Open-source network analysis tool TCPTrafficAnalyzer

Article title: open-source network analysis tool TCPTrafficAnalyzer. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.

Several notable analysis functions of TCP Traffic Analyzer include:

The number of TCP connections that have exceeded (or less than) a certain threshold.

The number of TCP connections that have been successfully tried more than N times.

Distribution of TCP connection duration and throughput.

Distribution of TCP connections where data packets exceed N bytes.

The distribution of IP addresses and ports within a specific threshold.

Yahoo internally uses yconalyzer to analyze network communication from all over the world (through HTTP, POP, IMAP and SMTP protocols). its working principle is to capture data packets from the network driver using the open-source libpcap package, by limiting data filtering conditions to minimize the consumption of system resources (such as CPU), the monitoring software will not affect real network applications.

Yconalyzer is compatible with tcpdump, and the captured files generated by the two can be identified and analyzed by each other. Yconalyzer supports all the filtering conditions of tcpdump and applies to all network protocols over TCP, such as HTTP, SMTP, POP, and IMAP.

Yconalyzer is easy to use. you only need to use the command line. for example, you can capture data packets from Port 80 within 300 seconds and save them to the http. pcap file. the command is as follows:

Yconalyzer-p 80-w http. pcap-t 300

After capturing data, developers can analyze TCP data packets through tcpdump or yconalyzer. the command is as follows:

Yconalyzer-p 80-r http. pcap

Yconalyzer displays different analysis results based on different options, as shown in 1.

Figure 1. Sort by throughput (source: sourceforge)

Interested readers can learn about and download the trial at the official site of TCP Traffic Analyzer (yconalyzer.