) either live data or traces taken from crl_flow. t2_report collects and displays timeseries information by using RRDtool =-=[18]-=-. The report generator utilizes many of the features of the CoralReef suite and thus illustrates some of the capabilities of the suite. At configurable intervals (e.g., every five minutes), t2_report ...