TRACETOP(1)

🌸 TRACETOP — bestie's guide to seeing your top flows 💅

okay so real talk: this is tracetop, a lil tool from the libtrace girlies, and it lives in section 1 of the manual (user commands, the fun section). she shows you the top 'n' flows and she does it every second. that's the whole vibe. main character energy, no cap. ✨

✨ SYNOPSIS ✨

tracetop [ -f bpf | --filter=bpf] [ -s snaplen | --snaplen=snaplen] [ -p
promisc | --promisc=promisc] [ --bits-per-sec ] [ --percent ] [ --wide |
-w ] [ -i interval | --interval=interval] [ -h | --help ] [ -H |
--libtrace-help] inputuri ...

like, you hand her some inputuris (one or more, she's flexible 🫶) plus whatever flags you're feeling, and she goes.

🦋 DESCRIPTION 🦋

tracetop shows the top 'n' flows every second. that's it. that's the whole job. she's an icon, she's a legend, and she is literally just refreshing your flow leaderboard on the second. ⭐

here's the whole cast of characters (the options, bestie, read them):

• -f bpf, --filter=bpf — count only the packets that match a tcpdump-style bpf filter. yes, the same filter language you already know and love. gatekeeping who gets counted? iconic behaviour honestly. 🎀
• -i interval, --interval=interval — wait interval seconds between updates. the default is 2, so if you don't say anything she refreshes every two seconds. (the description up top says every second, and the default here says 2, and we are not gonna fight about it, we're just reporting the facts 💀)
• --wide, -w — expand the display so it can actually fit IPv6 addresses. use this to make sure the formatting lines up when IPv6 traffic shows up. because nothing is more embarrassing than your columns getting feral when a v6 address walks in. 🙈
• --percent — display flow bytes and packets as a percentage of total traffic. math but make it cute. ✨
• --bits-per-second — display flow bandwidth as the number of bits per second. (note: the synopsis spells it --bits-per-sec and this one spells it --bits-per-second — both are in the original, so both are staying, and i'm just the messenger 💅)

🔗 LINKS 🔗

want more details about tracetop (and about libtrace in general)? go here, bestie:

http://www.wand.net.nz/trac/libtrace/wiki/UserDocumentation

👀 SEE ALSO 👀

the whole squad, periodt:

• libtrace(3)
• tracemerge(1)
• tracefilter(1)
• traceconvert(1)
• tracesplit_dir(1)
• tracereport(1)
• tracertstats(1)
• tracestats(1)
• tracepktdump(1)
• traceanon(1)
• tracesummary(1)
• tracereplay(1)
• tracediff(1)
• traceends(1)
• tracetopends(1)

👑 AUTHORS 👑

this queen right here:

Perry Lorier <perry@cs.waikato.ac.nz>

give her her flowers, she built the thing. 🌸

heads up bestie: if you want the full option list and every possible inputuri format, the LINKS section is your girl — this page only spells out what it spells out. 🫶

and that's the tea, fr fr — this page is from tracetop in the libtrace family, dated March 2009, and it was served to you with love. go watch your flows, they're doing amazing. 💖✨🌈