AS Rank is CAIDA's ranking of Autonomous Systems (AS) (which approximately map to Internet Service Providers) and organizations (Orgs) (which are a collection of one or more ASes). This ranking is derived from topological data collected by CAIDA's Archipelago Measurement Infrastructure and Border Gateway Protocol (BGP) routing data collected by the Route Views Project and RIPE NCC.
ASes and Orgs are ranked by their customer cone size, which is the number of their direct and indirect customers.
Note: We do not have data to rank ASes (ISPs) by traffic, revenue, users, or any other non-topological metric..

Packet headers (upto transport layer, inclusive) for Anonymized Internet Traces 2016 Dataset. Derived from OC192 traces on Equinix San Jose and Chicago monitors.

Packet headers (upto transport layer, inclusive) for OC192 traces on Equinix San Jose and Chicago monitors. Contains months 03,04,05,06,07,08,09,10,11,12 Months 03,06,07,08,11 are archived; months 04,05,09,10,12 are NOT archived.

Packet headers (upto transport layer, inclusive) for Anonymized Internet Traces 2019 Dataset. Derived from 10G traces on Equinix NYC monitor.

Packet headers (upto transport layer, inclusive) for Anonymized Internet Traces Dataset. Derived from 10G traces collected from high-speed monitors on a commercial backbone links.

DZDB is CAIDA's database of tld zone file data, which tracks the history of a zone's domain, nameserver, and IP records.

Meta data for all passive monthly traces, incl. chicago and sanjose monitors. This includes the files used to generate the public trace stats.

Ark-based macroscopic Internet Topology Data Kits (ITDK)

The UCSD Network Telescope consists of a globally routed, but lightly utilized /9 and /10 network prefix, that is, 1/256th of the whole IPv4 address space. It contains few legitimate hosts; inbound traffic to non-existent machines - so called Internet Background Radiation (IBR) - is unsolicited and results from a wide range of events, including misconfiguration (e.g. mistyping an IP address), scanning of address space by attackers or malware looking for vulnerable targets, backscatter from randomly spoofed denial-of-service attacks, and the automated spread of malware. CAIDA continously captures this anomalous traffic discarding the legitimate traffic packets destined to the few reachable IP addresses in this prefix. We archive and aggregate these data, and provide this valuable resource to network security researchers. This dataset represents raw traffic traces captured by the Telescope instrumentation and made available in near-real time as one-hour long compressed pcap files. We collect more than 3 TB of uncompressed IBR traffic traces data per day. The most recent 14 days of data are stored locally at CAIDA. Once data slides out of this near-real-time window, the pcap files are off-loaded to a tape storage. This historical Telescope data starting from 2008 are available by additional request.

CAIDA's Spoofer project provides information about deployed Source Address Validation (SAV) policy of ASes in the Internet. The Spoofer API is public data; The restricted dataset includes information that we do not provide through the public API, including the results of traceroute and tracespoof measurements. The dataset is provided in database format.

This dataset contains anonymized layer 1-4 packet headers of two-way passive traces captured on a 100 GB link between Los Angeles and Dallas, Texas. These data are useful for research on the characteristics of Internet traffic, including application breakdown, security events, geographic and topological distribution, flow volume and duration.

These are all the Ark IPv6 probing data, collected by a globally distributed set of IPv6-enabled Archipelago (Ark) monitors. These data contain information useful for studying the IP and AS topology of the IPv6 Internet.

as-links (aka. as-adjacencies) derived from skitter traces The skitter infrastructure was retired on February 8, 2008 in favor of the next generation Archipelago (Ark) topology measurement infrastructure.

Skitter is a tool for actively probing the Internet in order to analyze topology and performance. The skitter dataset contains forward IP paths from a source to many destinations, round trip times (RTT). The data can be used to track persistent routing changes, and to visualize network connectivity.

Graph database of Internet resources combining data from multiple sources

Archival aggregated flowtuple Telescope data in Corsaro format

This fileset contains an annotated version of AS relationships dataset that estimates the geographic location of links between pairs of networks. Served online as the public "AS Relationships with geographic annontations"

This dataset contains anonymized layer 1-4 packet headers of two-way passive traces captured on a 100 GB link between Los Angeles and San Jose. These data are useful for research on the characteristics of Internet traffic, including application breakdown, security events, geographic and topological distribution, flow volume and duration.

Passive 100G sampler is offered to researchers at commercial organizations when they request Anonymized Internet Traces. These data are part of the 2024 Anonymized Traces 100G dataset. The files consist of 5 second snapshots of a bidirectional capture taken in November 2024.

Data supplement for paper X. Dimitropoulos, D. Krioukov, G. Riley, and k. claffy, "Revealing the Autonomous System Taxonomy: The Machine Learning Approach", in Passive and Active Network Measurement Workshop (PAM), Mar 2006.

Contains AS links annotated with inferred relationships. Each file contains a full AS graph derived from a set of RouteViews BGP table snapshots, 5-days of Ark traceroutes (up until 2018-08), and multilateral peering. Served online in the public AS Relationships dataset.