2000-07-07 19:22:14 +00:00
|
|
|
trafd is a superset of trafshow, and extends it by adding a daemon
|
2000-01-29 05:37:41 +00:00
|
|
|
which collects data about network connections (src, dst, protocol
|
|
|
|
|
and length). The resulting data can be dumped to a file for later
|
|
|
|
|
processing.
|
|
|
|
|
|
2000-07-07 19:22:14 +00:00
|
|
|
Read /usr/local/share/doc/trafd/README after installation for more
|
2000-01-29 05:37:41 +00:00
|
|
|
information.
|
|
|
|
|
|
2000-07-07 19:22:14 +00:00
|
|
|
To use trafd, your kernel must be rebuilt with the following line
|
2000-01-29 05:37:41 +00:00
|
|
|
added to your kernel config file (/sys/i386/conf/<YourMachine>):
|
|
|
|
|
|
|
|
|
|
pseudo-device bpfilter 4 # Berkeley packet filter
|
|
|
|
|
|
|
|
|
|
The number after bpfilter is the number of interfaces that can be
|
|
|
|
|
examined simultaneously. See section 6.1 of the Handbook for details.
|
|
|
|
|
|
|
|
|
|
On FreeBSD 4.0 or later versions, use the following line instead:
|
|
|
|
|
|
|
|
|
|
pseudo-device bpf 4 # Berkeley packet filter
|
|
|
|
|
|
|
|
|
|
- oddbjorn <oddbjorn@tricknology.org>
|
