Getting started

Introduction

Tranalyzer2 is a lightweight flow generator and packet analyzer designed for simplicity, performance and scalability. The program is written in C and built upon the libpcap library. It provides functionality to pre- and post-process IPv4/IPv6 data into flows and enables a trained user to see anomalies and network defects even in very large datasets. It supports analysis with special bit coded fields and generates statistics from key parameters of IPv4/IPv6 Tcpdump traces either being live-captured from an Ethernet interface or one or several pcap files. The quantity of binary and text based output of Tranalyzer2 depends on enabled modules, herein denoted as plugins Hence, users have the possibility to tailor the output according to their needs and developers can develop additional plugins independent of the functionality of other plugins.

Getting Tranalyzer

Tranalyzer can be downloaded from here

Installation

The simplest way to install Tranalyzer2 is to use the setup.sh script:

./setup.sh

For more details or alternate ways of installation, refer to the following tutorials:

Compilation

Here is a quick summary of the commands required to build Tranalyzer2 and the plugins:

  • Tranalyzer2 and the default plugins:

    t2build

  • Tranalyzer2 and all the plugins:

    t2build -a

  • Tranalyzer2:

    t2build tranalyzer2

  • A specific plugin:

    t2build pluginName

If you need more details, refer to the Building Tranalyzer2 and the plugins tutorial or to the cheatsheet!

Getting started

Run Tranalyzer as follows:

t2 -r file.pcap -w outfolder/outprefix

For a full list of options, use Tranalyzer -h option:

t2 -h

Learn more in the Basic analysis tutorial or start developing your first plugin!

Short on time? Just look at the cheatsheets:

Getting help

Documentation

  • Complete documentation:

    t2doc

  • Documentation for Tranalyzer2 (aka the core):

    t2doc tranalyzer2

  • Documentation for a specific plugin:

    t2doc pluginName

  • Documentation for the scripts:

    t2doc scripts

Man page

The setup.sh script installs man pages for tranalyzer and some scripts. You can access them by running the following commands:

man tranalyzer

man tawk

man t2conf

man t2fm

Help

For a full list of options, use Tranalyzer -h option:

t2 -h

FAQ

A list of frequently asked questions can be found here.

Contact

Any feedback, feature requests and questions are welcome! Refer to the Contact page for more details.