We are attempting to look at traffic characteristics inside enterprise networks to (i) assess how traffic characteristics differ from characteristics found in wide-area networks and (ii) to provide models of "background traffic" for the community (and for security researchers in particular, for testing defense mechanisms).
Papers:
We have also made available over 100 hours of anonymized enterprise packet traces available from the main project web page, which is here.
(Posted: Thu Aug 11, 2005; Updated: Tue Dec 12, 2006)