Trafd is a suite of tools to collect and visualize network traffic statistics. Trafd itself is a daemon listening on a BPF device (using pcap) and storing collected statistics in a flat file database. Traflog is used to select and visualize collected statistics.
Here are some key features of "Trafd":
· Logging all ip (tcp/udp/other) traffic on a network interface. It logs the following information: src/dst ip address, service port number (for TCP/UDP) number of data/header bytes of a packets, record date and time;
· Stores it's accounting information in simple, one-file per interface database;
· Flush/restore in-memory cache on/from the harddisk.
· Retrieve/store in-memory data trough the network.
Requirements:
· Unix box
· libpcap
· Tested on FreeBSD and Linux (i386 and amd64) platforms.
What's New in This Release:
· All tools were revised to support 64 bit arch (tested on FreeBSD/amd64).
· All tools were revised to support database files > 2 GB in size.
Product's homepage