Trafshow+rvnamed is a software tool that improves network traffic viewing by combining Trafshow with a DNS resolving feature, addressing Trafshow's weakness. It also integrates with iptraf for more advanced network monitoring.
Trafshow periodically sorts and updates this information, making it easy for you to locate suspicious network traffic on the net or evaluate current network utilization. It is also a fun program to use. When compiled with modern curses libraries like Slang or Ncurses, it shows colored traffic according to your configuration on color-capable terminal.
Trafshow can use various ncurses interfaces, which are a terminal-independent set of screen functions with optimal cursor motion. It now uses libpcap, a system-independent interface for user-level packet capture. Before building trafshow, you need to first retrieve and build libpcap, which is available from LBL.
Note that not all curses libraries work correctly with color functions, so traffic compiled using Slang or Ncurses is preferred. Termcap users can only use Slang curses. Once you have built and installed libpcap and libslang, you can build trafshow using the procedure in the INSTALL file.
The original distribution of trafshow is available via anonymous FTP to ftp.nsk.su, in /pub/unix/trafshow.tar.gz. This latest release has been compiled for i386-pc-bsdi2.0.1 with shlicc2 -O2 -DHAVE_CONFIG_H -I. -lpcap -lslang -ltermcap. It includes libpcap library version 0.4a2, slang curses version 9938, and colors support.