About bpfcount

bpfcount generates network use statistics for various categories of network traffic defined by BPF filter expressions (which are commonly used for filtering by sniffers such as tcpdump(1)). bpfcount takes as input a saved network packet capture file (such would be generated by 'tcpdump -w outfile' and a series of BPF filter expressions. bpfcount will output a series of lines containing the average number of bytes per second received by each filter expression.


The 'bpfgraph' part above is a perl program included in the bpfcount package. As an alternative to capturing network traffic with tcpdump, see my program netdumpd for a daemon which can help with this task and supports automated file rotation.

News

Jul 6, 2005 - bpfcount 0.9.0 release

This is the first public release of bpfcount. This is a beta release. See the README for some things that may be broken yet.

Getting It

The latest stable version is 0.9.0 released July 6 2005. A change log is available.

Documentation

Feedback

If you come across a bug not listed in the README or TODO file or if you have any comments or questions feel free to email me (Steve Benson). Don't forget to remove the NOSPAMs from the email address there.

Links