- @(#)README	1.1 12/11/93 -

This is version 1.0 of tcptop, a curses-based frontend to the SunOS 4.x
"etherfind" program.  Tcptop produces a dynamic display of active TCP
connections between hosts.

Run tcptop as root on a host on your Ethernet.  Any connections going across
that network, even if neither endpoint of the connection is on that net, will
be displayed in a "top"-style list of connections.  Tcptop works best when
run in a tall, wide window with a small font.

To use tcptop, you need to have root access to a Sun, and you need to be
running NIS.  Tcptop uses the "ypmatch" command to resolve IP addresses into
hostnames, so if you're connected to the Internet, your NIS server needs to
be able to talk to the domain name service or Internet hosts will be shown
as numeric IP addresses rather than hostnames.

I wrote tcptop so I could see how much traffic was going over our net link
and how much of it was due to ftp connections as opposed to netnews or mail.
But it turned out to be more useful than that; I've detected at least one
breakin attempt by keeping an eye on the tcptop display.

Compilation should be as simple as typing "make".  Run "make install" to
copy the program and manual page into /usr/local (edit the Makefile first
to change the install paths.)  Once it's built, run it as root and you
should see your window fill up with TCP connections.

You are free to redistribute tcptop in source form.  You can distribute
binaries as long as you make the sources available too.  If you want to
sell it or distribute it as part of another software package, talk to me
first.

If you like tcptop, send me a picture postcard!  My address is

Steven Grimm
173 Sherland Ave.
Mountain View, CA 94043

Comments, bug reports, and (especially) patches are gladly accepted.  Mail
them all to me at koreth@hyperion.com.  See the BUGS and TO-DO files first,
though, since someone else may have already thought of it.
