Capture and analyze traffic flow data with this software, which provides insights into patterns and performance. The tool enables users to optimize roadways and improve safety by identifying bottlenecks and potential hazards.
Tanal is a powerful Unix daemon that is designed to capture traffic packet size, source, destination, and times in near real-time. This data is then saved into a native Postgres or ODBC database, allowing users to generate detailed traffic reports quickly and easily. One of the significant advantages of Tanal is that it doesn't need to save the actual headers or data, making it a lightweight and efficient traffic analysis tool.
Tanal works on ethX or cooked devices like ppp0, and it uses Postgres embedded SQL or libodbc++ to insert the data, the pcap library to capture traffic, and pthreads to capture and write data simultaneously. Users can specify pcap filters on the command line, and logs are automatically sent to syslog.
Under development are tools that will allow users to analyze traffic flows to determine the type of traffic without packet inspection. This advanced feature makes Tanal a highly valuable tool for network administrators and security professionals.
To use Tanal, users can specify various flags on the command line. For example, the '-s' flag allows users to specify the sleep time for write intervals, '-p' sets the number of packets to collect (0 for forever), and '-f' specifies the pcap filter argument. Users can also specify the device or interface to capture on using the '-d' or '-i' flags and set the inactivity time before writing to the database with the '-a' flag.
Furthermore, Tanal supports background mode via the '-b' flag, which is ideal for running it in the background without any user intervention. Additionally, users can use flush interval flags to resolve long-term connections that have regular traffic over them, such as a VPN with keepalive packets.
Overall, Tanal is a reliable, efficient, and versatile traffic analysis tool that can save network administrators and security professionals valuable time and effort. Its advanced features, lightweight design, and ease of use make it an excellent choice for any network monitoring needs.
Tanal works on ethX or cooked devices like ppp0, and it uses Postgres embedded SQL or libodbc++ to insert the data, the pcap library to capture traffic, and pthreads to capture and write data simultaneously. Users can specify pcap filters on the command line, and logs are automatically sent to syslog.
Under development are tools that will allow users to analyze traffic flows to determine the type of traffic without packet inspection. This advanced feature makes Tanal a highly valuable tool for network administrators and security professionals.
To use Tanal, users can specify various flags on the command line. For example, the '-s' flag allows users to specify the sleep time for write intervals, '-p' sets the number of packets to collect (0 for forever), and '-f' specifies the pcap filter argument. Users can also specify the device or interface to capture on using the '-d' or '-i' flags and set the inactivity time before writing to the database with the '-a' flag.
Furthermore, Tanal supports background mode via the '-b' flag, which is ideal for running it in the background without any user intervention. Additionally, users can use flush interval flags to resolve long-term connections that have regular traffic over them, such as a VPN with keepalive packets.
Overall, Tanal is a reliable, efficient, and versatile traffic analysis tool that can save network administrators and security professionals valuable time and effort. Its advanced features, lightweight design, and ease of use make it an excellent choice for any network monitoring needs.
What's New
Version 4.5: N/A