1 | Installing libtrace: |
---|
2 | |
---|
3 | ---------------------------------- |
---|
4 | To make and install libtrace: |
---|
5 | |
---|
6 | tar zxvf libtrace-x.y.z.tar.gz |
---|
7 | cd libtrace-x.y.z/lib |
---|
8 | make |
---|
9 | (as root) |
---|
10 | make install |
---|
11 | |
---|
12 | |
---|
13 | You may need to run 'ldconfig' as root. |
---|
14 | |
---|
15 | ---------------------------------- |
---|
16 | To build the docs: |
---|
17 | |
---|
18 | cd libtrace-x.y.z |
---|
19 | doxygen |
---|
20 | |
---|
21 | |
---|
22 | This will build the docs into libtrace-x.y.z/docs/{html,man} |
---|
23 | There is currently no install candidate for these - sorry about that. |
---|
24 | |
---|
25 | |
---|
26 | ---------------------------------- |
---|
27 | Using libtrace: |
---|
28 | |
---|
29 | There are a number of example programs which should cover the basics of what you need within libtrace-x.y.z/examples/. |
---|
30 | |
---|
31 | |
---|
32 | |
---|
33 | ---------------------------------- |
---|
34 | Large trace files: |
---|
35 | |
---|
36 | Note that if you wish to use libtrace to read in large ( > 2/4 GB) files, and |
---|
37 | you wish to use gz-compressed traces or pcap traces, you will need to link |
---|
38 | against a version of libz or libpcap that supports large files. |
---|
39 | |
---|
40 | The versions of libz and libpcap that ship with Debian Woody don't support |
---|
41 | large file offsets. |
---|
42 | |
---|
43 | |
---|
44 | To get around this, you have a number of options: |
---|
45 | |
---|
46 | * Don't use compressed files. |
---|
47 | * Use stdin as the target of the input uri, and use cat or zcat to pipe the |
---|
48 | file into stdin, eg: |
---|
49 | zcat largetrace.erf.gz | program -i erf:- |
---|
50 | * Use process substitution in place of a filename, eg: |
---|
51 | program -i erf:<(zcat largetrace.erf.gz) |
---|
52 | |
---|
53 | |
---|
54 | ---------------------------------- |
---|
55 | Currently support input URIs: |
---|
56 | |
---|
57 | ERF (dag card tracefile): |
---|
58 | erf:/path/to/file |
---|
59 | erf:/path/to/file.gz |
---|
60 | erf:/path/to/socket |
---|
61 | erf:- |
---|
62 | |
---|
63 | PCAP (from libpcap) |
---|
64 | pcap:/path/to/file |
---|
65 | pcap:- |
---|
66 | |
---|
67 | PCAP Interface (from libpcap) |
---|
68 | pcapint:eth0 |
---|
69 | pcapint:ppp0 |
---|
70 | |
---|
71 | WAG tracefile |
---|
72 | wag:/path/to/file |
---|
73 | wag:/path/to/file.gz |
---|
74 | wag:/path/to/socket |
---|
75 | wag:- |
---|
76 | |
---|
77 | WAG card |
---|
78 | wagint:/dev/wag0 |
---|
79 | |
---|
80 | Real Time Client interface at Waikato University |
---|
81 | rtclient:hostname |
---|
82 | rtclient:hostname:port |
---|
83 | |
---|
84 | We don't currently support |
---|
85 | DAG (native dag) |
---|
86 | dag:/dev/dag0 |
---|
87 | |
---|