---
name: "tttprobe"
section: "1"
platform: "linux"
package: "tttprobe"
version: "1.7-3.3"
release: "Debian 7 (Wheezy)"
platforms: ["linux"]
url: "https://new.carta.tech/tttprobe"
---

# tttprobe(1)

Tele Traffic Tapper probe - A probe to collect local traffic-data and send it to a remote instance of tttview

## NAME

tttprobe - Tele Traffic Tapper probe -  A probe to collect local traffic-data and send it to a remote instance of tttview

## SYNTAX

ttt \[**-interface** device\] \[**-interval** ms\] \[**-multicast**\] \[**-port** dest\_port\] \[**-ttl** time-to-live\] \[**Destination**\]

## DESCRIPTION

*tttprobe* is the probe program in the ttt program suite. *tttprobe* locally collects traffic-data and sends it over a network to an instance of *tttview*.

To run *tttview*, it is **not** necessary to be "root".

The ttt program suite is yet another descendant of tcpdump but it is capable of real-time, graphical, local and remote traffic-monitoring.  It won't replace tcpdump, rather, it helps you find out what to look into with tcpdump.

## OPTIONS

ttt \[**-interface** device\] \[**-interval** ms\] \[**-multicast**\] \[**-port** dest\_port\] \[**-ttl** time-to-live\] \[**Destination**\]

- **-interface** device

  specifies the interface for packet capture. If not specified, the default interface is chosen.

- **-interval** ms

  Sets the interval in Milliseconds. If omitted, a interval of 1000 msec. is used as default.

- **-multicast**

  Shorthand for the default multicast destination "224.8.8.0".

- **-port** dest\_port

  Specifies the udp port number on the remote host where the traffic-data should be sent to. If omitted, port 7288 is used as default.

- **-ttl** time-to-live

  Specifies the time-to-live for multicast. If omitted, 1 is used as default to restrict the multicast to the local subnet.

- **Destination**

  Specifies the remote host where the traffic-data should be sent to. Destination can be omitted only, if **-multicast** is specified. Destination can be a uni- or multicast address.

## EXAMPLES

Remark: "hostA" is allways the host where traffic-data is collected with tttprobe and "hostB" is allways the host where the traffic-data is displayed with tttview.

**point-to-point monitoring:**

-

  hostA: tttprobe hostB\
   hostB: tttview

-

  or:

-

  hostA: tttprobe ip\_of\_hostB\
   hostB: tttview

**multicast:**

-

  when using the default multicast address:

-

  hostA: tttprobe -multicast\
   hostB: tttview -multicast

-

  this is equivalent to:

-

  hostA: tttprobe 224.8.8.0\
   hostB: tttview -addr 224.8.8.0

## AUTHORS

*tttprobe* was written by Kenjiro Cho \< kjc@csl.sony.co.jp\>.

This manual page was written by Thomas Scheffczyk \<thomas.scheffczyk@verwaltung.uni-mainz.de\>, for the Debian GNU/Linux system (but may be used by others).

## SEE ALSO

[ttt(1)](/ttt/1.md), [tttview(1)](/tttview/1.md)