pstat 监视网络来往包开源项目

监视网络来往包，纪录收到的包，需要pcap支持，可工作在windows和linux下。

可根据对方端口和ip来过滤，过滤方式有包含和不包含两种方式可选，纪录方式有裸数据、流量和文本。

本程序可用来做端口流量统计，或者详细的web请求日志，用于事后分析。

用法: pstat[-f<defaultsfile>][-i<localnets>][-d<datadir>][-e][-g<core>][-nmode][-i<iface|pcapfile>] [-d<path>]        [-v][-x][-C][-p][-w][-B<filter>][-A<mode>][-c<ip>][-s<length>]

Options:[--interface|-i]<interface|pcap>  |Inputinterfacename(numeric/symbolic)                                   |orpcapfilepath[--data-dir|-d]<path>             |Datadirectory(mustbewritable).                                   |Default:data[--daemon|-e]                      |Daemonizepstat[--dump-timeline|-C]               |Enabletimelinedump.[--pid|-G]<path>                  |Pidfilepath[--kill|-k]                        |KillDaemon[--packet-filter|-B]<filter>      |Ingresspacketfilter(BPFfilter)[--snaplen|-s]<capturelength>    |capturelength,iflengthlessthen1,setto128(default:128)[--output-mode|-A]<mode>          |Setupdataoutputmode:                                   |bit0(1)-set1toEnabledetailfileoutput(default1)                                   |bit1(2)-set1toEnableminutesumoutput(default0)                                   |bit2(4)-set1toEnablerawdataoutput(default0)[--local-networks|-m]<localnets> |Localnetip(default:192.168.1.2)[--filter-ip|-c]<ipaddress>      |addiptobeingored,16maxcanbeadded[--host-mode|-w]                   |treatfilteriptoCclassnet(defaultno)[--filter-port|-p]                 |addportintolisttobewatch,16maxcanbeadded[--block-mode|-n]                  |howtousedportandiplist,blockmodis1,passmodeis0:                                   |bit0(1)-portlist mode(default0)                                   |bit1(2)-iplist mode(default1)[--rid-line|-x]<mode>             |setto1togetridoflinesincontent(default0)[--defaults-file|-f]<filename>   |Usethespecifieddefaultsfile[--verbose|-v]                     |Verbosetracing[--help|-h]                        |Help