			Trafshow Version 3.


This directory contains trafshow source code, a tool for real-time network
traffic visualization.

Trafshow continuously display the information regarding packet traffic on
the configured network interface that match the boolean expression.
It periodically sorts and updates this information.

This funny program may be useful for locating suspicious network traffic on
the net or to evaluate current utilization of the network interface.

If trafshow has been compiled with modern curses libraries such as Slang or
Ncurses it been able to show colored traffic according to your configuration
on color-capable terminal.

Trafshow now use libpcap, a system-independent interface for user-level
packet capture.  Before building trafshow, you must first retrieve and
build libpcap, also from LBL, in:

	ftp://ftp.ee.lbl.gov/libpcap.tar.Z

Trafshow can use variouse curses libraries, a terminal-independent set of
screen functions with optimal cursor motion. Currently trafshow may be
compiled with any curses library, but not all of them work with color
functions properly. Slang or Ncurses is prefered because it right supports
color. Note for termcap users, only the Slang curses is suitable for you.
Before building trafshow, you must first retrieve and build one of the
following curses library:

	ftp://space.mit.edu/pub/davis/slang/slang0.99-38.tar.gz
or
	ftp://ftp.netcom.com/pub/zm/zmbenhal/ncurses/ncurses-1.9.9g.tar.gz

Once libpcap and libslang is built and installed, you can build trafshow
using the procedure in the INSTALL file.

The original distribution is available via anonymous ftp to ftp.nsk.su,
in /pub/unix/trafshow.tar.gz.

Problems, bugs, questions, desirable enhancements, etc., should be sent to
the email address trafshow@rinet.nsk.su.



The trafshow is currently in ALFA release, it has been tested on the
following operating systems:
--------------------------------------------------------------------------

trafshow version 3.0a3
compiled for i386-pc-bsdi2.0.1 with
 shlicc2 -O2 -DHAVE_CONFIG_H -I. -lpcap -lslang -ltermcap
	pcap library version 0.4a2
	slang curses version 9938
	colors support

trafshow version 3.0a3
compiled for i386-pc-bsdi3.0 with
 shlicc2 -O2 -DHAVE_CONFIG_H -I. -lpcap -lcurses -ltermcap
	pcap library version 0.4a2
	unknown curses library
	no colors support

trafshow version 3.0a3
compiled for sparc-sun-solaris2.4 with
 gcc -O2 -DHAVE_CONFIG_H -I. -lsocket -lnsl -lpcap -lslang -ltermcap
	pcap library version 0.4a2
	slang curses version 9938
	colors support

trafshow version 3.0a3
compiled for i486-pc-linux-gnu with
 gcc -O2 -DHAVE_CONFIG_H -I. -Ilinux -lpcap -lncurses -ltermcap
	pcap library version 0.4a2
	ncurses version 1.9.9g
	colors support


Trafshow has been successful compiled but not tested enough on the
following operating systems:
--------------------------------------------------------------------------

trafshow version 3.0a3
compiled for i386-unknown-freebsd2.2.2 with
 gcc -O2 -DHAVE_CONFIG_H -I. -lpcap -lncurses -ltermcap
	pcap library version unknown
	ncurses version unknown
	colors support

trafshow version 3.0a3
compiled for alpha-dec-osf4.0 with
 gcc -O2 -DHAVE_CONFIG_H -I. -I../libpcap ../libpcap/libpcap.a -lcurses -ltermcap
	pcap library version 0.4a2
	unknown curses version
	colors support

trafshow version 3.0a3
compiled for mips-sgi-irix5.3 with
 cc -O -xansi -signed -g3 -DHAVE_CONFIG_H -I. -I../libpcap -I/usr/local/include ../libpcap/libpcap.a -lcurses -ltermcap
	pcap library version 0.4a2
	unknown curses version
	colors support
