traflog
—
show traffic statistics collected and stored by trafd.
This man page currently under construction
.
Welcome to writing!
traflog |
-l [-i
iface | file]
[-b num]
[-e num]
[-r ] |
traflog |
-d [-i
iface | file]
[-fnN ] [pattern | -F
file] |
traflog |
[-aAfnNrs ] [-i
iface | file]
[-b num]
[-e num]
[-o format]
[-w file]
[-S order] [pattern |
-F file]
|
traflog
show traffic statistic from
trafd
statistics file (see
trafd(8)).
There need write detailed
description...
Default output formatted to 7 columns:
- From
- packet's source address
- (from) Port
- packet's source port (for tcp or udp)
- To
- packet's destination address
- (to) Port
- packet's destination port (for tcp or udp)
- Proto
- protocol (see
protocols(5)
and /etc/protocols)
- Data
- size of the packet data frame
- All
- full size of the IP packet (traffic value)
-a
- Output all log file records (default only one last).
-A
- Resolve local network and broadcast adresses (default not resolved).
-b
- Begin record number (-b "#24") or time (-b yymmddhhmm).
-d
- Print pattern table (use for test pattern).
-e
- End record number (-e "#26") or time (-e yymmddhhmm).
-f
- Resolve addresses only for hosts in local network.
-F
- Read pattern expression from file.
-i
iface | file
- Interface name which trafd listen traffic or trafd data file name.
-l
- Print records list of the log file.
-n
- Don't resolve addresses to host names.
-N
- Output only host names (without domain name).
-o
- Format output by named template described in file
"traflog.format"
-r
- Print only number of records; otherwise print traffic count in Kb
-s
- Output summary traffic.
-S
order
- Sort output in specified order:
- f, from
-
- t, to
-
- b, bytes
-
- s, srcport
-
- d, dstport
-
-V
- Print version number and exit.
-w
file
- Binary output to file
- pattern
- Filter expression (see later).
Traflog output details:
- From
- Source IP address (numeric) or domain name (FQDN)
- Srcport
- Source IP port (number or name from /etc/services)
- To
- Destination IP address (numeric) or domain name (FQDN)
- Dstport
- Destination IP port (number or name from /etc/services)
- Proto
- IP protocol (name from /etc/protocols; if not found then prints
'unkn')
- Data
- IP data frame summary sizes for this line (sub-protocol datagra sizes
summ)
- All
- IP datagram summary sizes for this line (IP traffic value)
To display all possible protocol names edit /etc/protocols (or
take new file from IANA http/ftp server) please.
To be continued... (Write it, please!)
This section also wait for writers...
from turbo.nsk.su to ns.nsk.su port domain
to all port ftp port ftp-data
from TURBONET to all
from 192.188.187.127 mask 255.255.255.224 port all
from all to 144.206.0.0 proto tcp
- 0
- Success.
- !=0
- Error (see log)
/var/log/trafstat.log
log file.
Tested on: BSDI BSD/386 1.0 (BPFT versions 1.0-2.0), FreeBSD
2.2.8 (BPFT version 2.0), FreeBSD 3.0 and
above, FreeBSD 4.0 and above (BPFT version 3.0 and
above).
BPFT versions 3.*, 4.* work only on FreeBSD
3.0 and above: requred library pcap
(see
pcap(3))
not included into previous versions of the
FreeBSD
Vladimir Vorobyev ⟨bob@turbo.nsk.su⟩
autor of the BPFT project, versions
1.0..2.0
Vitaly V. Belekhov
⟨vitaly@riss-telecom.ru⟩
3.0 release
Stas Degteff ⟨g@grumbler.org⟩
4.0 release, man pages