2

Do any sample data sets exist for IPv6 traffic, e.g. Apache logs or traffic analysis logs? Alternatively does anyone have any ideas how to generate one or - optimistically - an existing tool to generate data? Ideally I would like sample addresses from real deployed ranged in proportion to how many addresses are in that range and / or expected traffic volume to / from those ranges, i.e. representative of the traffic that would go through a real-world router or web proxy or web server access log.

We're adding an IPv6 lookup to an existing project (matching subnets / address prefixes) and I was hoping to find realistic-looking IPv6 data to test / tune the implementation with. I've seen this question about lookup structures for IPv6 and skimmed the papers linked but apart from a few graphs there's little information on their test data.

I considered taking IPv4 traffic logs, reverse-DNSing all the IP(v4) addresses then perfoming an AAAA lookup on the hostnames to try and catch some IPv6 but I think the coverage would be vanishingly small - even for Google there's no IPv6 on www.google.com, you need to use ipv6.google.com instead. I could always just generate random numbers but I'd prefer to use more realistic data if possible. We don't have an IPv6-capable network of our own.

Thanks! I realise that I'm unlikely to find genuine traffic data since there's obviously privacy issues in releasing that but some sites do release IPv4 logs and I'm surprised I can't find anything.

12
  • IPv6, DNS AAAA lookups, HTTP? This is a bit confusing, you are not explaining why ipv6.google.com is a problem.
    – Steve-o
    Sep 1, 2011 at 13:04
  • @Steve-o I mean sets of IPv6 addresses showing realistic traffic patterns, ideally with sample addresses from real deployed ranged in proportion to how many addresses are in that range and / or expected traffic volume to / from those ranges. ipv6.google.com only AAAA-resolves to a single IP address as far as I can tell (or maybe a round-robin, but I'm stuck on a single address). I mentioned ipv6.google as an example reason I can't mechanically convert an IPv4 dataset into IPv6 to use.
    – Rup
    Sep 1, 2011 at 13:16
  • But you are after interactive traffic? I can easily provide traffic from a one-way multicast source but it isn't an exciting pattern.
    – Steve-o
    Sep 1, 2011 at 13:23
  • @Steve-o representative of the traffic that would go through a real-world router or web proxy or web server access log - i.e. an exciting pattern.
    – Rup
    Sep 1, 2011 at 13:26
  • Ctrl+F for 'IPv6' on this page: wiki.wireshark.org/SampleCaptures Sep 2, 2011 at 3:28

2 Answers 2

1

The Cooperative Association for Internet Data Analysis (CAIDA) offers a range of Anonymized packet traces from various points on the Internet. Some of the data requires signing a data sharing agreement. For more information, see http://www.caida.org/data/overview/

1
+50

I doubt that such data is publicly available because of privacy concerns. Anything that is available will probably have some bits set to 0, and that will make it useless for your lookups...

2
  • Well I'm mostly interested in matching address ranges / subnets so it makes no odds to me if lower bits are zeroed or randomised.
    – Rup
    Sep 1, 2011 at 13:19
  • As it happened the requirement went away so I never got around to asking CAIDA. Accepting as a helpful but still unproven answer - thanks!
    – Rup
    Mar 20, 2012 at 10:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.