man tttprobe (Commandes) - A probe to collect local traffic-data and send it to a remote instance of tttview

NAME

tttprobe: Tele Traffic Tapper probe - A probe to collect local traffic-data and send it to a remote instance of tttview

SYNTAX

ttt [-interface device] [-interval ms] [-multicast] [-port dest_port] [-ttl time-to-live] [Destination]

DESCRIPTION

tttprobe is the probe program in the ttt program suite. tttprobe locally collects traffic-data and sends it over a network to an instance of tttview.

To run tttview, it is not necessary to be "root".

The ttt program suite is yet another descendant of tcpdump but it is capable of real-time, graphical, local and remote traffic-monitoring. It won't replace tcpdump, rather, it helps you find out what to look into with tcpdump.

OPTIONS

ttt [-interface device] [-interval ms] [-multicast] [-port dest_port] [-ttl time-to-live] [Destination]

-interface device
specifies the interface for packet capture. If not specified, the default interface is chosen.
-interval ms
Sets the interval in Milliseconds. If omitted, a interval of 1000 msec. is used as default.
-multicast
Shorthand for the default multicast destination "224.8.8.0".
-port dest_port
Specifies the udp port number on the remote host where the traffic-data should be sent to. If omitted, port 7288 is used as default.
-ttl time-to-live
Specifies the time-to-live for multicast. If omitted, 1 is used as default to restrict the multicast to the local subnet.
Destination
Specifies the remote host where the traffic-data should be sent to. Destination can be omitted only, if -multicast is specified. Destination can be a uni- or multicast address.

EXAMPLES

Remark: "hostA" is allways the host where traffic-data is collected with tttprobe and "hostB" is allways the host where the traffic-data is displayed with tttview.

point-to-point monitoring:

hostA: tttprobe hostB

hostB: tttview
or:
hostA: tttprobe ip_of_hostB

hostB: tttview

multicast:

when using the default multicast address:
hostA: tttprobe -multicast

hostB: tttview -multicast
this is equivalent to:
hostA: tttprobe 224.8.8.0

hostB: tttview -addr 224.8.8.0

AUTHORS

tttprobe was written by Kenjiro Cho < kjc@csl.sony.co.jp>.

This manual page was written by Thomas Scheffczyk <thomas.scheffczyk@verwaltung.uni-mainz.de>, for the Debian GNU/Linux system (but may be used by others).

SEE ALSO

ttt(1), tttview(1)