1 | Installing libtrace: |
---|
2 | |
---|
3 | |
---|
4 | ---------------------------------- |
---|
5 | To make and install libtrace: |
---|
6 | |
---|
7 | libtrace requires the dev versions of libpcap and libz to compile |
---|
8 | (on Debian Woody these are libpcap-dev and zlib1g-dev) |
---|
9 | |
---|
10 | tar zxvf libtrace-x.y.z.tar.gz |
---|
11 | cd libtrace-x.y.z |
---|
12 | ./configure |
---|
13 | make |
---|
14 | (as root) |
---|
15 | make install |
---|
16 | |
---|
17 | |
---|
18 | |
---|
19 | You may need to add the line '/usr/local/lib' to your /etc/ld.so.conf and |
---|
20 | run 'ldconfig' as root. |
---|
21 | |
---|
22 | ---------------------------------- |
---|
23 | To build the docs: |
---|
24 | |
---|
25 | cd libtrace-x.y.z |
---|
26 | doxygen |
---|
27 | |
---|
28 | |
---|
29 | This will build the docs into libtrace-x.y.z/docs/{html,man} |
---|
30 | There is currently no install candidate for these - sorry about that. |
---|
31 | |
---|
32 | |
---|
33 | ---------------------------------- |
---|
34 | Using libtrace: |
---|
35 | |
---|
36 | There are a number of example programs which should cover the basics of what you need within libtrace-x.y.z/examples/. |
---|
37 | |
---|
38 | |
---|
39 | |
---|
40 | ---------------------------------- |
---|
41 | Large trace files: |
---|
42 | |
---|
43 | Note that if you wish to use libtrace to read in large ( > 2/4 GB) files, and |
---|
44 | you wish to use gz-compressed traces or pcap traces, you will need to link |
---|
45 | against a version of libz or libpcap that supports large files. |
---|
46 | |
---|
47 | The versions of libz and libpcap that ship with Debian Woody don't support |
---|
48 | large file offsets. |
---|
49 | |
---|
50 | |
---|
51 | To get around this, you have a number of options: |
---|
52 | |
---|
53 | * Don't use compressed files. |
---|
54 | * Use stdin as the target of the input uri, and use cat or zcat to pipe the |
---|
55 | file into stdin, eg: |
---|
56 | zcat largetrace.erf.gz | program -i erf:- |
---|
57 | * Use process substitution in place of a filename, eg: |
---|
58 | program -i erf:<(zcat largetrace.erf.gz) |
---|
59 | |
---|
60 | |
---|
61 | ---------------------------------- |
---|
62 | Currently support input URIs: |
---|
63 | |
---|
64 | ERF (dag card tracefile): |
---|
65 | erf:/path/to/file |
---|
66 | erf:/path/to/file.gz |
---|
67 | erf:/path/to/socket |
---|
68 | erf:- |
---|
69 | |
---|
70 | PCAP (from libpcap) |
---|
71 | pcap:/path/to/file |
---|
72 | pcap:- |
---|
73 | |
---|
74 | PCAP Interface (from libpcap) |
---|
75 | pcapint:eth0 |
---|
76 | pcapint:ppp0 |
---|
77 | |
---|
78 | WAG tracefile |
---|
79 | wag:/path/to/file |
---|
80 | wag:/path/to/file.gz |
---|
81 | wag:/path/to/socket |
---|
82 | wag:- |
---|
83 | |
---|
84 | WAG card |
---|
85 | wagint:/dev/wag0 |
---|
86 | |
---|
87 | Real Time Client interface at Waikato University |
---|
88 | rtclient:hostname |
---|
89 | rtclient:hostname:port |
---|
90 | |
---|
91 | DAG (native dag) |
---|
92 | dag:/dev/dag0 |
---|
93 | |
---|