LBNL-FTP-PKT

Description
The traces released here contain all incoming anonymous FTP connections (i.e. to port 21) to public FTP servers at the Lawrence Berkeley National Laboratory during a ten-day period.
Format
The traces are in tcpdump format.
Measurement
The trace ran from Jan 10-19, 2003, containing 22 thousand connections and 3.2 million packets. The connections are between 320 distinct servers and 5832 distinct clients.
Privacy
The traces have been "sanitized" using Bro anonymizer to remove private information, such as passwords and remote client identity.
The description of the tool can be found in the publication below, and the detailed anonymization scheme is described here.
Acknowledgements
The traces were made by Ruoming Pang (rpang@cs.princeton.edu) and Vern Paxson (vern@ee.lbl.gov). In publications, please include an appropriate citation to the paper mentioned below.
Publications
The effort of anonymizing these traces is described in the paper:
Ruoming Pang, Vern Paxson. A High-level Programming Environment for Packet Trace Anonymization and Transformation . To appear in ACM SIGCOMM 2003, Karlsruhe, Germany.
Restrictions
The traces may be freely redistributed.
Distribution
Available from the Archive as
  1. 16 separate trace files, each spanning either approximately a day (e.g., lbnl.anon-ftp.03-01-10 spans January 10, 2003) or in a pair spanning a day (e.g., lbnl.anon-ftp.03-01-12A and lbnl.anon-ftp.03-01-12B together span January 12, 2003, with the 'A' trace being followed after a short gap by the 'B' trace):
    lbnl.anon-ftp.03-01-10
    lbnl.anon-ftp.03-01-11
    lbnl.anon-ftp.03-01-12A
    lbnl.anon-ftp.03-01-12B
    lbnl.anon-ftp.03-01-13A
    lbnl.anon-ftp.03-01-13B
    lbnl.anon-ftp.03-01-14
    lbnl.anon-ftp.03-01-15A
    lbnl.anon-ftp.03-01-15B
    lbnl.anon-ftp.03-01-16A
    lbnl.anon-ftp.03-01-16B
    lbnl.anon-ftp.03-01-17A
    lbnl.anon-ftp.03-01-17B
    lbnl.anon-ftp.03-01-18
    lbnl.anon-ftp.03-01-19A
    lbnl.anon-ftp.03-01-19B

  2. One glued-together trace file (which has some gaps, as the traces don't quite overlap): lbnl.anon-ftp.Jan10-19.2003 (84 MB; 310 MB uncompressed).


Up to Traces In The Internet Traffic Archive.