'pksh' is a hack of the popular 'tcsh' for packets, bytes hosts, and protocols counts. It is a shell, a network sniffer, a query language for network monitoring, and finally a rendering engine to display in a form readable for humans and network administrators all traffic on LAN segments. It aims to give on character-based terminals the same level of information 'ntop' already provides via its embedded Web interface. It does not continuously fill the terminal with packet/byte/protocol information, but allows the user to perform his daily job at the shell level and take a look at network only via a set of commands implemented as extensions to native tcsh built-ins. Output can be filtered/sorted/paged/mailed/etc. using native Unix commands.
| Tags | Networking Monitoring Shells |
|---|---|
| Implementation | C |
Recent releases


Changes: This is only a maintenance release in order to use the latest available tcsh-6.16.00 and mark the start of a new developing season.


Changes: This release adds support for passive OS fingerprints using the database available from the 'ettercap' project.


Changes: This release adds support for a lot of new counters for bytes, packets, and protocols. Data-link and IP decoding/counting were enhanced to include the most popular protocols. A new built-in extension was added ("protocols") and the "pkfinger" command now shows network usage per host in terms of {bytes,packets,protocols} distribution.


No changes have been submitted for this release.