TCPInfo

TCPInfo is a system to retrieve metadata about all current TCP connections from the Linux kernel. It consists of a minimal patch to the kernel which adds callback functionality to the tcp module; a kernel module which uses those callbacks and exposes TCP metadata using a character device; and user space programs to read and decode the TCP metadata.

TCPInfo gives you highly accurate real-time information and has a minimal performance impact even at high network speeds.

License

TCPInfo is published under the GNU General Public License, version 2.

Documentation

TCPInfo is documented extensively in the report contained in the source archive. The report also documents other software which was written by other people and which is not contained in the archive.

Kernel Support

Tcpinfo was extensively tested with kernel versions 2.6.16 and 2.6.17. It should work without problems with newer versions of the kernel with no or minor adaptations.

Download

Download TCPInfo: tcpinfo.tar.gz (350 KB).