TTT(1)

NAME
ttt - Tele Traffic Tapper

SYNOPSIS
ttt [ -interface device ] [ -interval ms ] [ -dumpfile file ] [ -speed factor ] ] [ -yscale 'K'|'M'|n ] [ -pcap pcapfilters ]

DESCRIPTION

Ttt monitors the network and automatically picks up the main contributors of the traffic within the time window (60 sec by default). You can see the behavior of the traffic of the past 60 seconds. The graphs are updated every second by default. Ttt presents two separate graphs in a window. One for a protocol breakdown and the other for an ip-host breakdown. Ttt also accepts a tcpdump output as input. To run ttt You must have read access to /dev/bpf*.
Ttt reads a startup script named ttt.tcl in the current directory or in the system default directory (default is /usr/local/lib/ttt). Once started, ttt goes into Tcl Shell. To quit ttt, type quit. You can change ttt variables from Tcl Shell or from the startup script. See the comments in ttt.tcl for more details. Also, you can do remote monitoring using tttprobe and tttview programs. Ttt requires libpcap and libBLT. libBLT requires Tcl/Tk.

OPTIONS

-interface
    Listen on device. If unspecified, ttt searches the system interface list for the lowest numbered, configured up interface (excluding loopback). Ties are broken by choosing the earliest match.

-interval
    Sets the interval to update the graph in msec. The default is 1000 msec.

-dumpfile
    Uses a dumpfile produced by tcpdump -w as input.

-speed
    Specifies the acceleration factor of the replay speed. -speed 10 will replay a 10-minute-dumpfile in 1 minute.

-yscale
    Specifies the scale of y axis. K and M represent 1000 and 1000000 respectively.

-pcap
    Specifies filters for pcap.

SEE ALSO
tttprobe(1), tttview(1), pcap(3), BLT(n)

BUGS