Item

Libtrace: A packet capture and analysis library

Abstract
This paper introduces libtrace, an open-source software library for reading and writing network packet traces. Libtrace offers performance and usability enhancements compared to other libraries that are currently used. We describe the main features of libtrace and demonstrate how the libtrace programming API enables users to easily develop portable trace analysis tools without needing to consider the details of the capture format, file compression or intermediate protocol headers. We compare the performance of libtrace against other trace processing libraries to show that libtrace offers the best compromise between development effort and program run time. As a result, we conclude that libtrace is a valuable contribution to the passive measurement community that will aid the development of better and more reliable trace analysis and network monitoring tools.
Type
Journal Article
Type of thesis
Series
Citation
Alcock, S., Lorier, P. & Nelson, R. (2012). Libtrace: A packet capture and analysis library. ACM SIGCOMM Computer Communication Review, 42(2), 42-48.
Date
2012
Publisher
ACM
Degree
Supervisors
Rights