NAME

       tttprobe  - Tele Traffic Tapper probe -  A probe to collect local traffic-data and send it
       to a remote instance of tttview

SYNTAX

       ttt [-interface device] [-interval ms] [-multicast] [-port dest_port] [-ttl  time-to-live]
       [Destination]

DESCRIPTION

       tttprobe  is  the  probe  program  in  the  ttt  program  suite. tttprobe locally collects
       traffic-data and sends it over a network to an instance of tttview.

       To run tttview, it is not necessary to be "root".

       The ttt program suite is yet another descendant of tcpdump but it is capable of real-time,
       graphical,  local  and  remote  traffic-monitoring.   It won't replace tcpdump, rather, it
       helps you find out what to look into with tcpdump.

OPTIONS

       ttt [-interface device] [-interval ms] [-multicast] [-port dest_port] [-ttl  time-to-live]
       [Destination]

       -interface device
              specifies the interface for packet capture. If not specified, the default interface
              is chosen.

       -interval ms
              Sets the interval in Milliseconds. If omitted, a interval of 1000 msec. is used  as
              default.

       -multicast
              Shorthand for the default multicast destination "224.8.8.0".

       -port dest_port
              Specifies  the  udp port number on the remote host where the traffic-data should be
              sent to. If omitted, port 7288 is used as default.

       -ttl time-to-live
              Specifies the time-to-live for multicast. If omitted,  1  is  used  as  default  to
              restrict the multicast to the local subnet.

       Destination
              Specifies the remote host where the traffic-data should be sent to. Destination can
              be omitted only, if -multicast is specified. Destination can be a uni- or multicast
              address.

EXAMPLES

       Remark:  "hostA"  is  allways  the  host where traffic-data is collected with tttprobe and
       "hostB" is allways the host where the traffic-data is displayed with tttview.

       point-to-point monitoring:

              hostA: tttprobe hostB
              hostB: tttview

              or:

              hostA: tttprobe ip_of_hostB
              hostB: tttview

       multicast:

              when using the default multicast address:

              hostA: tttprobe -multicast
              hostB: tttview -multicast

              this is equivalent to:

              hostA: tttprobe 224.8.8.0
              hostB: tttview -addr 224.8.8.0

AUTHORS

       tttprobe was written by Kenjiro Cho < kjc@csl.sony.co.jp>.

       This      manual       page       was       written       by       Thomas       Scheffczyk
       <thomas.scheffczyk@verwaltung.uni-mainz.de>,  for  the Debian GNU/Linux system (but may be
       used by others).

SEE ALSO

       ttt(1), tttview(1)