etch  ] [  etch-m68k  ] [  lenny  ] [  squeeze  ] [  sid  ]
[ Source: tcpflow  ]

Package: tcpflow (0.21.ds1-5 and others)

TCP flow recorder

tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being transmitted. In contrast, tcpflow reconstructs the actual data streams and stores each flow in a separate file for later analysis.

tcpflow understands sequence numbers and will correctly reconstruct data streams regardless of retransmissions or out-of-order delivery. However, it currently does not understand IP fragments; flows containing IP fragments will not be recorded properly.

tcpflow is based on the LBL Packet Capture Library and therefore supports the same rich filtering expressions that programs like 'tcpdump' support. tcpflow can also rebuild flows from data captured with 'tcpdump -w'.

Tags: System Administration: Monitoring, User Interface: Command Line, Networking: Scanning, Network Protocol: IP, Role: Program, Scope: Utility, Purpose: Monitoring

Other Packages Related to tcpflow

  • depends
  • recommends
  • suggests
  • dep: libc0.1 (>= 2.3) [kfreebsd-amd64, kfreebsd-i386]
    GNU C Library: Shared libraries
    also a virtual package provided by libc0.1-udeb
  • dep: libc6 (>= 2.3) [amd64, hppa, i386, mips, mipsel]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6-udeb
    dep: libc6 (>= 2.4) [armel, powerpc, s390]
    dep: libc6 (>= 2.5) [avr32]
    dep: libc6 (>= 2.5-5) [m68k]
    dep: libc6 (>= 2.6) [sparc]
  • dep: libc6.1 (>= 2.3) [ia64]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6.1-udeb
    dep: libc6.1 (>= 2.4) [alpha]
  • dep: libpcap0.8 (>= 0.9.8) [not m68k]
    system interface for user-level packet capture
    dep: libpcap0.8 (>= 1.0.0-1) [m68k]
  • sug: tcpdump
    A powerful tool for network monitoring and data acquisition

Download tcpflow

Download for all available architectures
Architecture Version Package Size Installed Size Files
alpha 0.21.ds1-5 26.7 kB96 kB [list of files]
amd64 0.21.ds1-5 25.9 kB88 kB [list of files]
armel 0.21.ds1-5 24.5 kB84 kB [list of files]
avr32 (unofficial port) 0.21.ds1-5 24.4 kB84 kB [list of files]
hppa 0.21.ds1-5 26.0 kB88 kB [list of files]
i386 0.21.ds1-5 24.3 kB84 kB [list of files]
ia64 0.21.ds1-5 30.4 kB108 kB [list of files]
kfreebsd-amd64 0.21.ds1-5 25.7 kB62 kB [list of files]
kfreebsd-i386 0.21.ds1-5 24.2 kB58 kB [list of files]
m68k (unofficial port) 0.21.ds1-4 23.7 kB88 kB [list of files]
mips 0.21.ds1-5 25.7 kB92 kB [list of files]
mipsel 0.21.ds1-5 25.9 kB92 kB [list of files]
powerpc 0.21.ds1-5 25.7 kB88 kB [list of files]
s390 0.21.ds1-5 25.6 kB88 kB [list of files]
sparc 0.21.ds1-5 25.1 kB88 kB [list of files]