LBNL-FTP-PKT

Description

The traces released here contain all incoming anonymous FTP connections (i.e. to port 21) to public FTP servers at the Lawrence Berkeley National Laboratory during a ten-day period.

Format

The traces are in tcpdump format.

Measurement

The trace ran from Jan 10-19, 2003, containing 22 thousand connections and 3.2 million packets. The connections are between 320 distinct servers and 5832 distinct clients.

Privacy

The traces have been "sanitized" using Bro anonymizer to remove private information, such as passwords and remote client identity.
The description of the tool can be found in the publication below, and the detailed anonymization scheme is described here.

Acknowledgements

The traces were made by Ruoming Pang (rpang@cs.princeton.edu) and Vern Paxson (vern@ee.lbl.gov). In publications, please include an appropriate citation to the paper mentioned below.

Publications

The effort of anonymizing these traces is described in the paper:
Ruoming Pang, Vern Paxson. A High-level Programming Environment for Packet Trace Anonymization and Transformation . To appear in ACM SIGCOMM 2003, Karlsruhe, Germany.

Restrictions

The traces may be freely redistributed.

Distribution

Available from the Archive as

1. 16 separate trace files, each spanning either approximately a day (e.g., lbnl.anon-ftp.03-01-10 spans January 10, 2003) or in a pair spanning a day (e.g., lbnl.anon-ftp.03-01-12A and lbnl.anon-ftp.03-01-12B together span January 12, 2003, with the 'A' trace being followed after a short gap by the 'B' trace):
   lbnl.anon-ftp.03-01-10
   lbnl.anon-ftp.03-01-11
   lbnl.anon-ftp.03-01-12A
   lbnl.anon-ftp.03-01-12B
   lbnl.anon-ftp.03-01-13A
   lbnl.anon-ftp.03-01-13B
   lbnl.anon-ftp.03-01-14
   lbnl.anon-ftp.03-01-15A
   lbnl.anon-ftp.03-01-15B
   lbnl.anon-ftp.03-01-16A
   lbnl.anon-ftp.03-01-16B
   lbnl.anon-ftp.03-01-17A
   lbnl.anon-ftp.03-01-17B
   lbnl.anon-ftp.03-01-18
   lbnl.anon-ftp.03-01-19A
   lbnl.anon-ftp.03-01-19B
   
   
2. One glued-together trace file (which has some gaps, as the traces don't quite overlap): lbnl.anon-ftp.Jan10-19.2003 (84 MB; 310 MB uncompressed).