Statistical Traffic Analysis Kit

The project name has changed again, as the tool
has been split into separate utilities which
perform particular tasks. The command-line
interface is now easier to use, and a new
operating mode for watching data flow between the
local network and Autonomous Systems in the
Internet has been added. Additionally, the
documentation for the whole project has been
rewritten.

This release features an operation mode for determining connections and flows generating the heaviest traffic with content-based protocol identification and an asynchronous DNS resolver. Many features concerning the output have been added (color output, support for report generation on a signal and on a keypress in addition to time interval-based report generation). The command line syntax had to be completely redesigned, and finally, this release has a quite comprehensive manual page.

All functionality has now been moved into a single binary. Packets
can now be filtered using a regular expression, in addition to BPF
filtering. This release adds a special operation mode for extracting
strings from packets (based on a given regex) and an option for an
alternative output format for "bandwidth abusers" mode, suitable for
gathering continuous statistics.