About	History	ScreenShots	Requirements	Documentation	Download	TODO	Credits	Contact	Links

About:

This is a cable modem (or any Ethernet connection) IP byte logger. This is NOT a packet sniffer, it just gathers network statistics.
It is composed of two programs:

• A daemon, which logs all the incoming/outgoing connections and creates pairs of source/destination IP addresses with a byte counter and direction of traffic (inbound or outbound) attached. It stores it periodically on a file (or files).It also accepts network connections to gather the statistics and can also run user's scripts which can send commands to the daemon and receive information.
• An user application, which can be run on console or X (wmaker/kde bar?) and connects to the daemon and collects the statistics, and then making the separation between national/international , inbound/outbound , etc (not done yet)

History:

Release Date	Version	Comments
December 2001	-	Jig suggests the idea
December 2001	-	We have main(void){}!
February 2002	-	Slug starts the REAL coding :)
19 February 2002	0.10	First running daemon (almost) full working
20 February 2002	0.11	Daemon now resets the counters when we change month
20 February 2002	0.12	Full Packaged with autoconf support
21 February 2002	0.13	Minor autoconf fixes (Posix Threads automatic detection)
21 February 2002	0.14	Minor fixes
21 February 2002	0.15	Fixed Total Traffic Count bug (thx hump 4 the report)
22 February 2002	0.16	- Minor autoconf fixes and additions (curses/ncurses detection) - configure --enable-testprog - for developers (builds some test programs)
22 February 2002	0.17	- support functions for reading & comparing networks/netmasks and ip records. - support for daemon configuration file
23 February 2002	0.18	initial network connection support
28 February 2002	0.19	periodic (time delay) shell script/command support
8 March 2002	0.20	- users scripts/programs can communicate with the daemon through stdin and stdout. See doc/scripts for some simple examples. - warning: the location of the daemon after install is now on prefix/sbin and not prefix/bin as before.
9 March 2002	0.21	- multi-script pipe bug fixed
10 March 2002	0.22	- support for sh_net and mix_in_tag commands - additional example scripts for these commands
10 March 2002	0.23	- support for sh_tr command
10 March 2002	0.24	- another unsigned long int / unsigned long long int bug found. humpback, stop that massive downloads please :)
11 March 2002	0.25	- printf ntohs bug fixed (thanks Shadow 4 the rep.).I think I should read 10 more times the printf manpage... - better network & pipe read buffer support
13 March 2002	0.26	- improved network&pipe read/write FIFO buffer support
14 March 2002	0.27	- syslogd logging support - changed strdupa back to strdup/free - daemon now puts itself in background and uses a lockfile to prevent several copies running at the same time
19 March 2002	0.28	- minor free net socket buffer bugfix - initial info/html/txt manual available
6 April 2002	0.29	- the ip records are periodically sorted (using libc qsort) based on latest timestamp, to increase efficiency when logging packets

ScreenShots:

Daemon running in foreground

Requirements:

• Unix system with threads support (any recent Linux / BSD ).
• libpcap version 0.4 or greater.
• ncurses version 5.x or superior for console (text mode) support
• Xlib for X support :)
• libc with locales for Internationalization support

Documentation:

With the program you have a manual in text, info and html format. Only the info file is installed by default.
You can also see here the html manual.

Download:

Development:
• development versions

TODO:

• Extensible connection applications
• MySQL pluggin
• SSL connection support
• Guille (Scheme) script support
• Support for reloading of configuration/network files
• Daemonize the daemon :) and SysLog support (DONE)
• ...

Credits:

• Slug - Coding; Documentation ; Linux and FreeBSD testing
• Shadow - FreeBSD testing; features requests; "threads are your DOOM!"
• Humpback|B| - Linux testing; features requests; MySQL idea; "threads are COOL!" ; "My undred GigaBytes of Download require more than 32 bit counters"
• jig - initial idea; "have you test it?" - "i saw the screenshot" duh

Contact:

Slug HomePage

Links:

• freshmeat.net - search for traf count :)