.TH "tttprobe" "1" "1.7" "Kenjiro Cho" "net"
.SH "NAME"
tttprobe \- Tele Traffic Tapper probe \-  A probe to collect local traffic\-data and send it to a remote instance of tttview
.SH "SYNTAX"
.LP  
ttt [\fB\-interface\fR device] [\fB\-interval\fR ms] [\fB\-multicast\fR] [\fB\-port\fR dest_port] [\fB\-ttl\fR time\-to\-live] [\fBDestination\fR]
.SH "DESCRIPTION"
.LP 
\fItttprobe\fR is the probe program in the ttt program suite. \fItttprobe\fR locally collects traffic\-data and sends it over a network to an instance of \fItttview\fR.
.LP 
To run \fItttview\fR, it is \fBnot\fR necessary to be "root".
.LP 
The ttt program suite is yet another descendant of tcpdump but it is capable of real\-time, graphical, local and remote traffic\-monitoring.  It won't replace tcpdump, rather, it helps you find out what to look into with tcpdump.
.SH "OPTIONS"
.LP  
ttt [\fB\-interface\fR device] [\fB\-interval\fR ms] [\fB\-multicast\fR] [\fB\-port\fR dest_port] [\fB\-ttl\fR time\-to\-live] [\fBDestination\fR]

.LP 
.IP "\fB\-interface\fR device"
specifies the interface for packet capture. If not specified, the default interface is chosen.
.IP "\fB\-interval\fR ms"
Sets the interval in Milliseconds. If omitted, a interval of 1000 msec. is used as default.
.IP "\fB\-multicast\fR"
Shorthand for the default multicast destination "224.8.8.0".
.IP "\fB\-port\fR dest_port"
Specifies the udp port number on the remote host where the traffic\-data should be sent to. If omitted, port 7288 is used as default.
.IP "\fB\-ttl\fR time\-to\-live"
Specifies the time\-to\-live for multicast. If omitted, 1 is used as default to restrict the multicast to the local subnet.
.IP "\fBDestination\fR"
Specifies the remote host where the traffic\-data should be sent to. Destination can be omitted only, if \fB\-multicast\fR is specified. Destination can be a uni\- or multicast address.
.SH "EXAMPLES"
.LP 
Remark: "hostA" is allways the host where traffic\-data is collected with tttprobe and "hostB" is allways the host where the traffic\-data is displayed with tttview.
.LP 
\fBpoint\-to\-point monitoring:\fR
.IP 
hostA: tttprobe hostB
.br 
hostB: tttview
.IP 
or:
.IP 
hostA: tttprobe ip_of_hostB
.br 
hostB: tttview
.LP 
\fBmulticast:\fR
.IP 
when using the default multicast address:
.IP 
hostA: tttprobe \-multicast
.br 
hostB: tttview \-multicast
.IP 
this is equivalent to:
.IP 
hostA: tttprobe 224.8.8.0
.br 
hostB: tttview \-addr 224.8.8.0
.SH "AUTHORS"
.LP 
\fItttprobe\fR was written by Kenjiro Cho < kjc@csl.sony.co.jp>.
.LP 
This manual page was written by Thomas Scheffczyk <thomas.scheffczyk@verwaltung.uni\-mainz.de>,
for the Debian GNU/Linux system (but may be used by others).
.SH "SEE ALSO"
.LP 
ttt(1), tttview(1)