Tanal is a Unix daemon that captures traffic packet size, source, destination, and times and saves this data into a native PostgreSQL or ODBC database in near real time, from which traffic reports may be made. It does not save the actual data or headers. It works on ethX or cooked devices like ppp0. It uses PostgreSQL embedded SQL or libodbc++ to insert the data, the pcap library to capture traffic, and pthreads to capure and write at the same time. Pcap filters can be specified on the command line. Logs go to syslog. Under development are tools that analyze this traffic to determine the type based on flows, not packet inspection.
the hostname in the dnsentry table is too small You need to update it as follows: ALTER TABLE `dnsentry` MODIFY `hostname` varchar(257) NOT NULL;
Build and install help I am going to update the install documentation next but if anyone wants to try the new version and is having any troubles please email me. (You need libodbc++ compiled as t...
update coming As it's Christmas and I have a little time I am going to resurrect this project a bit and do some work on it. In particular I am going to fix the memory leak and add periodic flushing...