tcpdump based traffic analysis package, Ebone Action Team eat@localhost, dante-routing@localhost

[Olivier Martin <]

A new  IP traffic analysis  package based  on tcpdump is  available via
anonymous ftp from dxcoms.cern.ch in directory: pub/ip-stats

The  package was  developed  by Cecile  Martel  from Eurecom  Institute
(Sophia  Antipolis -  France) while  she was  carrying out  her end  of
studies diploma work at CERN.

The package,  a set of perl  scripts and a modified  version of tcpdump
allowing to  specify the sampling  rate, has been successfully  used in
the  Cern  Internet eXchange  Point  (CIXP)  environment to  study  the
distribution  of IP  traffic  on  a TCP/UDP  port  basis over  extended
periods  of time  and is  also very  well suited  to study  the traffic
exchanged between network providers connected to the same IXP.

Here is the content of the README file:
---------------------------------------

This package contains programs developped for an IP traffic study
conducted at CERN (European Laboratory for Particle Physics, Geneva,
Switzerland) during the first six month of 1994.

CONTENTS:

doc/     Documentation

  + uguide.ps, uguide.tex
    User's guide for the programs in the perl/ directory.
    The postscript file can be obtained by running LaTeX two times
    on uguide.tex.

  + rapport.ps, rapport.tar
    Complete report of CERN IP traffic study, in french.
    The postscript file can be obtained by restoring the LaTeX files
    (tar xvf rapport.tar) and then running LaTeX two times on file
    main.tex

+ slides.tar
    Slides used for presentations. Some of them in french, others in
    english.


perl/ traffic analysis programs, in perl

+ SUMMARY.ENGL, SUMMARY.FR
    Brief explanation of each perl programm usage, in english and in
    french.

  + get_traf.pl, get_traf2.pl, get_n_pack.pl, get_n_pack2.pl,
    red_data.pl, red_data2.pl, red_data3.pl, red_data4.pl,
    red_data5.pl, red_data6.pl, ana_in_out.pl, ana_proto.pl,
    ana_top.pl, ana_top_src.pl, transip.pl
    Traffic analysis programs which use the output of tcpdump
    to compute traffic statistics.
    To be run by perl (the version was 4.036)

  + nameserv.tar.Z
    Small package written at CERN optimising acces to the nameservice,
    needed by transip.pl.


tcpdump/ prints out the headers of packets on a network interface

  + tcpdump-2.2.1.tar.Z
    tcpdump package

  + Stcpdump.tar
    modified version of tcpdump that allows sampling of packets.

Olivier H. Martin - CERN - Computing and Networks Division
Phone: +41-22-767-4894     Fax: +41-22-767-9085/9140