BPFT is a traffic accounting daemon and data manadgement toos. Daemon builds on
top of libpcap and uses BPF mechanism for capturing IP traffic.
(BPF is a Berkley Packet Filter "pseudo-device").
Features
Logging all ip traffic on a specified network interface. Store information
of source and destination IP addresses and ports, number of packets and
transmitted/received bytes.
Store all information into one binary file in compact form (via cron).
Retrieve stored information on different criterias.
Retrieve actial (not stored) information from daemon via network or local socket.
Save backups from memory into disk file (via cron usually), restore at daemon start.