LinuxSA Mailing list archives

  From: Alan Kennington <akenning@dog.topology.org>
  To  : LinuxSA <linuxsa@linuxsa.org.au>
  Date: Wed, 2 Feb 2000 04:55:34 +1030

request for tcpdump log samples

Could someone with heavy-ish traffic on
their Internet access link please send me
a tcpdump log file?

I realise that this could possibly comprimise
security/privacy. So I would be happy to just
send you my log file analysis program to
run on the log file, so that you could just
send me the PostScript file outputs.
Alternatively, a command such as

tcpdump -c 100000 -i ppp0 -s 58 -o log0.dat

should be fairly safe.
(14 bytes for each pseudo-ethernet header,
and 44 bytes for the IP and TCP|UDP headers.)
Safer woudl be "-s 54" to avoid getting any
TCP payload ever. Or "-s 42" to avoid even getting
any UDP payload, but still saving the port
numbers.

Motiviation:
My purpose is to try to understand
how bursty Internet access traffic is
nowadays,a dn to try to extrapolate this.
In the future, I think that Internet
access traffic is likely to become less
bursty - i.e. it may become a continuous flow
of multi-media traffic.

Since linux users are more likely to have
a real live connection to the real internet,
particularly in the server role, it is
natural to seek this kind of log file
from linux users.

The more busy the site, the more I would
like to have log files.

many thanks in advance for any positive responses.

Cheers,
Alan Kennington.
--------------------------------------------------------------------
   name: Dr. Alan Kennington
 e-mail: akenning@dog.topology.org
website: http://topology.org/
   city: Adelaide, South Australia
 coords: 34.89744 S, 138.58970 E
 mobile: +61 417 881 823
pgp-key: http://topology.org/key_ak2.asc
company: Topology Technology Australia Pty. Ltd.
    ACN: 090 599 152
website: http://topoz.com/
saying1: `The Internet is the parliament of the people.' ak 28/5/1999.
saying2: `Seek truth from facts.' mao or deng, 1970s?
saying3: `Let a 1000 flowers bloom, let a 1000 schools contend.' mao, 1970s?
saying4: `Cut down the tall poppies.' mao, a few months later.
saying5: `Life is 99% overheads.' ak 7/12/1999.