Requirements ------------ libpcap 0.7.2 or higher. You can use earlier versions if you fix a minor C++ bug in the pcap.h header file as described in README. Building and Installing ----------------------- To build and install: ./configure make make install Run ./configure --help to see a list of options to change things like the installation directory. If configure tells you you don't have pcap.h when you do, or if make fails with previous declaration errors, see README. Using ----- To run tcptrack, you need to specify an interface for it to sniff: tcptrack -i eth0 You can also provide a pcap filter expression: tcptrack -i eth0 src or dst 192.168.33.92 and port 80 That will make tcptrack only monitor web connections to or from 192.168.33.92 on eth0. The expression syntax is the same as you'd use for tcpdump and possibly other pcap-based sniffers. While in tcptrack there aren't any interactive commands to do anything yet. Just hit ctrl-C when you want to exit. See the man page, tcptrack(1), for more information.