Skip to Content
[CAIDA - Cooperative Association for Internet Data Analysis logo]
The Cooperative Association for Internet Data Analysis > tools : measurement
CAIDA Measurement and Analysis Tools
CAIDA offers several tools for actively or passively measuring Internet traffic and flow patterns:
  • AutoFocus
    AutoFocus is a traffic analysis and visualization tool that describes the traffic mix of a link through textual reports and time series plots.
  • Beluga
    Beluga provides a real-time graph of RTTs and packet loss to an end host, showing both total round trip time and per-hop round trip time. It also shows a historical statistical breakdown of RTTs, to allow trend analysis.
  • Corsaro
    Corsaro is a software suite for performing large-scale analysis of trace data. It was specifically designed to be used with passive traces captured by darknets, but the overall structure is generic enough to be used with any type of passive trace data.
  • cflowd
    cflowd is a flow analysis tool currently used for analyzing Cisco's NetFlow enabled switching method. The current release (described below) includes the collections, storage, and basic analysis modules for cflowd and for arts++ libraries. This analysis package permits data collection and analysis by ISPs and network engineers in support of capacity planning, trends analysis, and characterization of workloads in a network service provider environment. Other areas where cflowd may prove useful include usage tracking for Web hosting, accounting and billing, network planning and analysis, network monitoring, developing user profiles, data warehousing and mining, as well as security-related investigations.
  • CoralReef
    CoralReef is a comprehensive software suite developed by CAIDA to collect and analyze data from passive Internet traffic monitors, in real time or from trace files. Realtime monitoring support includes system network interfaces (via libpcap), FreeBSD drivers for Apptel POINT (OC12 and OC3 ATM) and FORE ATM (OC3 ATM) cards, and support for Linux and FreeBSD drivers for Endace DAG (OC3 and OC12, POS and ATM) cards. The package also includes programming APIs for C and perl, and applications for capture, analysis, and web report generation. This package is maintained by CAIDA developers with the support and collaboration of the Internet measurement community. CoralReef is the evolutionary successor of the Coral package and supersedes it.
  • iatmon
    iatmon (Inter-Arrival Time Monitor) is a measurement and analysis tool that allows one to separate one-way traffic into clearly-defined subsets.
  • iffinder
    The Skitter project discovers IP interfaces and how they're connected. To make these data more useful, we must also discover which of these interfaces belong to the same router. Iffinder, developed by Ken Keys at CAIDA, is a tool that attempts to do this.
    Creating accurate maps of Internet topology requires not just discovering how interfaces are connected, but also which interfaces belong to the same router, a process called IP alias resolution. MIDAR (Monotonic ID-based Alias Resolution) is one tool for doing this.
  • Motu
    Motu is a tool for dealiasing pairs of IPv4 addresses. It is based on the IP Prespecified Timestamp dealiasing method described in "Resolving IP Aliases with Prespecified Timestamps", Sherry et al., IMC'10.
  • NeTraMet
    NeTraMet is an open-source (GPL) implementation of the RTFM architecture for Network Traffic Flow Measurement, developed and supported by Nevil Brownlee at the University of Auckland. Nevil also developed a version of NeTraMet which uses the CoralReef library to read packet headers. This 'CoralReef NeTraMet meter' can work with any CoralReef data source; it has been tested on both CAIDA and NLANR trace files, and on DAG and Apptel ATM interface cards.
  • mper
    mper is a probing engine that clients can use to conduct network measurements using ICMP, UDP, and TCP probes.
  • rb-mperio
    rb-mperio is a RubyGem client programming library for writing network measurement scripts in Ruby that use the mper probing engine.
  • RTG
    RTG is a flexible, scalable, high-performance SNMP statistics monitoring system. It is designed for enterprises and service providers who need to collect time-series SNMP data from a large number of targets quickly.
  • scamper
    Like its predecessor skitter, scamper is a tool that actively probes the Internet in order to analyze topology and performance. Unlike skitter, scamper supports both IPv6 and IPv4 path probing. It can also discover the maximum transmission unit (MTU) of a given path. Eventual deployment of scamper monitors will extend CAIDA's Macroscopic Topology Project to cover the growing IPv6 topology.
  • skitter
    skitter is a tool for actively probing the Internet in order to analyze topology and performance.
  Last Modified: Tue Oct-23-2012 11:40:05 PDT
  Page URL: