bbonev/bpfmon

BPF based visual packet rate monitor

bpfmon's Issues

Build from source instructions not working on Ubuntu 20.04.05

On a fresh VM I tried installing building from source but it doesn't work.

Steps I took, from the readme:

sudo apt install git build-essential pkg-config -y
git clone https://github.com/bbonev/yascreen
cd yascreen
make -j
sudo make install
cd ..
git clone https://github.com/bbonev/bpfmon
cd bpfmon
make -j

1/ For yascreen, the compile also needed the go-md2man package installed.

2/ Compiling yascreen gave this:

$ sudo make install
install -Ds -m 0644 -t /usr/local/lib/ libyascreen.a
install -D -m 0644 -t /usr/local/lib//pkgconfig/ yascreen.pc
ln -fs libyascreen.so.0.0.0 /usr/local/lib/libyascreen.so.0
ln -fs libyascreen.so.0 /usr/local/lib/libyascreen.so
install -Ds -m 0644 -t /usr/local/lib/ libyascreen.so.0.0.0
install -D -m 0644 -t /usr/local/include/ yascreen.h
install -D -m 0644 yascreen.3 /usr/local/share/man/man3/yascreen.3

3/ For bpfmon, I'm getting this output:

~/git/bpfmon$ make -j
cc -O3   -I/usr/local/include/  -Wall -Wextra -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 --std=gnu89 -fPIE -flto -c bpfmon.c -o bpfmon.o
cc -O3   -I/usr/local/include/  -Wall -Wextra -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 --std=gnu89 -fPIE -flto -c psort.c -o psort.o
cc -O3   -I/usr/local/include/  -Wall -Wextra -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 --std=gnu89 -fPIE -flto  -fPIE -pie -o psort psort.o  -L/usr/local/lib/ -lyascreen -lpcap
cc -O3   -I/usr/local/include/  -Wall -Wextra -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 --std=gnu89 -fPIE -flto  -fPIE -pie -o bpfmon bpfmon.o  -L/usr/local/lib/ -lyascreen -lpcap
/usr/bin/ld: /tmp/psort.2VWwaS.ltrans0.ltrans.o: in function `main':
<artificial>:(.text.startup+0x3ed): undefined reference to `yascreen_getch_to'
/usr/bin/ld: <artificial>:(.text.startup+0x1e31): undefined reference to `yascreen_feed'
collect2: error: ld returned 1 exit status
make: *** [Makefile:78: psort] Error 1
make: *** Waiting for unfinished jobs....
/usr/bin/ld: /tmp/bpfmon.5pVMlq.ltrans0.ltrans.o: in function `main':
<artificial>:(.text.startup+0x51d): undefined reference to `yascreen_getch_to'
/usr/bin/ld: <artificial>:(.text.startup+0x1332): undefined reference to `yascreen_feed'
collect2: error: ld returned 1 exit status
make: *** [Makefile:72: bpfmon] Error 1

No idea what this means.

[Feature request] Visualize how much of the traffic is incoming and how much is outgoing

Hi,

thanks for bpfmon! It's a very nice tool to debug traffic impacts of configuration changes on high-load services. Helped me a lot to debug forwarding Syslog servers.

There's though one feature I'm missing (especially with regards to servers which forward data): Being able to (optionally) see how much of the traffic is incoming and how much is outgoing.

I'm not sure how to visualize that best, but some ideas I had:

• 4 graphs instead of 2
• 2 graphs, but (via commandline option) just bytes or just packets
• Each graph being drawn from to top (incoming) and bottom (outgoing), or from a middle axis. (Which is both more or less four graphs just half of it with the opposite direction.)
• Color-coded graphs, e.g. the part of the traffic which is incoming is drawn in a different color than the one for outgoing traffic (e.g. red and green) — in the same graph and with the same bar height as now, just that the bar is drawn in two different colors, maybe even being able to toggle which traffic is shown as bottom graph and which traffic is added on top of that.