Libtrace

Abstract

a c m s i g c o m m ABSTRACTThis paper introduces libtrace, an open-source software library for reading and writing network packet traces. Libtrace offers performance and usability enhancements compared to other libraries that are currently used. We describe the main features of libtrace and demonstrate how the libtrace programming API enables users to easily develop portable trace analysis tools without needing to consider the details of the capture format, file compression or intermediate protocol headers. We compare the performance of libtrace against other trace processing libraries to show that libtrace offers the best compromise between development effort and program run time. As a result, we conclude that libtrace is a valuable contribution to the passive measurement community that will aid the development of better and more reliable trace analysis and network monitoring tools.

PD-PAn: Prefix- and Distribution-Preserving Internet of Things Traffic Anonymization

“…Crypto-PAn [5] proposed by Fan et al is a prefix-preserving IP anonymization algorithms based on cryptography. It has been deployed, implemented, or extended by a wide range of NTA tools and services including CoralReef [32], FLAIM [33], NFDump [34], TCPmkpub [35], PktAnon [36], Libtrace [37], etc.…”

A cognitive QoS management framework for WLANs

“…The parameters that characterize the interference are the following: COD of the interference, interference TxRate, and interference frequency channel. All parameters are obtainable using the monitor mode of IEEE 802.11 interfaces [24] and packet tracing applications like libtrace [26] and tcpdump [27]. Extension to all Wi-Fi channels is feasible by periodic monitoring of all channels or by exploiting more WLAN interfaces at different locations of the network each operating on a single channel.…”

“…The interfaces are brought up to the monitor mode of the IEEE 802.11 standard [24] to accept all ongoing detectable packets. A packet sniffer application [26] is then executed to capture all packets. The radio tap header [24] of every received packet provides crucial physical and link layer parameters such as the RSSI, packet length, and transmission rate of the packet.…”

Operation algorithms for energy-efficient backbone networks

“…The selected traffic trace was a continuous 10 days capture of residential DSL customer traffic from a New Zealand ISP (ISPDSL-1). The traffic trace was processed with the libtrace tool [209] to sample and split the traffic in 5 minute intervals, while measuring the average load in Mbps. Through this procedure eight traffic patterns were exported and were used to describe the load of a traffic demand for a 24 hour period.…”

“…The traffic demands were produced the same way as in [207]. Each traffic demand was constructed by traffic traces, which were captured from real DSL customer traffic of a New Zealand ISP [208] and then sampled with the libtrace tool [209] into 5 minute intervals. Each traffic demand randomly selected one of the produced samples, which were then multiplied by a randomized scale factor that was uniformly distributed between 0.2 and 1.2 to render each demand unique.…”