From owner-freebsd-questions  Tue Apr 22 01:18:40 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id BAA01533
          for questions-outgoing; Tue, 22 Apr 1997 01:18:40 -0700 (PDT)
Received: from mail.island.net.au (mail.island.net.au [203.102.137.3])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id BAA01526
          for <freebsd-questions@freebsd.org>; Tue, 22 Apr 1997 01:18:36 -0700 (PDT)
Received: from scotland.island.net.au (syd-dialup-06.island.net.au [203.102.137.16]) by mail.island.net.au (8.8.3/8.8.3) with SMTP id SAA29564 for <freebsd-questions@freebsd.org>; Tue, 22 Apr 1997 18:18:28 +1000 (EST)
Message-Id: <3.0.1.32.19970422181826.006e0e94@mail.island.net.au>
X-Sender: hugh@mail.island.net.au
X-Mailer: Windows Eudora Light Version 3.0.1 (32)
Date: Tue, 22 Apr 1997 18:18:26 +1000
To: freebsd-questions@freebsd.org
From: Hugh Blandford <hugh@island.net.au>
Subject: Help with bpf & traflog
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Can someone please help me with traflog.  I am looking at a way of
measuring fairly low volume bandwidth from a particular class C on my
ethernet network.

Someone sent me the following:

You can take another programm from archive (bpft-2.0.tgz, or previous
version? which you can find at ftp.nsk.su/pub/unix) which allow you to
collect statistics as you like.

Inside which is trafshow, traflog etc.

Trafshow is great except it doesn't write its output to file.  I cannot
seem to get traflog to use the tcpdump style expressions like net 203.14.36
to monitor all traffic to/from that network.

All I really want is the megabytes in and out.  I am open to suggestions
and would appreciate any help.

Regards,

Hugh.