tcptrack provides a packet sniffer that displays TCP connections similarly to ‘top’.
tcptrack is a packet sniffer, which passively watches for connections on a specified network interface, tracks their states, and lists them in a manner similar to the Unix ‘top’ command.
It displays source and destination addresses and ports, connection state, idle time, and bandwidth usage.
Requirements:
· libpcap 0.7.2 or higher
To build and install:
# ./configure
# make
# make install
To run tcptrack, you need to specify an interface for it to sniff:
# tcptrack -i eth0
You can also provide a pcap filter expression:
# tcptrack -i eth0 src or dst 192.168.33.92 and port 80
You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.