This is a non-IMPACT record, meaning that access to the data is not controlled by IMPACT. For access, see the directions below.

Disclaimer:
This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.

Summary

DS-1160
CAIDA UCSD Network Telescope Aggregated Flow Dataset
External Dataset
UCSD - Center for Applied Internet Data Analysis
UCSD - Center for Applied Internet Data Analysis
10/01/2008
Data collection is ongoing
49 (lowest rank is 56)

Category & Restrictions

Blackhole Address Space Data
blackhole address space data, packet captures
Restricted
true

a) CAIDA has the authority and reserves the right, in its sole discretion, to discontinue further access to dataset(s) and use to Researcher at any time.

b) UCSD CAIDA Copyright.

Permission to use, print, copy, and modify any copyrightable part of this UCSD CAIDA Data for educational, research and non-profit purposes, as set forth in the Researcher MOA without fee, and without a written agreement is hereby granted, provided that this paragraph and the following copyright notice and paragraphs appear in all copies:

Copyright 2006-2016 The Regents of the University of California. All Rights Reserved.

Those desiring to incorporate any copyrightable part of this UCSD CAIDA Data into commercial products or use for commercial purposes should contact the Technology Transfer Office, University of California, San Diego, 9500 Gilman Drive, La Jolla, CA 92093-0910,Phone: (858) 534-5815, Fax: (858) 534-7345.

CAIDA USES ITS BEST EFFORTS TO PROVIDE DATA IN ACCORDANCE WITH ETHICAL PRINCIPLES AND SCIENTIFIC INTEGRITY. HOWEVER, THE DATA PROVIDED HEREIN IS ON AN "AS IS" BASIS. NEITHER CAIDA, ITS RESEARCHERS, RESEARCH PARTNERS, LICENSORS, AND DATA PROVIDERS, NOR THE UNIVERSITY OF CALIFORNIA AND ITS TRUSTEES, OFFICERS, EMPLOYEES, AND AGENTS MAKE ANY WARRANTY, EITHER IMPLIED OR EXPRESS, OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, INCLUDING, BUT NOT LIMITED TO, THE ACCURACY, TIMELINESS, COMPLETENESS, RELIABILITY, OR AVAILABILITY OF CAIDA DATA, APPLICATIONS, OR SERVICES ACCESSIBLE THROUGH OR MADE AVAILABLE BY CAIDA, OR THAT THE USE OF THE UCSD CAIDA DATA WILL NOT INFRINGE ANY PATENT, TRADEMARK OR OTHER RIGHTS.

c) Neither raw data nor any data with identifying or sensitive information in it may be copied from CAIDA servers.

d) Researcher agrees not to attempt to connect to, probe, or in any other way initiate contact with a machine or machine administrator identified or identifiable within the Data.

Description


This dataset consists of hourly files of unsolicited traffic captured by the UCSD Network Telescope traces and aggregated into the FlowTuple format.

Raw data captured by the UCSD Network Telescope are stored in huge pcap files. In order to enable more efficient data storage, processing, and analysis, these hourly pcap files are post-processed using Corsaro software to extract the most important packet header fields and aggregate data into FlowTuple files. The FlowTuple format includes eight fields: source IP address; destination IP address; source port; destination port; protocol; TCP Flags; TTL and IP length.    In the hourly FlowTuple output files, the data are broken into 60-second intervals. Within a given interval, each unique key (a unique combination of the FlowTuple fields) observed in the raw pcap data is reported on a separate line in the FlowTuple format followed by the number of packets in this interval whose header fields match this FlowTuple key. Flows are further subdivided into three FlowTuple classes: backscatter, ICMP Request and "other", and the total number of flows in each class is recorded. These data provide opportunities to study network security-related events (DDoS attacks, worms, etc.) For more information see http://www.caida.org/data/passive/telescope-flowtuple.xml
This dataset is the subject of ongoing measurement and data collection. As such the data is continuously growing. Researchers who are granted access will be able to download updates for a period of one year after their request.

Additional Details

1.5GB
Size is growing as more data is collected
false
true
ucsd, analysis, center, applied, telescope, network, dataset, aggregated, caida, 1160, flow, caida ucsd network telescope aggregated flow dataset, ucsd - center for applied internet data analysis, 2008, flowtuple, files, format, hourly, captured, traces, unsolicited, traffic, consists, fields, pcap, unique, port, flows, source, destination, interval, key, raw, header, aggregate, passive, total, blackhole, security, tcp, stored, processed, opportunities, ttl, blackhole address space data, match, length, org, efficient, broken, class, reported, corsaro, storage, xml, enable, attacks, post, protocol, output, observed, space, packets, icmp, subdivided, separate, software, huge, events, combination, ddos, flags, classes, study, request, extract, http, processing, provide, intervals, packet, includes, backscatter, worms