Libtrace: a packet capture and analysis library

Authors:
Shane Alcock;Perry Lorier;Richard Nelson
Affiliations:
University of Waikato, Hamilton, New Zealand;University of Waikato, Hamilton, New Zealand;University of Waikato, Hamilton, New Zealand
Venue:
ACM SIGCOMM Computer Communication Review
Year:
2012

Citing 3
Cited 1

Bro: a system for detecting network intruders in real-time

Computer Networks: The International Journal of Computer and Telecommunications Networking
A brief history of scanning

Proceedings of the 7th ACM SIGCOMM conference on Internet measurement
Review: Passive internet measurement: Overview and guidelines based on experiences

Computer Communications

Measuring the impact of the copyright amendment act on New Zealand residential DSL users

Proceedings of the 2012 ACM conference on Internet measurement conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper introduces libtrace, an open-source software library for reading and writing network packet traces. Libtrace offers performance and usability enhancements compared to other libraries that are currently used. We describe the main features of libtrace and demonstrate how the libtrace programming API enables users to easily develop portable trace analysis tools without needing to consider the details of the capture format, file compression or intermediate protocol headers. We compare the performance of libtrace against other trace processing libraries to show that libtrace offers the best compromise between development effort and program run time. As a result, we conclude that libtrace is a valuable contribution to the passive measurement community that will aid the development of better and more reliable trace analysis and network monitoring tools.