..:: Traffic and Tools ::..

This page contains traffic traces and time series from real networks captured using Plab.

Right-click on the links (and choose "Save as.." or similar) to download the files.

Traffic Traces

The link observed is a link at 200Mbps connecting the University of Napoli "Federico II" network to the rest of the Internet.

These traces are in tcpdump format. Packet lenghts are variable because, for each packet, we stored full TCP headers including optional headers (e.g. MSS). Because of privacy concerns, IP addresses have been replaced preserving network membership.
These traces constitute a subset of many traces we started collecting since year 2004. If you find the available traces useful and you are interested in obtaining more traces of the same kind, please contact us. We're in the process of adding much more data.

TCP port 80 traffic traces

Description:

This is traffic related to TCP port 80 generated by clients inside the network of University of Napoli, Federico II - UNINA - reaching the outside world (i.e. src host from UNINA and dst port tcp 80 OR dst host from UNINA and src port tcp 80).

Trace 1 14th June 2004 11:00-12:00, 312 MB gzip compressed

Trace 2 14th June 2004 12:00-13:00, 357 MB gzip compressed

Trace 3 14th June 2004 13:00-14:00, 315 MB gzip compressed

TCP port 25 traffic Traces

Description:

This is traffic related to TCP port 25 generated by clients inside the network of University of Napoli, Federico II - UNINA - reaching the outside world (i.e. src host from UNINA and dst port tcp 25 OR dst host from UNINA and src port tcp 25).

Trace 1 5th September 2005, 11:00-12:00 - 27 MB gzip compressed

Trace 2 5th September 2005, 12:00-13:00 - 26 MB gzip compressed

Trace 3 5th September 2005, 13:00-14:00 - 16 MB gzip compressed

TCP port 110 traffic traces

Description:

Soon available...

TCP 143 traffic traces

Description:

Soon available...

MSN Messenger traffic traces and time series (TCP port 1863)

The following archives contain both packet-level traffic traces and the corresponding (packet size and inter-packet time) time series. They were passively captured during the last week of April 2006. The archives contain both outbound and inbound data related to MSN switchboard traffic.

traffictrace: MSNtraffictraces (right click for download)

datafile: MSNtimeseries

Time Series for Anomaly Detection

The following file is a Matlab data file. It contains 3 time series, representing the packet rate of 3 different traffic traces, related to inbound traffic of the UNINA Network. The traces were collected in year 2004. The packet rate was sampled with a period of 2 seconds and each trace lasts 2 hours. These data have been used for studies on volume-based anomaly detection and are related to time intervals during which no anomalies were observed on the UNINA network by the NOC operators. In other words, they can be considered anomaly-free.

datafile: traces_clean.unina.mat

Licence, terms and conditions: the data sets are free to use as long as you acknowledge the source of the traffic traces.

If you are interested in collaborating with us, please send an e-mail to e-mail

Ack: Francesco Palmieri (CSI). He gave us the possibility to sniff/manage/hear anonymized traffic.