From owner-freebsd-ports Thu Aug 19 15:51: 6 1999 Delivered-To: freebsd-ports@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id 426BB14EDA for ; Thu, 19 Aug 1999 15:51:03 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.9.3/8.9.2) id PAA86175; Thu, 19 Aug 1999 15:50:00 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: by hub.freebsd.org (Postfix, from userid 32767) id A8D7C14BCF; Thu, 19 Aug 1999 15:41:11 -0700 (PDT) Message-Id: <19990819224111.A8D7C14BCF@hub.freebsd.org> Date: Thu, 19 Aug 1999 15:41:11 -0700 (PDT) From: jose@we.lc.ehu.es To: freebsd-gnats-submit@freebsd.org X-Send-Pr-Version: www-1.0 Subject: ports/13262: new port: net/tcpflow Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Number: 13262 >Category: ports >Synopsis: new port: net/tcpflow >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Thu Aug 19 15:50:00 PDT 1999 >Closed-Date: >Last-Modified: >Originator: Jose M. Alcaide >Release: 3.2-RELEASE >Organization: Universidad del Pais Vasco - Dept. de Electricidad y Electronica >Environment: N/A >Description: tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores it in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' only shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being transmitted. In contrast, tcpflow reconstructs the actual data streams and stores each flow in a separate file for later analysis. tcpflow understands sequence numbers and will correctly reconstruct data streams regardless of retransmissions or out-of-order delivery. However, it currently does not understand IP fragments; flows containing IP fragments will not be recorded properly. tcpflow is based on the LBL Packet Capture Library (available at ftp://ftp.ee.lbl.gov/libpcap.tar.Z) and therefore supports the same rich filtering expressions that programs like 'tcpdump' support. tcpflow stores all captured data in files that have names of the form 128.129.130.131.02345-010.011.012.013.45103 where the contents of the above file would be data transmitted from host 128.129.131.131 port 2345, to host 10.11.12.13 port 45103. Note: this port includes a small patch that adds the capability of reading the packets from a tcpdump(1) capture file, using a new option (-r). WWW: http://www.circlemud.org/~jelson/software/tcpflow/ - Jose M. Alcaide jose@we.lc.ehu.es >How-To-Repeat: N/A >Fix: check and commit the following port (shar, gzipped and uuencoded): begin 644 tcpflow.shar.gz M'XL("/."O#<"`W1C<&9L;W)2T] M32%MF864`^F4LZ6;46PE\>#87LLFS>Z9_=OWNY+LF#R8#+-G.0TXEG1U']]] M27W.>F-7,OSC3(Z%YS$>V6/W7EB,7?-[P=R8N3X&AZXGRBP2DP`ON3^+QZX_ M8@,Q#")1>,YBHN*Y/N9PW\%7X;/$#[E]1Q0&,R;\6$2T9%N.%;%M[-`-8BS` MA`F?@8@="1X+YKB1L.,@2)%[-01!-72C?PI55XCE$EK1&1V8$?<]>7+1K:\D5UPZ`73A]^JX=UH M^4WUY-/%1:?;6S%RVKD^N5KQ_O+\['IQ_@6_$R3CXG0>VV,A5[_5?RN<+PPK M7:UZ5YTX^Y!1V..`V:S"\J).[J!85@GS+]D;5G7$?=5/H.;&FY_J*Y0Z/.8LC[LN)&\?8C$L6\BAFP9#U3BX)#CX01F!A)2(J=PJ/[[1> M)@V!QR52##$'NS)>N)')9,*C&?%&44/$DDF! M(!+X2O(IG+_,!DG,$IEP#RN=0$B_&&M>:4[A1@L,1HL@:<=ZWD"0[7-J`$]G MOO+]B,NXS%)'N$%X@2;B*+&Q.6VJ:6@]XKW@$YE7C^`V0IDR@J]$$-`N!3#R M.84]#]^B3#-6WFZ)[XA(QB!'@OXS$;XMF)],!GBK-E$AS@XB"GH0(\><$33E M*!(C'CGPI)V\^.:<2*`^$Q<8UN',(!8[,VL!>P. M./F(,?+YNW-VJ8S/3C2(V;D[B`@6)7[/78\/H%@.!0SCL%6MXKBE2*8C()PR`RAI5\`KA$KJU2D4E,XGL(JVJM*;0; MW,I%X!I2#T0QD.!D,\VZHW$#:.@4IDBJY.1C=V4K8@7,38@0R_W4&R^M>N/( MJC=K^-2M6J.YMU^IU6M6K8YO]08^36MOOUYKTM(I":F(D4F4#0QQ/J!LK>`X M#1+/(9,L184AHDOA9AS(.+=QG3Z,Q&2T.;PD8'H*6,)@`^-Z6+&A=%&XH7S> MTK6`&G-]VTLE&)2ZM"NXXVAC0%Q^XGAN3\Z>*`+0=Y;>8D,8#8A24 MC!U*]9U4U:8X2216I`0X0O*4!2%%-U:J1#N&Q2]?OK38.%;XF4ZGENU&MB#Q=J#F/I0LU`>EBX/I9=G]LZFIVLH)D/3?IE'7,I./@ MY3GKP@S:\Y`E/)UN4.\9"H!_:RN+P,_9+P@Y-"%"2$3(=UI;P%N#1DXILNH* M$6^W&C763D8)(?+HZ(@F?!D'$PQL+1B)O5XRTAM,IQ4_G#D_J,?"S2GTT6U? M=(Y39BIZWY-VK_/AT]59Y_J8RJK"S47[NM>YZE^?]>C5/`X]Q%&8#*H&2GD$ M7;3/NCU\.E?'6\O0P82/[>O^R:?N^[,/GZ_`RTR_O6AWZ\=;*6=6G=Y9QK?8 MZX%T+!6/)G=O"H]88TT-9PK-U76<'MRTEENL3A_!\\+4M;!>F`=$52H5P,?U M+1N:=D=;7[!).XQ8H\YJS=9>K57?,Y#8W=TU,[=ZXX3@@@%6/V@U#UJU`S/I M[5M6.6B6#]FN^OWVK0H@PQ`I(1Z69(P$3#\3-B[F3&.F1C M0$S9^NT#$+RY]6_][3+H;6VQR_;)W]H?.F7V2^?J^NQ3=^?5ZGT2R4<(H=CC M:\4>A_+^&QX&$.-[?S"+A:2OCJZO^AZRMT9KQ67ND-L"5.;I[YMBG%;O;KRZ$JD@O(8.>X1.9=`B]DWM0YE+"4JMFRZN MD'DDTN8FI.P6I4`9(+"H.;K&+#D!%8JFNU39>&<3:DY+*YHI1;_*FDIDMQ\= MI>G3SOOVY_->_[3S[O.'_GGGE\XY425,'3;*!VP7O]=C*MO(;9$?38,(S3*U MR:13JHFF8ZI0(+_G2N3U#7BFGU(\"P6[W7:'T,70';$*O]U6Y2A7A$C%V3:; M:2*$)I0.$TF:#5!=VDF02#8)'+$!5BI12V7TAZF<++')[K)%M:Z+T!3X%35+ MU8'V&-6V'5.]7,*S/Q*DJJ)5W$BD^Q8Y](!R!56F7*4E2CKWW*/F!J3@:/7: M([3F2&^E14E%E8JK:DI#AZ#Q\HB@<52;0X.@Z@OA])7[LV-6HRW5$$G)7B#Z MNC8-=#^?GVMEZP'75VDT&\A6S'=^,$@%8:]939$@+=3W:F2Q^EZC?)2:C'[\H&^< M`7R5#:3KYZ3-)0MBL[:\H9+QH%9N-"'DP7ZYV4BES$ORE!2HTY_:;&4& M5-BIOB"+4*6/\((.U7547Q\*VQW.$+0T^-&"H`^$6PY=-':S9WD3*@ASBR@J?*$D>I"J`9M3VB MN^-1/8`DIKK+.\)`[J@HTTHZ\UC!I&^^EA2?U/E"/7=@?:=LW,GL]CL#>D7> MNO\;1&:66L+D;BX4_0E4;JVVW$J<51;`"7DF='2/P!-EMER%0:."C>"P%HM_ M`1"[CX$4,4>H2G%*IPBI39DJ>M39CJ`F,^>+\Y+*E:G4#LHXPVP>%3GAGZC1 M=7Z=L;\6TLOL&E[70!HBE(TA_E\N\V"WW]-J(+4M1YJH>.GND32F%JQTQ M_T%E8@?AK$^CI9_H]U?ZGGK==:^X>M1BW7\^;G/^A\CU3G MNY?K?!MU*FSPV]0UUKLS=HNV[E8W=K?#JUL;K[_A\Y6>=O6$"!-4]:['=S&^ MJ\85@5S1FUMO77]DZA3L[+*']&_V/R+S-K,NZ>FW&?G;&Q!ZVG4&2V\S0&&S M^PQ8R#J[2LM_5MHCL#QX4R\79XI@%X639M\A1X,,>#^B18WPEI(E,\F+-@.F->M!"VW+VFFPX>.9`O M3!0V%)=PY?E>]/;77RO%(BU0/&J10SQT@Z7B7MUP1W3P/NZ:VN\3-U*5R[N_*;%#@!! MWZE0M9B-2J/)#)1C6OB$VM_<58^<7\+(!*P1D46'LU;:DUGGQCP]=E]B);'$$RG9515Y-I7H:MQ<)0JV3J[9-NWPW>. MI.H@)MC@#T+@-@9[42+2FA+S'"&1Y_2A`W>S6\[2%_J#B,%QOQX+*5[ M:=%C5SW2?Z`@QQ(NW7C10E*RDJ0J8KMJZ)#VU#E06FP8JB7$'T-738-6B>A0 MA;X8UI!*RQLMW5^U-%..C.P_5(X,D@@.\'2]%#8X25Y]&J[_!\7*LW!]B[?9 M2?C\/UVL/P+/YJP[^\XF%`LW%Z?[K)2_F5"7G*-_H6IFS2.QYQSN-^U!8U#; C.SIHB%J3'PP.;7$HAH>-H\)CM`OBNQL7"O\%/PY#[PRelease-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message