Man Linux: Main Page and Category List

NAME

       tttprobe:  Tele  Traffic  Tapper  probe  -   A  probe  to collect local
       traffic-data and send it to a remote instance of tttview

SYNTAX

       ttt [-interface device] [-interval ms] [-multicast]  [-port  dest_port]
       [-ttl time-to-live] [Destination]

DESCRIPTION

       tttprobe  is  the  probe  program  in  the  ttt program suite. tttprobe
       locally collects traffic-data  and  sends  it  over  a  network  to  an
       instance of tttview.

       To run tttview, it is not necessary to be "root".

       The  ttt  program  suite is yet another descendant of tcpdump but it is
       capable of real-time, graphical, local and  remote  traffic-monitoring.
       It  won’t  replace  tcpdump, rather, it helps you find out what to look
       into with tcpdump.

OPTIONS

       ttt [-interface device] [-interval ms] [-multicast]  [-port  dest_port]
       [-ttl time-to-live] [Destination]

       -interface device
              specifies  the  interface  for packet capture. If not specified,
              the default interface is chosen.

       -interval ms
              Sets the interval in Milliseconds. If  omitted,  a  interval  of
              1000 msec. is used as default.

       -multicast
              Shorthand for the default multicast destination "224.8.8.0".

       -port dest_port
              Specifies  the  udp  port  number  on  the remote host where the
              traffic-data should be sent to. If omitted, port 7288 is used as
              default.

       -ttl time-to-live
              Specifies  the time-to-live for multicast. If omitted, 1 is used
              as default to restrict the multicast to the local subnet.

       Destination
              Specifies the remote host where the traffic-data should be  sent
              to. Destination can be omitted only, if -multicast is specified.
              Destination can be a uni- or multicast address.

EXAMPLES

       Remark: "hostA" is allways the host  where  traffic-data  is  collected
       with tttprobe and "hostB" is allways the host where the traffic-data is
       displayed with tttview.

       point-to-point monitoring:

              hostA: tttprobe hostB
              hostB: tttview

              or:

              hostA: tttprobe ip_of_hostB
              hostB: tttview

       multicast:

              when using the default multicast address:

              hostA: tttprobe -multicast
              hostB: tttview -multicast

              this is equivalent to:

              hostA: tttprobe 224.8.8.0
              hostB: tttview -addr 224.8.8.0

AUTHORS

       tttprobe was written by Kenjiro Cho < kjc@csl.sony.co.jp>.

       This    manual    page    was    written    by    Thomas     Scheffczyk
       <thomas.scheffczyk@verwaltung.uni-mainz.de>,  for  the Debian GNU/Linux
       system (but may be used by others).

SEE ALSO

       ttt(1), tttview(1)