iptraf(8) [redhat man page]
IPTRAF(8) System Manager's Manual IPTRAF(8) NAME
iptraf - Interactive Colorful IP LAN Monitor SYNOPSIS
iptraf { [ -f ] [ -q ] [ { -i iface | -g | -d iface | -s iface | -z iface | -l iface } [ -t timeout ] [ -B [ -L logfile ] ] ] | [ -h ] } DESCRIPTION
iptraf is an ncurses-based IP LAN monitor that generates various network statistics including TCP info, UDP counts, ICMP and OSPF informa- tion, Ethernet load info, node stats, IP checksum errors, and others. If the command is issued without any command-line options, the program comes up in interactive mode, with the various facilities accessed through the main menu. OPTIONS
These options can also be supplied to the command: -i iface immediately start the IP traffic monitor on the specified interface, or all interfaces if "-i all" is specified -g immediately start the general interface statistics -d iface allows you to immediately start the detailed on the indicated interface (iface) -s iface allows you to immediately monitor TCP and UDP traffic on the specified interface (iface) -z iface shows packet counts by size on the specified interface -l iface start the LAN station monitor on the specified interface, or all LAN interfaces if "-l all" is specified -t timeout tells IPTraf to run the specified facility for only timeout minutes. This option is used only with one of the above parameters. -B redirect standard output to /dev/null, closes standard input, and forks the program into the background. Can be used only with one of the facility invocation parameters above. Send the backgrounded process a USR2 signal to terminate. -L logfile allows you to specify an alternate log file name. The default log file name is based on either the interface selected (detailed interface statistics, TCP/UDP service statistics, packet size breakdown), or the instance of the facility (IP traffic monitor, LAN station monitor). If a path is not specified, the log file is placed in /var/log/iptraf -f clears all locks and counters, causing this instance of IPTraf to think it's the first one running. This should only be used to recover from an abnormal termination or system crash. -q no longer needed, maintained only for compatibility. -h shows a command summary SIGNALS
SIGUSR1 - rotates log files while program is running SIGUSR2 - terminates an IPTraf process running in the background. FILES
/var/log/iptraf/*.log - log file /var/local/iptraf/* - important IPTraf data files SEE ALSO
Documentation/* - complete documentation written by the author AUTHOR
Gerard Paul Java (riker@mozcom.com) MANUAL AUTHOR
Frederic Peters (fpeters@debian.org), using iptraf --help General manual page modifications by Gerard Paul Java (riker@mozcom.com) IPTraf Help Page IPTRAF(8)
Check Out this Related Man Page
ETHERPUPPET(1) BSD General Commands Manual ETHERPUPPET(1) NAME
etherpuppet -- create a virtual interface from a remote Ethernet interface SYNOPSIS
etherpuppet [-s port] [-c target:port] [-B] [-S] [-M filter] [-C] [-i iface] etherpuppet [-m] [-s port] [-c target:port] [-I iface] DESCRIPTION
etherpuppet is a small program that will create a virtual interface (TUN/TAP) on one machine from the ethernet interface of another machine through a TCP connection. Everything seen by the real interface will be seen by the virtual one. Everything sent to the virtual interface will be emitted by the real one. It has been designed because one often has a small machine as his Internet gateway, and sometimes want to run some big applications that need raw access to this interface, for sniffing (Ethereal, etc.) or for crafting packets that do not survive being reassembled, NATed, etc. When launched with the first syntax, etherpuppet is a slave that will send to its master everything that passes on the given interface. With the second syntax, etherpuppet is the master and will create the special TAP device (whose default name starts with puppet. In both modes, etherpuppet is able to either connect or listen to its slave/master. Traffic seen by the real interface is sent through the TCP connection to the doll interface. Thus, it is important that this connection is not seen by the real interface (or else, we'll have a cute infinite traffic loop). The options are as follows: -s port Listen on the given TCP port. -c ip:port Connect to the slave/master on the given IP/port. -i iface Vampirize the given interface name. -I ifname Choose the name of the virtual interface. -m Master mode. -B Do not use BPF. With this option, etherpuppet may see its own traffic. -S Build BPF with the content of SSH_CONNECTION environment variable. -M src:sp,dst:dp Build manually a BPF filter that will exclude matching traffic in both directions. -C Do not copy real interface parameters to virtual interface. The source and destination are by default the TCP connection end points. If you go through SSH tunneling, you can use the -S option to use SSH_CONNECTION environment variable content instead, so that you will filter out the SSH connection of your current session and not the con- nection to the local SSH tunnel end point (which is pointless). If this still not fit your needs, you can manually specify the connection end points with -M. If you connect two Etherpuppet instances in master mode, you'll get a TCP tunnel through virtual interfaces. If you connect two Etherpuppet instances in slave mode, you may get some kind of inefficient distributed bridge, but more probably, you'll get a big mess. AUTHORS
The etherpuppet program was written by Philippe Biondi <phil@secdev.org>. This manual page was written by Vincent Bernat <bernat@debian.org>, for the Debian project (but may be used by others). BSD
August 7, 2008 BSD