Chris  | 2007-07-01
Tcptrace, to find out who visited, for how long
I used tcptrace tool for analysis of TCP dump files. It can take as input the files produced by several packet-capture programs, including tcpdump, snoop, etherpeek, HP Net Metrix, and WinDump, but I only used it for tcpdump. Tcptrace produced several different types of output files containing information on each connection seen, for elapsed time, bytes and segments sent and received, retransmissions, round trip times, window advertisements, throughput, etc.. Also useful to produce a number of graphs for further analysis.