Tanal is a Unix daemon that captures traffic
packet size, source, destination, and times and
saves this data into a native PostgreSQL or ODBC
database in near real time, from which traffic
reports may be made. It does not save the actual
data or headers. It works on ethX or cooked
devices like ppp0. It uses PostgreSQL embedded SQL
or libodbc++ to insert the data, the pcap library
to capture traffic, and pthreads to capure and
write at the same time. Pcap filters can be
specified on the command line. Logs go to syslog.
Under development are tools that analyze this
traffic to determine the type based on flows, not
packet inspection.
