tttview1
Tele traffic tapper viewer- a viewer program for remote, real-time, graphical traffic-monitoring.
Usage
tttview [-addr
recv_addr]
[-mcastifaddr
addr]
[-multicast]
[-port
recv_port]
[-probe
addr]
[{-yscale
(K | M | n)}]
Overview
tttview is the viewer program in the ttt program suite. tttview displays traffic-data collected on a remote host by tttprobe.
To run tttview, it is not necessary to be "root".
The ttt program suite is yet another descendant of tcpdump but it is capable of real-time, graphical, local and remote traffic-monitoring. It won't replace tcpdump, rather, it helps you find out what to look into with tcpdump.
Options
-
-addr recv_addr -
Specifies the local address. Only useful for multicast addresses. If omitted, "224.8.8.0 is used as default.
-
-mcastifaddr addr -
Specifies the multicast interface address. Only useful when an interface is selected to join a multicast group.
-
-multicast -
Shorthand for the default multicast destination "224.8.8.0".
-
-port recv_port -
Specifies the udp port number to receive traffic-data from a remote tttprobe. If omitted, port 7288 is used as default.
-
-probe addr -
Specifies the address of a probe. Only useful to select one among multiple probes.
-
-yscale ('K'|'M'|n) -
change the scale of y-axis. 'K' and 'M' represent 1000 and 1000000 respectively.
Examples
Remark: "hostA" is allways the host where traffic-data is collected with tttprobe and "hostB" is allways the host where the traffic-data is displayed with tttview.
point-to-point monitoring:
|
hostA: tttprobe hostB |
|
|
or: |
|
|
hostA: tttprobe ip_of_hostB |
multicast:
|
when using the default multicast address: |
|
|
hostA: tttprobe -multicast |
|
|
this is equivalent to: |
|
|
hostA: tttprobe 224.8.8.0 |
Releases
5 releases since Debian 3.1 (Sarge); the text changed 1 time.