![[CAIDA - Center for Applied Internet Data Analysis logo]](/images/caida_globe_faded.png "Go to CAIDA home page")
The CAIDA Tools site contains a variety of internet measurement and visualization software as well as a taxonomy of available research and visualization tools.
CAIDA Supported Tools
The overview table below list CAIDA supported tools and software.
The colored header in the table below indicates the field(s) the table is being sorted by. Click the header to change or toggle sorting order, and Shift+click headers to sort by multiple fields.
The rows are colored by the Category of tool they belong to: Geographic tools | Library tools | Performance tools | Plotting and Data Curation tools | Security tools | Topology tools | Workload tools
| Name | Primary Author | Description | Release Date | Year Last Updated | Category | Input | Output | Licensing |
|---|---|---|---|---|---|---|---|---|
| Autofocus (download) | Cristian Estan | Internet traffic reports and time-series graphs | 2003 | 2003 | Workload: Visualization | NetFlow data, pcap | text reports, time series plots | Research-use License |
| Beluga (email request) | Ryan Koga | Interactive frontend to traceroute data | 2002 | 2006 | Performance: Visualization | IP destination | interactive traceroute | Research-use License |
| Chart:Graph (download) | David Moore | Perl front-end to GNU plot and Xmgrace | 2006 | 2013 | Library: Plotting | N/A | 2D plots | GNU GPL v2 |
| CoralReef (download) | Ken Keys | Measures and analyzes passive Internet traffic monitor data | 2000 | 2014 | Workload: Measurement Analysis | live network interfaces; DAG capture cards; DAG, libpcap, and CoralReef packet traces | text reports, traffic reports, CoralReef data files | Research-use License |
| Corsaro (download) | Alistair King | Extensible framework for large-scale analysis of passive trace data | 2012 | 2014 | Workload: Measurement Analysis | Passive trace data (pcap, live interface, etc) | machine-parseable text, Corsaro binary data files | GNU GPL v3+ |
| Cuttlefish (download) | Bradley Huffaker | Produces animated graphs showing diurnal and geographical patterns | 2006 | 2006 | Geographic: Visualization | Cuttlefish input file | time series graphic (animated GIF) | GNU GPL v2 |
| dnsstat (download) | Ken Keys | DNS traffic measurement utility | 1999 | 2006 | Workload: DNS Statistics | pcap, monitors DNS queries on UDP Port 53 | text report (example available) | Research-use License |
| iatmon (download) | Nevil Brownlee | Ruby+C+libtrace analysis module that separates one-way traffic into clearly-defined subsets | 2012 | 2014 | Workload: Measurement Analysis | Network trace files, or a live network interface | text report (matrices, distributions and vectors as statistics of the one-way traffic) | GNU GPL v3 |
| iffinder (download) | Ken Keys | Discovers IPv4 addresses belonging to the same router (aliases) using the common source technique | 2001 | 2012 | Topology: Alias Resolution | IP addresses | text file (candidate alias pairs) | Research-use License |
| kapar (download) | Ken Keys | Graph-based IP alias resolution | 2011 | 2018 | Topology: Alias Resolution | scamper "warts" traces, iPlane traces, text files | alias and link text files | GNU GPL v2+ |
| LibSea (download) | Young Hyun | Scalable graph file format and graph library | 2000 | 2002 | Library: Topology | LibSea graph format files | N/A | GNU Lesser GPL |
| Periscope Looking Glass API (Request account) | Vasileios Giotsas | API to unify Looking Glass server queries and standardize output | 2015 | 2016 | Library: Middleware | JSON-encoded API request | JSON, iplane format, raw text format | Research-use License |
| Marinda (download) | Young Hyun | A distributed tuple space implementation | 2015 | 2015 | Library: Middleware | N/A | N/A | GNU GPL v3 |
| rb-mperio (download) | Young Hyun | RubyGem for writing network measurement scripts in Ruby that use the mper probing engine | 2011 | 2013 | Library: Topology Measurement | N/A | N/A | GNU GPL v2+ |
| arkutil (download) | Young Hyun | RubyGem containing utility classes used by the Archipelago measurement infrastructure and the MIDAR alias-resolution system. | 2012 | 2013 | Library: Topology | N/A | N/A | GNU GPL v2+ |
| DBATS (download) | Ken Keys | High performance time series database engine optimized for inserting/updating values for many series simultaneously | 2016 | 2016 | Library: Database | time series data | time series data | GNU GPL v2+ |
| libtimeseries (github) | Alistair King | C library that provides a high-performance abstraction layer for efficiently writing to time series databases | 2016 | 2019 | Library: Database | time series data | time series data | BSD 2-Clause |
| MIDAR (download) | Ken Keys and Young Hyun | Identifies IPv4 addresses belonging to the same router (aliases) using shared monotonic IP ID counters | 2011 | 2018 | Topology: Alias Resolution | traceroute data or list of addresses | alias sets (router addresses) | GNU GPL v2+ |
| Motu (download) | Alistair King | Dealiases pairs of IPv4 addresses | 2011 | 2011 | Topology: Alias Resolution | text input (candidate alias pairs) | text report and machine-parseable results | GNU GPL v2+ |
| mper (download) | Young Hyun | Probing engine for conducting network measurements with ICMP, UDP, and TCP probes | 2011 | 2012 | Topology and Performance Measurement | N/A | N/A | GNU GPL v2+ |
| Otter (download) | Bradley Huffaker | Visualizes arbitrary network data | 1998 | 2003 | Topology: Visualization | Otter data file | interactive 2D graph, PDF | GNU GPL v2 |
| plot-latlong (download) | Young Hyun | Plots points on geographic maps | 2003 | 2005 | Geographic | text input (latitude/longitude pair) | geographical plot | Research-use License |
| PlotPaths (download) | Bradley Huffaker | Displays forward traceroute path data | 2001 | 2002 | Topology: Visualization | text input files (paths file, nodes file) | Otter data file | Research-use License |
| RouterToAsAssignment (download) | Ken Keys | Assigns each router from a router-level graph of the Internet to its Autonomous System (AS) | 2010 | 2010 | Topology | output from ITDK | text report (router to AS report) | Research-use License |
| straightenRV (download) | Patrick Verkaik | Parses and processes Route Views tables for ease of analysis | 2002 | 2009 | Topology: Data Analysis | statistics | text report (e.g., prefix to AS maps, AS paths, etc), machine-parseable data file | Research-use License |
| BGPstream (download) | Alistair King | Open-source software framework for live and historical BGP data analysis, supporting scientific research, operational monitoring, and post-event analysis. | 2015 | 2019 | Topology: Data Analysis | BGP measurement data (e.g., MRT) | ASCII, C API, Python API | GNU GPL v2 |
| topostats (download) | Young Hyun | Computes various statistics on network topologies | 2010 | 2010 | Topology | text input (e.g., AS link pairs) | text report, no graphs | GNU GPL v3 |
| Walrus (download) | Young Hyun | Visualizes large graphs in three-dimensional space | 2001 | 2005 | Topology: Visualization | LibSea graph format files | interactive 3D graph | GNU GPL v2 |
| scamper (download) | Matthew Luckie | IPv6 and IPv4 active traceroute probing and ping | 2004 | 2019 | Topology and Performance Measurement | IP destinations | text reports, "warts" binary file | GNU GPL v2 |
| Hyperbolic Graph Generator (download) | Chiara Orsini | A set of tools to generate synthetic graphs embedded into a hyperbolic space and to test the greedy routing | 2014 | 2014 | Topology and Performance Measurement | hyperbolic graph parameters | hyperbolic in a text file | GNU GPL v3 |
| AStraceroute (in development) | Chiara Orsini | A Python tool that translates traceroutes into AS paths | 2016 | 2016 | Topology | JSON-encoded traceroute measurements | JSON (AS paths) | GNU GPL v3 |
| Henya (request account) | Young Hyun | Large-scale Internet topology query system which provides remote search of traceroute data without requiring data downloads | 2016 | 2016 | Topology | IP destination | web report, JSON | GNU GPL v3 |
| Vela (request account) | Young Hyun | On-demand topology measurement service of CAIDA's Archipelago Measurement Infrastructure | 2012 | 2017 | Topology | web interface | HTML and graph reports | GNU GPL v3+ |
| Spoofer (download) | Ken Keys, Ryan Koga, and Robert Beverly | Source address validation measurement program that measures susceptibility to spoofed source address IP packets | 2005 | 2019 | Security | N/A | text report, HTML report | GNU GPL v3+ |
| ARTEMIS (download) | Vasileios Kotronis | Defense approach versus BGP prefix hijacking attacks | 2018 | 2019 | Security | configuration file with BGP prefixes announced by the AS | alerts, web interface | BSD 3-Clause |
Unsupported Tools
The following tools are no longer in development and/or not (any longer) supported by CAIDA. Note that while CAIDA provides no technical support for these tools, some are active and still in use. Others are labeled with a deprecated status, and are listed here for historical and archival purposes.
The colored header in the table below indicates the field(s) the table is being sorted by. Click the header to change or toggle sorting order, and Shift+click headers to sort by multiple fields.
The rows are colored by the Category of tool they belong to: Geographic tools | Library tools | Performance tools | Plotting and Data Curation tools | Security tools | Topology tools | Workload tools
| Name | Primary Author | Description | Status | Release Date | Year Last Updated | Category | Input | Output | Licensing |
|---|---|---|---|---|---|---|---|---|---|
| cflowd (download) | Daniel McRobb | Former NetFlow analysis tool | Deprecated | 1998 | 2000 | Topology and Performance Measurement | Netflow data in arts format | text reports | GNU GPL v2 |
| GeoPlot (download) | Ram Periakaruppan | Geographically plots nodes and links | Deprecated | 1999 | 1999 | Topology: Visualization | text input (latitude/longitude pair) | geographical plot | Research-use License |
| GTrace (download) | Ram Periakaruppan | Geographical front-end to traceroute | Deprecated | 1999 | 1999 | Topology: Visualization | URL to trace | geographical plot | Research-use License |
| MapNet (download) | Bradley Huffaker | Historical visualization of international backbone providers | Deprecated | 1997 | 2002 | Topology: Visualization | N/A | geographical plot | GNU GPL v2 |
| NetGeo (download) | Bradley Huffaker | Maps IPs and AS numbers to geographical locations | Deprecated | 1999 | 1999 | Geographic: Data | IP address / URL | text report | Research-use License |
| NeTraMet (download) | Nevil Brownlee | Realtime traffic flow measurement. | Deprecated | 2003 | 2007 | Workload: Measurement Analysis | pcap | time series graphs | GNU GPL v2 |
| Plankton (download) | Bradley Huffaker | Historical visualization of international cache topology | Deprecated | 1998 | 1998 | Topology: Visualization | text input | graph | GNU GPL v2 |
| skitter (not available for download) | Daniel McRobb | Reads in destinations and outputs traceroute paths | Deprecated by Archipelago | 1998 | 2008 | Topology: Measurement | skitter data files | geographical plot, graph | Research-use License |
| RRDtool (download) | Tobi Oetiker | Stores and displays time-series data, configurable graphs | In use but not supported by CAIDA | 1999 | 2006 | Plotting and Data Curation | time series data | time series graphs | GNU GPL v2 |
| FlowScan (download) | Dave Plonka | Graphs IP flow data for a view of network border traffic | In use but not supported by CAIDA | 2001 | 2004 | Workload: Analysis Visualization | NetFlow data | graph (example available) | GNU GPL v2 |
| dnstop (download) | Duane Wessels | Measures and displays tables of DNS network traffic | In use but not supported by CAIDA | 2002 | 2002 | Workload: DNS Statistics | pcap, monitors DNS queries on UDP Port 53 | text report (example available) | New BSD License |
| dsc (download) | Duane Wessels | Collects and displays statistics from DNS servers | In use but not supported by CAIDA | 2007 | 2010 | Workload: DNS Statistics | pcap, monitors DNS queries on UDP Port 53 | XML intermediate file, graph report (example available) | New BSD License |
| RTG (download) | Robert Beverly | SNMP statistics monitoring system | In use but not supported by CAIDA | 2005 | 2009 | Workload: Visualization | SNMP data | time series graphs, text traffic reports | GNU GPL v2 |
Historical Tools Taxonomy
In 2004, CAIDA collected information on availability of Internet and TCP/IP measurement tools as well as network visualization resources. Tools were categorized with respect to their intent in an Internet Tools Taxonomy, kept available for historical purposes.