SYNTAX

ttt [-interface device] [-interval ms] [-multicast] [-port dest_port] [-ttl time-to-live] [Destination]

DESCRIPTION

tttprobe is the probe program in the ttt program suite. tttprobe locally collects traffic-data and sends it over a network to an instance of tttview.

To run tttview, it is not necessary to be "root".

The ttt program suite is yet another descendant of tcpdump but it is capable of real-time, graphical, local and remote traffic-monitoring. It won't replace tcpdump, rather, it helps you find out what to look into with tcpdump.

OPTIONS

ttt [-interface device] [-interval ms] [-multicast] [-port dest_port] [-ttl time-to-live] [Destination]

-interface device

specifies the interface for packet capture. If not specified, the default interface is chosen.

-interval ms

Sets the interval in Milliseconds. If omitted, a interval of 1000 msec. is used as default.

-multicast

Shorthand for the default multicast destination "224.8.8.0".

-port dest_port

Specifies the udp port number on the remote host where the traffic-data should be sent to. If omitted, port 7288 is used as default.

-ttl time-to-live

Specifies the time-to-live for multicast. If omitted, 1 is used as default to restrict the multicast to the local subnet.

Destination

Specifies the remote host where the traffic-data should be sent to. Destination can be omitted only, if -multicast is specified. Destination can be a uni- or multicast address.

EXAMPLES

Remark: "hostA" is allways the host where traffic-data is collected with tttprobe and "hostB" is allways the host where the traffic-data is displayed with tttview.

point-to-point monitoring:

hostA: tttprobe hostB
hostB: tttview

or:

hostA: tttprobe ip_of_hostB
hostB: tttview

multicast:

when using the default multicast address:

hostA: tttprobe -multicast
hostB: tttview -multicast

this is equivalent to:

hostA: tttprobe 224.8.8.0
hostB: tttview -addr 224.8.8.0

AUTHORS

tttprobe was written by Kenjiro Cho < [email protected]>.

This manual page was written by Thomas Scheffczyk <[email protected]>, for the Debian GNU/Linux system (but may be used by others).