/ Macwelt 4 / Macwelt DVD 4.cdr / Internet / Internet-Utilities / Mac-OS X / darkstat-2.2 / darkstat.1

< prev

next >

MacOS 8.1

Win98

DOS

browse contents

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 0a 64 61 72 6b 73 74 | 61 74 2e 31 00 00 00 00 |..darkst|at.1....|
|00000010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 01 00 00 00 00 00 00 |........|........|
|00000050| 00 00 00 00 00 0f 4b 00 | 00 01 1e b9 b4 73 f6 b9 |......K.|.....s..|
|00000060| b4 73 f6 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.s......|........|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 81 81 6e 6b 00 00 |........|....nk..|
|00000080| 2e 5c 22 20 43 6f 70 79 | 72 69 67 68 74 20 32 30 |.\" Copy|right 20|
|00000090| 30 31 2d 32 30 30 32 2c | 20 45 6d 69 6c 20 4d 69 |01-2002,| Emil Mi|
|000000a0| 6b 75 6c 69 63 2e 0a 2e | 5c 22 0a 2e 54 48 20 64 |kulic...|\"..TH d|
|000000b0| 61 72 6b 73 74 61 74 20 | 31 20 22 41 75 67 75 73 |arkstat |1 "Augus|
|000000c0| 74 20 31 31 2c 20 32 30 | 30 32 22 20 64 61 72 6b |t 11, 20|02" dark|
|000000d0| 73 74 61 74 20 22 55 73 | 65 72 20 4d 61 6e 75 61 |stat "Us|er Manua|
|000000e0| 6c 73 22 0a 2e 53 48 20 | 4e 41 4d 45 0a 64 61 72 |ls"..SH |NAME.dar|
|000000f0| 6b 73 74 61 74 20 5c 2d | 20 6e 65 74 77 6f 72 6b |kstat \-| network|
|00000100| 20 74 72 61 66 66 69 63 | 20 61 6e 61 6c 79 7a 65 | traffic| analyze|
|00000110| 72 0a 2e 5c 22 0a 2e 53 | 48 20 53 59 4e 4f 50 53 |r..\"..S|H SYNOPS|
|00000120| 49 53 0a 2e 42 20 64 61 | 72 6b 73 74 61 74 0a 5b |IS..B da|rkstat.[|
|00000130| 0a 2e 42 49 20 5c 2d 69 | 20 22 20 69 66 22 0a 5d |..BI \-i| " if".]|
|00000140| 20 5b 0a 2e 42 49 20 5c | 2d 70 20 22 20 70 6f 72 | [..BI \|-p " por|
|00000150| 74 22 0a 5d 20 5b 0a 2e | 42 49 20 5c 2d 62 20 22 |t".] [..|BI \-b "|
|00000160| 20 69 70 22 0a 5d 20 5b | 0a 2e 42 49 20 5c 2d 64 | ip".] [|..BI \-d|
|00000170| 20 22 20 70 61 74 68 22 | 0a 5d 20 5b 0a 2e 42 49 | " path"|.] [..BI|
|00000180| 20 5c 2d 6c 20 22 20 69 | 70 2f 6d 61 73 6b 22 0a | \-l " i|p/mask".|
|00000190| 5d 20 5b 0a 2e 42 49 20 | 5c 2d 66 20 22 20 69 70 |] [..BI |\-f " ip|
|000001a0| 22 0a 5d 20 5b 0a 2e 42 | 20 5c 2d 76 0a 5d 20 5b |".] [..B| \-v.] [|
|000001b0| 0a 2e 42 20 5c 2d 6e 0a | 5d 20 5b 0a 2e 42 20 5c |..B \-n.|] [..B \|
|000001c0| 2d 68 0a 5d 20 5b 0a 2e | 42 20 5c 2d 56 0a 5d 20 |-h.] [..|B \-V.] |
|000001d0| 5b 0a 2e 42 20 5c 2d 50 | 0a 5d 20 5b 0a 2e 42 20 |[..B \-P|.] [..B |
|000001e0| 5c 2d 65 20 22 20 65 78 | 70 72 22 0a 5d 20 5b 0a |\-e " ex|pr".] [.|
|000001f0| 2e 42 20 5c 2d 5c 2d 73 | 70 79 20 22 20 69 66 22 |.B \-\-s|py " if"|
|00000200| 0a 5d 0a 2e 5c 22 0a 2e | 53 48 20 44 45 53 43 52 |.]..\"..|SH DESCR|
|00000210| 49 50 54 49 4f 4e 0a 2e | 49 20 64 61 72 6b 73 74 |IPTION..|I darkst|
|00000220| 61 74 0a 69 73 20 61 20 | 6e 65 74 77 6f 72 6b 20 |at.is a |network |
|00000230| 74 72 61 66 66 69 63 20 | 61 6e 61 6c 79 7a 65 72 |traffic |analyzer|
|00000240| 2e 20 49 74 27 73 20 62 | 61 73 69 63 61 6c 6c 79 |. It's b|asically|
|00000250| 20 61 20 70 61 63 6b 65 | 74 20 73 6e 69 66 66 65 | a packe|t sniffe|
|00000260| 72 20 77 68 69 63 68 0a | 72 75 6e 73 20 61 73 20 |r which.|runs as |
|00000270| 61 20 62 61 63 6b 67 72 | 6f 75 6e 64 20 70 72 6f |a backgr|ound pro|
|00000280| 63 65 73 73 20 6f 6e 20 | 61 20 63 61 62 6c 65 2f |cess on |a cable/|
|00000290| 44 53 4c 20 72 6f 75 74 | 65 72 20 73 6f 72 74 20 |DSL rout|er sort |
|000002a0| 6f 66 20 6d 61 63 68 69 | 6e 65 20 61 6e 64 0a 74 |of machi|ne and.t|
|000002b0| 61 6c 6c 69 65 73 20 75 | 70 20 61 6c 6c 20 73 6f |allies u|p all so|
|000002c0| 72 74 73 20 6f 66 20 75 | 73 65 6c 65 73 73 20 62 |rts of u|seless b|
|000002d0| 75 74 20 69 6e 74 65 72 | 65 73 74 69 6e 67 20 73 |ut inter|esting s|
|000002e0| 74 61 74 69 73 74 69 63 | 73 2e 0a 2e 50 50 0a 41 |tatistic|s...PP.A|
|000002f0| 6c 6c 20 73 65 74 74 69 | 6e 67 73 20 61 72 65 20 |ll setti|ngs are |
|00000300| 70 61 73 73 65 64 20 6f | 6e 20 74 68 65 20 63 6f |passed o|n the co|
|00000310| 6d 6d 61 6e 64 6c 69 6e | 65 2e 0a 2e 5c 22 0a 2e |mmandlin|e...\"..|
|00000320| 53 53 20 4f 50 54 49 4f | 4e 53 0a 2e 54 50 0a 2e |SS OPTIO|NS..TP..|
|00000330| 42 49 20 5c 2d 69 20 22 | 20 69 66 22 0a 4c 69 73 |BI \-i "| if".Lis|
|00000340| 74 65 6e 20 6f 6e 20 74 | 68 65 20 6e 65 74 77 6f |ten on t|he netwo|
|00000350| 72 6b 20 69 6e 74 65 72 | 66 61 63 65 20 73 70 65 |rk inter|face spe|
|00000360| 63 69 66 69 65 64 20 62 | 79 0a 5c 66 49 69 66 5c |cified b|y.\fIif\|
|00000370| 66 52 2c 0a 72 61 74 68 | 65 72 20 74 68 61 6e 20 |fR,.rath|er than |
|00000380| 74 68 65 20 64 65 66 61 | 75 6c 74 0a 69 6e 74 65 |the defa|ult.inte|
|00000390| 72 66 61 63 65 20 74 68 | 61 74 0a 2e 49 20 6c 69 |rface th|at..I li|
|000003a0| 62 70 63 61 70 0a 72 65 | 74 75 72 6e 73 2e 0a 2e |bpcap.re|turns...|
|000003b0| 5c 22 0a 2e 54 50 0a 2e | 42 49 20 5c 2d 70 20 22 |\"..TP..|BI \-p "|
|000003c0| 20 70 6f 72 74 22 0a 53 | 65 72 76 65 20 73 74 61 | port".S|erve sta|
|000003d0| 74 69 73 74 69 63 73 20 | 6f 6e 20 74 68 65 20 73 |tistics |on the s|
|000003e0| 70 65 63 69 66 69 65 64 | 20 70 6f 72 74 20 69 6e |pecified| port in|
|000003f0| 73 74 65 61 64 20 6f 66 | 20 74 68 65 20 64 65 66 |stead of| the def|
|00000400| 61 75 6c 74 20 36 36 36 | 2e 0a 2e 5c 22 0a 2e 54 |ault 666|...\"..T|
|00000410| 50 0a 2e 42 49 20 5c 2d | 62 20 22 20 69 70 22 0a |P..BI \-|b " ip".|
|00000420| 42 69 6e 64 20 74 68 65 | 20 77 65 62 20 69 6e 74 |Bind the| web int|
|00000430| 65 72 66 61 63 65 20 74 | 6f 20 74 68 65 20 73 70 |erface t|o the sp|
|00000440| 65 63 69 66 69 65 64 20 | 6c 6f 63 61 6c 20 49 50 |ecified |local IP|
|00000450| 2c 20 69 6e 73 74 65 61 | 64 20 6f 66 20 61 6c 6c |, instea|d of all|
|00000460| 20 69 6e 74 65 72 66 61 | 63 65 73 2e 0a 2e 5c 22 | interfa|ces...\"|
|00000470| 0a 2e 54 50 0a 2e 42 49 | 20 5c 2d 64 20 22 20 70 |..TP..BI| \-d " p|
|00000480| 61 74 68 22 0a 53 74 6f | 72 65 20 64 61 74 61 62 |ath".Sto|re datab|
|00000490| 61 73 65 20 66 69 6c 65 | 73 20 69 6e 0a 2e 49 20 |ase file|s in..I |
|000004a0| 70 61 74 68 0a 69 6e 73 | 74 65 61 64 20 6f 66 20 |path.ins|tead of |
|000004b0| 74 68 65 20 63 75 72 72 | 65 6e 74 20 77 6f 72 6b |the curr|ent work|
|000004c0| 69 6e 67 20 64 69 72 65 | 63 74 6f 72 79 2e 0a 2e |ing dire|ctory...|
|000004d0| 5c 22 0a 2e 54 50 0a 2e | 42 49 20 5c 2d 6c 20 22 |\"..TP..|BI \-l "|
|000004e0| 20 69 70 2f 6d 61 73 6b | 22 0a 57 68 65 6e 20 72 | ip/mask|".When r|
|000004f0| 75 6e 6e 69 6e 67 20 61 | 20 32 2e 34 2e 78 20 0a |unning a| 2.4.x .|
|00000500| 2e 49 20 4c 69 6e 75 78 | 0a 6b 65 72 6e 65 6c 20 |.I Linux|.kernel |
|00000510| 77 69 74 68 20 4e 41 54 | 2c 20 70 61 63 6b 65 74 |with NAT|, packet|
|00000520| 73 20 61 72 65 20 6d 61 | 6e 67 6c 65 64 20 62 65 |s are ma|ngled be|
|00000530| 66 6f 72 65 0a 2e 49 20 | 6c 69 62 70 63 61 70 0a |fore..I |libpcap.|
|00000540| 63 61 74 63 68 65 73 20 | 74 68 65 6d 2e 20 20 54 |catches |them.  T|
|00000550| 6f 20 67 65 74 20 70 72 | 6f 70 65 72 20 61 63 63 |o get pr|oper acc|
|00000560| 6f 75 6e 74 69 6e 67 20 | 6f 66 20 74 72 61 6e 73 |ounting |of trans|
|00000570| 66 65 72 20 73 74 61 74 | 69 73 74 69 63 73 2c 20 |fer stat|istics, |
|00000580| 79 6f 75 0a 68 61 76 65 | 20 74 6f 20 64 65 73 63 |you.have| to desc|
|00000590| 72 69 62 65 20 79 6f 75 | 72 20 6c 6f 63 61 6c 20 |ribe you|r local |
|000005a0| 6e 65 74 77 6f 72 6b 20 | 61 64 64 72 65 73 73 20 |network |address |
|000005b0| 73 70 61 63 65 2e 0a 2e | 73 70 0a 46 6f 72 20 65 |space...|sp.For e|
|000005c0| 78 61 6d 70 6c 65 2c 20 | 69 66 20 61 6c 6c 20 74 |xample, |if all t|
|000005d0| 68 65 20 6c 6f 63 61 6c | 20 6d 61 63 68 69 6e 65 |he local| machine|
|000005e0| 73 20 68 61 76 65 20 61 | 6e 20 49 50 20 6f 66 20 |s have a|n IP of |
|000005f0| 31 39 32 2e 31 36 38 2e | 30 2e 78 2c 20 79 6f 75 |192.168.|0.x, you|
|00000600| 72 0a 2e 49 20 69 70 2f | 6d 61 73 6b 0a 73 68 6f |r..I ip/|mask.sho|
|00000610| 75 6c 64 20 62 65 20 31 | 39 32 2e 31 36 38 2e 30 |uld be 1|92.168.0|
|00000620| 2e 30 2f 32 35 35 2e 32 | 35 35 2e 32 35 35 2e 30 |.0/255.2|55.255.0|
|00000630| 2e 0a 2e 5c 22 0a 2e 54 | 50 0a 2e 42 49 20 5c 2d |...\"..T|P..BI \-|
|00000640| 66 20 22 20 69 70 22 0a | 46 6f 72 63 65 20 74 68 |f " ip".|Force th|
|00000650| 65 20 6c 6f 63 61 6c 20 | 49 50 20 74 6f 20 74 68 |e local |IP to th|
|00000660| 65 20 67 69 76 65 6e 20 | 76 61 6c 75 65 2e 0a 54 |e given |value..T|
|00000670| 68 69 73 20 69 73 20 6d | 61 69 6e 6c 79 20 66 6f |his is m|ainly fo|
|00000680| 72 20 6d 75 6c 74 69 68 | 6f 6d 65 64 20 73 65 72 |r multih|omed ser|
|00000690| 76 65 72 73 2e 0a 2e 5c | 22 0a 2e 54 50 0a 2e 42 |vers...\|"..TP..B|
|000006a0| 20 5c 2d 76 0a 45 6e 61 | 62 6c 65 20 76 65 72 62 | \-v.Ena|ble verb|
|000006b0| 6f 73 65 20 6d 6f 64 65 | 2e 20 59 6f 75 20 77 69 |ose mode|. You wi|
|000006c0| 6c 6c 20 73 65 65 20 6c | 69 6e 65 73 20 6f 66 20 |ll see l|ines of |
|000006d0| 74 65 78 74 20 61 62 6f | 75 74 20 70 61 63 6b 65 |text abo|ut packe|
|000006e0| 74 73 0a 62 65 67 69 6e | 20 70 72 6f 63 65 73 73 |ts.begin| process|
|000006f0| 65 64 20 61 6e 64 20 73 | 6f 6d 65 20 76 65 72 62 |ed and s|ome verb|
|00000700| 6f 73 65 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |ose info|rmation |
|00000710| 61 62 6f 75 74 20 77 68 | 61 74 20 74 68 65 20 44 |about wh|at the D|
|00000720| 4e 53 20 61 6e 64 20 57 | 57 57 0a 74 68 72 65 61 |NS and W|WW.threa|
|00000730| 64 73 20 61 72 65 20 64 | 6f 69 6e 67 2e 0a 2e 5c |ds are d|oing...\|
|00000740| 22 0a 2e 54 50 0a 2e 42 | 20 5c 2d 6e 0a 54 75 72 |"..TP..B| \-n.Tur|
|00000750| 6e 73 20 6f 66 66 20 44 | 4e 53 20 72 65 73 6f 6c |ns off D|NS resol|
|00000760| 75 74 69 6f 6e 2e 20 20 | 59 6f 75 20 63 61 6e 20 |ution.  |You can |
|00000770| 74 75 72 6e 20 69 74 20 | 62 61 63 6b 20 6f 6e 20 |turn it |back on |
|00000780| 75 73 69 6e 67 20 74 68 | 65 20 77 65 62 20 69 6e |using th|e web in|
|00000790| 74 65 72 66 61 63 65 2e | 0a 2e 5c 22 0a 2e 54 50 |terface.|..\"..TP|
|000007a0| 0a 2e 42 20 5c 2d 68 0a | 44 69 73 70 6c 61 79 73 |..B \-h.|Displays|
|000007b0| 20 74 68 65 20 68 65 6c | 70 2f 75 73 61 67 65 20 | the hel|p/usage |
|000007c0| 73 74 61 74 65 6d 65 6e | 74 2e 0a 2e 5c 22 0a 2e |statemen|t...\"..|
|000007d0| 54 50 0a 2e 42 20 5c 2d | 56 0a 44 69 73 70 6c 61 |TP..B \-|V.Displa|
|000007e0| 79 73 20 74 68 65 20 76 | 65 72 73 69 6f 6e 20 69 |ys the v|ersion i|
|000007f0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 2e 0a 2e 5c 22 0a |nformati|on...\".|
|00000800| 2e 54 50 0a 2e 42 20 5c | 2d 50 0a 50 72 65 76 65 |.TP..B \|-P.Preve|
|00000810| 6e 74 73 20 5c 66 49 64 | 61 72 6b 73 74 61 74 5c |nts \fId|arkstat\|
|00000820| 66 52 20 66 72 6f 6d 20 | 70 75 74 74 69 6e 67 20 |fR from |putting |
|00000830| 74 68 65 20 69 6e 74 65 | 72 66 61 63 65 20 69 6e |the inte|rface in|
|00000840| 74 6f 20 70 72 6f 6d 69 | 73 63 75 6f 75 73 20 6d |to promi|scuous m|
|00000850| 6f 64 65 2e 0a 28 44 65 | 66 61 75 6c 74 20 62 65 |ode..(De|fault be|
|00000860| 68 61 76 69 6f 75 72 20 | 69 73 20 74 6f 20 67 6f |haviour |is to go|
|00000870| 20 70 72 6f 6d 69 73 63 | 75 6f 75 73 20 69 66 20 | promisc|uous if |
|00000880| 70 6f 73 73 69 62 6c 65 | 29 0a 2e 5c 22 0a 2e 54 |possible|)..\"..T|
|00000890| 50 0a 2e 42 20 5c 2d 65 | 20 22 20 65 78 70 72 22 |P..B \-e| " expr"|
|000008a0| 0a 50 61 73 73 65 73 20 | 74 68 65 20 73 70 65 63 |.Passes |the spec|
|000008b0| 69 66 69 65 64 20 70 61 | 63 6b 65 74 20 66 69 6c |ified pa|cket fil|
|000008c0| 74 65 72 20 65 78 70 72 | 65 73 73 69 6f 6e 20 74 |ter expr|ession t|
|000008d0| 6f 20 5c 66 49 6c 69 62 | 70 63 61 70 5c 66 52 2e |o \fIlib|pcap\fR.|
|000008e0| 0a 52 65 66 65 72 20 74 | 6f 20 74 68 65 20 5c 66 |.Refer t|o the \f|
|000008f0| 49 6c 69 62 70 63 61 70 | 5c 66 52 20 61 6e 64 20 |Ilibpcap|\fR and |
|00000900| 5c 66 49 74 63 70 64 75 | 6d 70 5c 66 52 20 64 6f |\fItcpdu|mp\fR do|
|00000910| 63 75 6d 65 6e 74 61 74 | 69 6f 6e 20 66 6f 72 0a |cumentat|ion for.|
|00000920| 74 68 65 20 73 79 6e 74 | 61 78 2e 0a 2e 5c 22 0a |the synt|ax...\".|
|00000930| 2e 54 50 0a 2e 42 49 20 | 5c 2d 5c 2d 73 70 79 20 |.TP..BI |\-\-spy |
|00000940| 22 20 69 66 22 0a 43 61 | 70 74 75 72 65 20 70 61 |" if".Ca|pture pa|
|00000950| 63 6b 65 74 73 20 6f 6e | 20 73 70 65 63 69 66 69 |ckets on| specifi|
|00000960| 65 64 20 69 6e 74 65 72 | 66 61 63 65 20 28 68 69 |ed inter|face (hi|
|00000970| 6e 74 3a 20 74 68 65 20 | 6c 6f 63 61 6c 20 6f 6e |nt: the |local on|
|00000980| 65 29 20 61 6e 64 0a 6c | 6f 6f 6b 20 66 6f 72 20 |e) and.l|ook for |
|00000990| 48 54 54 50 20 72 65 71 | 75 65 73 74 73 20 61 6e |HTTP req|uests an|
|000009a0| 64 20 6c 6f 67 20 74 68 | 65 6d 20 74 6f 0a 2e 49 |d log th|em to..I|
|000009b0| 20 64 61 72 6b 73 74 61 | 74 2e 73 70 79 6c 6f 67 | darksta|t.spylog|
|000009c0| 2e 59 59 4d 4d 44 44 0a | 2e 5c 22 0a 2e 53 48 20 |.YYMMDD.|.\"..SH |
|000009d0| 57 48 59 3f 0a 49 20 68 | 61 76 65 20 61 20 63 61 |WHY?.I h|ave a ca|
|000009e0| 62 6c 65 20 72 6f 75 74 | 65 72 20 61 74 20 68 6f |ble rout|er at ho|
|000009f0| 6d 65 20 61 6e 64 20 49 | 20 6c 69 6b 65 20 68 61 |me and I| like ha|
|00000a00| 76 69 6e 67 20 73 6f 6d | 65 20 73 74 61 74 69 73 |ving som|e statis|
|00000a10| 74 69 63 73 20 61 62 6f | 75 74 20 74 68 65 0a 64 |tics abo|ut the.d|
|00000a20| 61 74 61 20 74 68 61 74 | 27 73 20 67 6f 69 6e 67 |ata that|'s going|
|00000a30| 20 74 68 72 6f 75 67 68 | 20 69 74 2e 20 0a 2e 73 | through| it. ..s|
|00000a40| 70 0a 49 27 6d 20 61 20 | 62 69 67 20 66 61 6e 20 |p.I'm a |big fan |
|00000a50| 6f 66 20 5c 66 49 6e 74 | 6f 70 5c 66 52 20 61 6e |of \fInt|op\fR an|
|00000a60| 64 20 49 27 76 65 20 62 | 65 65 6e 20 75 73 69 6e |d I've b|een usin|
|00000a70| 67 20 69 74 20 66 6f 72 | 20 61 20 6c 6f 6e 67 20 |g it for| a long |
|00000a80| 74 69 6d 65 2e 0a 5c 66 | 49 64 61 72 6b 73 74 61 |time..\f|Idarksta|
|00000a90| 74 5c 66 52 20 69 73 20 | 61 6e 20 65 66 66 6f 72 |t\fR is |an effor|
|00000aa0| 74 20 74 6f 20 63 72 65 | 61 74 65 20 61 20 73 6d |t to cre|ate a sm|
|00000ab0| 61 6c 6c 65 72 20 28 69 | 6e 20 74 65 72 6d 73 20 |aller (i|n terms |
|00000ac0| 6f 66 20 6d 65 6d 6f 72 | 79 0a 66 6f 6f 74 70 72 |of memor|y.footpr|
|00000ad0| 69 6e 74 29 20 61 6e 64 | 20 73 74 61 62 6c 65 72 |int) and| stabler|
|00000ae0| 20 5c 66 49 6e 74 6f 70 | 5c 66 52 2e 20 0a 2e 5c | \fIntop|\fR. ..\|
|00000af0| 22 0a 2e 53 48 20 57 48 | 59 20 59 4f 55 20 53 48 |"..SH WH|Y YOU SH|
|00000b00| 4f 55 4c 44 20 42 45 20 | 55 53 49 4e 47 20 4e 54 |OULD BE |USING NT|
|00000b10| 4f 50 0a 5c 66 49 6e 74 | 6f 70 5c 66 52 20 69 73 |OP.\fInt|op\fR is|
|00000b20| 20 74 68 65 20 6f 72 69 | 67 69 6e 61 6c 20 73 77 | the ori|ginal sw|
|00000b30| 69 73 73 2d 61 72 6d 79 | 2d 6b 6e 69 66 65 20 6f |iss-army|-knife o|
|00000b40| 66 20 6e 65 74 77 6f 72 | 6b 20 73 74 61 74 69 73 |f networ|k statis|
|00000b50| 74 69 63 73 2e 20 49 74 | 27 73 0a 74 72 69 65 64 |tics. It|'s.tried|
|00000b60| 20 61 6e 64 20 70 72 6f | 76 65 6e 2e 0a 2e 73 70 | and pro|ven...sp|
|00000b70| 0a 68 74 74 70 3a 2f 2f | 77 77 77 2e 6e 74 6f 70 |.http://|www.ntop|
|00000b80| 2e 6f 72 67 2f 20 0a 2e | 73 70 0a 5c 66 49 64 61 |.org/ ..|sp.\fIda|
|00000b90| 72 6b 73 74 61 74 5c 66 | 52 20 77 6f 72 6b 73 20 |rkstat\f|R works |
|00000ba0| 66 6f 72 20 6d 65 20 6f | 6e 20 4c 69 6e 75 78 20 |for me o|n Linux |
|00000bb0| 61 6e 64 20 46 72 65 65 | 42 53 44 2e 20 49 27 76 |and Free|BSD. I'v|
|00000bc0| 65 20 73 65 65 6e 20 69 | 74 20 63 6f 6d 70 69 6c |e seen i|t compil|
|00000bd0| 65 0a 6f 6e 20 4f 70 65 | 6e 42 53 44 20 28 74 68 |e.on Ope|nBSD (th|
|00000be0| 61 6e 6b 73 20 47 61 6c | 61 68 61 64 21 29 20 61 |anks Gal|ahad!) a|
|00000bf0| 6e 64 20 53 6f 6c 61 72 | 69 73 20 28 74 68 61 6e |nd Solar|is (than|
|00000c00| 6b 73 20 74 72 6e 65 70 | 61 6c 21 29 20 6d 61 63 |ks trnep|al!) mac|
|00000c10| 68 69 6e 65 73 20 74 68 | 72 6f 75 67 68 0a 73 68 |hines th|rough.sh|
|00000c20| 65 6c 6c 20 61 63 63 6f | 75 6e 74 73 20 49 20 77 |ell acco|unts I w|
|00000c30| 61 73 20 70 72 6f 76 69 | 64 65 64 2e 20 44 61 6e |as provi|ded. Dan|
|00000c40| 69 65 6c 20 42 6f 67 61 | 6e 20 67 6f 74 20 69 74 |iel Boga|n got it|
|00000c50| 20 77 6f 72 6b 69 6e 67 | 20 6f 6e 20 4d 61 63 20 | working| on Mac |
|00000c60| 4f 53 20 58 2e 0a 2e 5c | 22 0a 2e 53 48 20 57 48 |OS X...\|"..SH WH|
|00000c70| 59 20 59 4f 55 20 53 48 | 4f 55 4c 44 4e 27 54 20 |Y YOU SH|OULDN'T |
|00000c80| 42 45 20 55 53 49 4e 47 | 20 4e 54 4f 50 0a 49 66 |BE USING| NTOP.If|
|00000c90| 20 79 6f 75 27 72 65 20 | 68 61 76 69 6e 67 20 69 | you're |having i|
|00000ca0| 73 73 75 65 73 20 77 69 | 74 68 20 5c 66 49 6e 74 |ssues wi|th \fInt|
|00000cb0| 6f 70 5c 66 52 27 73 20 | 6d 65 6d 6f 72 79 20 66 |op\fR's |memory f|
|00000cc0| 6f 6f 74 70 72 69 6e 74 | 20 6f 72 20 73 74 61 62 |ootprint| or stab|
|00000cd0| 69 6c 69 74 79 20 74 68 | 65 6e 0a 79 6f 75 20 6d |ility th|en.you m|
|00000ce0| 69 67 68 74 20 77 61 6e | 74 20 74 6f 20 67 69 76 |ight wan|t to giv|
|00000cf0| 65 0a 2e 49 20 64 61 72 | 6b 73 74 61 74 0a 61 20 |e..I dar|kstat.a |
|00000d00| 74 72 79 2e 20 0a 2e 73 | 70 0a 54 68 65 20 63 6f |try. ..s|p.The co|
|00000d10| 64 65 20 69 73 20 61 20 | 6c 6f 74 20 73 69 6d 70 |de is a |lot simp|
|00000d20| 6c 65 72 20 61 6e 64 20 | 73 68 6f 72 74 65 72 20 |ler and |shorter |
|00000d30| 73 6f 20 69 74 27 73 20 | 61 20 6c 6f 74 20 65 61 |so it's |a lot ea|
|00000d40| 73 69 65 72 20 74 6f 20 | 69 6d 70 6c 65 6d 65 6e |sier to |implemen|
|00000d50| 74 0a 61 6e 79 20 73 6f | 72 74 20 6f 66 20 63 75 |t.any so|rt of cu|
|00000d60| 73 74 6f 6d 20 6d 6f 6e | 69 74 6f 72 69 6e 67 20 |stom mon|itoring |
|00000d70| 79 6f 75 20 6e 65 65 64 | 2e 20 20 5c 66 49 64 61 |you need|.  \fIda|
|00000d80| 72 6b 73 74 61 74 5c 66 | 52 20 64 6f 65 73 6e 27 |rkstat\f|R doesn'|
|00000d90| 74 20 62 6f 74 68 65 72 | 0a 77 69 74 68 20 6d 75 |t bother|.with mu|
|00000da0| 6c 74 69 63 61 73 74 20 | 61 6e 64 20 6e 6f 6e 2d |lticast |and non-|
|00000db0| 49 50 20 70 72 6f 74 6f | 63 6f 6c 73 20 6c 69 6b |IP proto|cols lik|
|00000dc0| 65 20 41 52 50 20 28 69 | 66 20 79 6f 75 20 6e 65 |e ARP (i|f you ne|
|00000dd0| 65 64 20 61 63 63 6f 75 | 6e 74 69 6e 67 20 66 6f |ed accou|nting fo|
|00000de0| 72 0a 74 68 6f 73 65 2c | 20 75 73 65 20 5c 66 49 |r.those,| use \fI|
|00000df0| 6e 74 6f 70 5c 66 52 29 | 20 62 75 74 20 69 74 20 |ntop\fR)| but it |
|00000e00| 64 6f 65 73 20 61 63 63 | 6f 75 6e 74 69 6e 67 20 |does acc|ounting |
|00000e10| 70 65 72 20 6c 6f 63 61 | 6c 20 70 6f 72 74 20 28 |per loca|l port (|
|00000e20| 77 68 69 63 68 0a 5c 66 | 49 6e 74 6f 70 5c 66 52 |which.\f|Intop\fR|
|00000e30| 20 64 6f 65 73 6e 27 74 | 29 20 0a 2e 5c 22 0a 2e | doesn't|) ..\"..|
|00000e40| 53 48 20 53 50 59 4c 4f | 47 20 46 4f 52 4d 41 54 |SH SPYLO|G FORMAT|
|00000e50| 0a 54 68 65 20 66 6f 72 | 6d 61 74 20 6f 66 20 74 |.The for|mat of t|
|00000e60| 68 65 0a 2e 42 49 20 2d | 2d 73 70 79 0a 6c 6f 67 |he..BI -|-spy.log|
|00000e70| 73 20 69 73 3a 0a 0a 59 | 59 59 59 2d 4d 4d 2d 44 |s is:..Y|YYY-MM-D|
|00000e80| 44 20 68 68 3a 6d 6d 3a | 73 73 20 73 72 63 5f 69 |D hh:mm:|ss src_i|
|00000e90| 70 20 6d 65 74 68 6f 64 | 20 68 74 74 70 3a 2f 2f |p method| http://|
|00000ea0| 68 6f 73 74 2f 75 72 6c | 0a 0a 57 68 65 72 65 20 |host/url|..Where |
|00000eb0| 6d 65 74 68 6f 64 20 69 | 73 20 47 45 54 2c 20 48 |method i|s GET, H|
|00000ec0| 45 41 44 2c 20 6f 72 20 | 50 4f 53 54 2e 0a 2e 5c |EAD, or |POST...\|
|00000ed0| 22 20 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |" ------|--------|
|00000ee0| 2d 2d 2d 2d 2d 2d 0a 2e | 53 48 20 53 45 45 20 41 |------..|SH SEE A|
|00000ef0| 4c 53 4f 0a 70 63 61 70 | 28 33 29 0a 2e 62 72 0a |LSO.pcap|(3)..br.|
|00000f00| 68 74 74 70 3a 2f 2f 66 | 72 65 73 68 6d 65 61 74 |http://f|reshmeat|
|00000f10| 2e 6e 65 74 2f 70 72 6f | 6a 65 63 74 73 2f 64 61 |.net/pro|jects/da|
|00000f20| 72 6b 73 74 61 74 2f 0a | 2e 62 72 0a 68 74 74 70 |rkstat/.|.br.http|
|00000f30| 3a 2f 2f 70 75 72 6c 2e | 6f 72 67 2f 6e 65 74 2f |://purl.|org/net/|
|00000f40| 64 61 72 6b 73 74 61 74 | 0a 2e 5c 22 0a 2e 53 48 |darkstat|..\"..SH|
|00000f50| 20 41 55 54 48 4f 52 0a | 45 6d 69 6c 20 4d 69 6b | AUTHOR.|Emil Mik|
|00000f60| 75 6c 69 63 20 61 6e 64 | 20 6f 74 68 65 72 73 20 |ulic and| others |
|00000f70| 28 73 65 65 20 41 55 54 | 48 4f 52 53 29 2e 0a 2e |(see AUT|HORS)...|
|00000f80| 62 72 0a 65 2d 6d 61 69 | 6c 3a 20 65 6d 69 6b 75 |br.e-mai|l: emiku|
|00000f90| 6c 69 63 40 6f 70 74 75 | 73 68 6f 6d 65 2e 63 6f |lic@optu|shome.co|
|00000fa0| 6d 2e 61 75 0a 2e 62 72 | 0a 77 77 77 3a 20 68 74 |m.au..br|.www: ht|
|00000fb0| 74 70 3a 2f 2f 70 75 72 | 6c 2e 6f 72 67 2f 6e 65 |tp://pur|l.org/ne|
|00000fc0| 74 2f 6f 76 65 72 6c 6f | 61 64 0a 00 00 00 00 00 |t/overlo|ad......|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 00 01 00 00 00 01 00 | 00 00 00 00 00 00 00 1e |........|........|
|00001010| 54 68 69 73 20 72 65 73 | 6f 75 72 63 65 20 66 6f |This res|ource fo|
|00001020| 72 6b 20 69 6e 74 65 6e | 74 69 6f 6e 61 6c 6c 79 |rk inten|tionally|
|00001030| 20 6c 65 66 74 20 62 6c | 61 6e 6b 20 20 20 00 00 | left bl|ank   ..|
|00001040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 01 00 00 00 01 00 | 00 00 00 00 00 00 00 1e |........|........|
|00001110| 00 00 00 00 00 00 00 00 | 00 1c 00 1e ff ff 00 00 |........|........|
|00001120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+