darkstat(8) System Manager's Manual darkstat(8) (NAME) darkstat - (SYNOPSIS) darkstat [ -i interface ] [ -r file ] [ --snaplen bytes ] [ --pppoe ] [ --syslog ] [ --verbose ] [ --no-daemon ] [ --no-promisc ] [ --no-dns ] [ --no-macs ] [ --no-lastseen ] [ -p port ] [ -b bindaddr ] [ --base path ] [ -f filter ] [ -l network/netmask ] [ --local-only ] [ --chroot dir ] [ --user username ] [ --daylog filename ] [ --import filename ] [ --export filename ] [ --pidfile filename ] [ --hosts-max count ] [ --hosts-keep count ] [ --ports-max count ] [ --ports-keep count ] [ --highest-port port ] [ --wait secs ] [ --hexdump ] (DESCRIPTION) darkstat (packet sniffer) HTTP . . (OPTIONS) -i interface . . -r file pcap(3) . . -r -i (). --snaplen bytes . darkstat . --pppoe . PPPoE tun0 FreeBSD pppoe0 OpenBSD NetBSD. darkstat PPPoE . -l ! --syslog stderr syslog ( daemon debug) . /var/log/debug . --verbose . --no-daemon . --no-promisc (promiscuous mode) . darkstat . -f bpf(4) . --no-dns IP . DNS . --no-macs MAC . --no-lastseen . -p port () . 667 . -b bindaddr . . --base path (Base URL) . darkstat . mod_proxy mod_proxy_html ( mod_header Accept-Encoding) stats : ProxyPass /stats/ http://localhost:667/stats/ ProxyPassReverse /stats/ http://localhost:667/stats/ / ( ) . -f filter . tcpdump(1) . -l network/netmask << >> (netmask) . / . ip_addr & netmask == network . . --local-only << >> . -l . --chroot dir darkstat chroot() . /var/empty /var/lib/empty. darkstat . --daylog --export darkstat chroot . . --user username darkstat uid gid . nobody. root . --daylog filename chroot . --daylog --chroot darkstat . chroot --daylog . daylog . (daylog) : localtime|time_t|bytes_in|bytes_out|pkts_in|pkts_outs # . --import filename darkstat chroot (import) . --import --chroot . darkstat . --export filename SIGUSR1 SIGUSR2 chroot (export) . --export --chroot darkstat . chroot -- --export . --pidfile filename (Process ID) darkstat . . pid darkstat pid . darkstat : darkstat -i fxp0 --chroot /var/run/darkstat --pidfile darkstat.pid : kill `cat /var/run/darkstat/darkstat.pid` kill(1) SIGTERM darkstat . --hosts-max count . . --hosts-max --hosts-keep . --hosts-keep count --hosts-max --hosts-keep . --ports-max count . . --ports-max --ports-keep . --ports-keep count . --highest-port port . (ephemeral ports) . . --wait secs . NetworkManager . darkstat . --wait darkstat . . --hexdump (hex dump) . --verbose --no-daemon . (USAGE EXAMPLES) fxp0: darkstat -i fxp0 IP 192.168.0.1 : darkstat -i fxp0 -b 192.168.0.1 HTTP : darkstat -i fxp0 -p 80 Optus ARP : darkstat -i fxp0 -f "not arp" SSH : darkstat -i fxp0 -f "port 22" IP : darkstat -i fxp0 -f "not (src net 192.168.0 and dst net 192.168.0)" ( tcpdump(1) ) (192.168.1.1) (192.168.1.2 192.168.1.3 ) ( darkstat ): darkstat -i fxp0 -l 192.168.1.0/255.255.255.0 <<>> nas0 PPPoE . PPPoE IP . 32/ : darkstat -i nas0 --pppoe -l 192.168.1.1/255.255.255.255 (SIGNALS) darkstat SIGTERM SIGINT darkstat . SIGUSR1 darkstat . --export . SIGUSR2 . (FREQUENTLY ASKED QUESTIONS) (tooltip) . / / . . . . . / IP . -l . . (SEE ALSO) tcpdump(1) (HISTORY) darkstat 2001 . (AUTHORS) (Emil Mikulic) . ( AUTHORS ) (WEBSITE) https://unix4lyfe.org/darkstat darkstat 3.0.722 June 2011 darkstat(8)