SourceForge project | Download | Forum | Browse CVS

Trafd - traffic statistics collection and visualization suite

Contents

• News
• Summary
• Requirements
• Download
• Contributors
• Related projects

News

• Apr 8 2008 -- trafd-3.0.3-b7 released.
  • Compile with large file offset support under Linux
  • Linux compatibility
  • GCC 4 compatibility
• Jan 21 2007 -- trafd-3.0.3-b6 released.
  • All tools were revised to support 64 bit arch (tested on FreeBSD/amd64)
  • All tools were revised to support database files > 2 GB in size
• Full list of changes

Summary

Trafd is a suite of tools to collect and visualize network traffic statistics. Trafd itself is a daemon listening on a BPF device (using pcap) and storing collected statistics in a flat file database. Traflog is used to select and visualize collected statistics.

Trafd is not actively maintained. Occasionally we fix bugs and add some required features, but if You want an up to date traffic collector consider one of the alternatives.

Features:

• Logging all ip (tcp/udp/other) traffic on a network interface. It logs the following information: src/dst ip address, service port number (for TCP/UDP) number of data/header bytes of a packets, record date and time;
• Stores it's accounting information in simple, one-file per interface database;
• Flush/restore in-memory cache on/from the harddisk.
• Retrieve/store in-memory data trough the network.

Requirements

• Unix box
• libpcap
• Tested on FreeBSD and Linux (i386 and amd64) platforms. Should compile and run on any platform, that makes use of libpcap with minor modifications;

Download

The latest version is trafd-3.0.3-b7.

Older versions archived here.

Original BPFT sources can be found on ftp://ftp.turbo.nsk.su/pub/unix/ in bpft-X.X.tgz. They also archived here.

Contributors

• Vladimir Vorobyev <bob(at)turbo.nsk.su> is an author of the BPFT tools;
• Stanislav Svirid <count(at)riss-telecom.ru>, Vitaly V. Belekhov <vitaly(at)riss-telecom.ru> and Dmitry Frolov <frolov(at)riss-telecom.ru> contributed to trafd.

Related projects

• bpft4 -- trafd fork
• IPACCTD by Roman V. Palagin <romanp(at)wuppy.net.ru> makes use of ipfw divert/tee mechanism for traffic counting. Here you can find tee patch to FreeBSD 3.x;
• ng_ipacct, Another project of Roman Palagin is a FreeBSD netgraph(4) module for in-kernel traffic statistics collection.
• FreeBSD ng_netflow -- NetFlow sensor.
• IPCAD.
• flow-tools -- Suite of tools and library to work with NetFlow data.
• softflowd, flowd, pfflowd -- set of tools for NetFlow statistics collection.
• IPBAND.
• NeTAMS.
• Trafshow realtime traffic monitor
• IPTraf network traffic analyzer
• NTop network traffic analyzer
• fprobe pcap based NetFlow sensor
• CAIDA Tools collection of links to network-related tools
• SWITCH catalogue of network tools