1 | Installing libtrace: |
---|
2 | |
---|
3 | |
---|
4 | ---------------------------------- |
---|
5 | To make and install libtrace: |
---|
6 | |
---|
7 | libtrace requires the development libraries for libpcap and libz to compile |
---|
8 | eg, on Debian Woody these are called libpcap-dev and zlib1g-dev. |
---|
9 | |
---|
10 | |
---|
11 | tar zxvf libtrace-x.y.z.tar.gz |
---|
12 | cd libtrace-x.y.z |
---|
13 | ./configure |
---|
14 | make |
---|
15 | (as root) |
---|
16 | make install |
---|
17 | |
---|
18 | |
---|
19 | |
---|
20 | You may need to add the line '/usr/local/lib' to your /etc/ld.so.conf and |
---|
21 | run 'ldconfig' as root. |
---|
22 | |
---|
23 | ---------------------------------- |
---|
24 | To build the docs: |
---|
25 | |
---|
26 | cd libtrace-x.y.z |
---|
27 | doxygen |
---|
28 | |
---|
29 | |
---|
30 | This will build the docs into libtrace-x.y.z/docs/{html,man} |
---|
31 | There is currently no install candidate for these - sorry about that. |
---|
32 | |
---|
33 | |
---|
34 | ---------------------------------- |
---|
35 | Using libtrace: |
---|
36 | |
---|
37 | There are a number of example programs which should cover the basics of what you need within libtrace-x.y.z/examples/. |
---|
38 | |
---|
39 | |
---|
40 | |
---|
41 | ---------------------------------- |
---|
42 | Large trace files: |
---|
43 | |
---|
44 | Note that if you wish to use libtrace to read in large ( > 2/4 GB) files, and |
---|
45 | you wish to use gz-compressed traces or pcap traces, you will need to link |
---|
46 | against a version of libz or libpcap that supports large files. |
---|
47 | |
---|
48 | The versions of libz and libpcap that ship with Debian Woody don't support |
---|
49 | large file offsets. |
---|
50 | |
---|
51 | |
---|
52 | To get around this, you have a number of options: |
---|
53 | |
---|
54 | * Don't use compressed files. |
---|
55 | * Use stdin as the target of the input uri, and use cat or zcat to pipe the |
---|
56 | file into stdin, eg: |
---|
57 | zcat largetrace.erf.gz | program -i erf:- |
---|
58 | * Use process substitution in place of a filename, eg: |
---|
59 | program -i erf:<(zcat largetrace.erf.gz) |
---|
60 | |
---|
61 | |
---|
62 | ---------------------------------- |
---|
63 | Currently support input URIs: |
---|
64 | |
---|
65 | ERF (dag card tracefile): |
---|
66 | erf:/path/to/file |
---|
67 | erf:/path/to/file.gz |
---|
68 | erf:/path/to/socket |
---|
69 | erf:- |
---|
70 | |
---|
71 | Legacy DAG formats: |
---|
72 | legacyatm:/path/to/file |
---|
73 | legacyatm:/path/to/file.gz |
---|
74 | legacyatm:- |
---|
75 | legacypos:/path/to/file |
---|
76 | legacypos:/path/to/file.gz |
---|
77 | legacypos:- |
---|
78 | legacyeth:/path/to/file |
---|
79 | legacyeth:/path/to/file.gz |
---|
80 | legacyeth:- |
---|
81 | |
---|
82 | PCAP (from libpcap) |
---|
83 | pcap:/path/to/file |
---|
84 | pcap:- |
---|
85 | |
---|
86 | PCAP Interface (from libpcap) |
---|
87 | pcapint:eth0 |
---|
88 | pcapint:ppp0 |
---|
89 | |
---|
90 | WAG tracefile |
---|
91 | wag:/path/to/file |
---|
92 | wag:/path/to/file.gz |
---|
93 | wag:/path/to/socket |
---|
94 | wag:- |
---|
95 | |
---|
96 | WAG card |
---|
97 | wagint:/dev/wag0 |
---|
98 | |
---|
99 | Real Time Client interface at Waikato University |
---|
100 | rtclient:hostname |
---|
101 | rtclient:hostname:port |
---|
102 | |
---|
103 | DAG (native dag) |
---|
104 | dag:/dev/dag0 |
---|
105 | |
---|
106 | |
---|