* alpha 1
Quick install:

	get postgres. For building and runing you need at least these:
		postgresql-7.2.3-5.80
		postgresql-libs-7.2.3-5.80
		postgresql-devel-7.2.3-5.80
		postgresql-server-7.2.3-5.80

	If you are building tcap the versions don't matter much.

install postgres ont he machine to collect the data.

	run 'createuser' to create a user root 
	as root run 'creatdb usage' to create database in postgres
	create schema in database/create.sql
	the end of this script also creates the static data for the protocol table

	run:
	./configure 

	You may specify the location of the postgres and pcap top level directories:

	  --with-pcap-root=DIR  pcap source tree located in DIR
	  --with-postgres-root=DIR  postgres tree located in DIR

	
	If you have a standard system with the packages installed in nornal places I make the configure
	script have a look in a fe places

	For postgres I look for:
		 $POSTGRES_ROOT/lib/libpq.a
		 $POSTGRES_ROOT/lib/libecpg.a
		 $POSTGRES_ROOT/include/sqlca.h


Then:
	make
	make install


testing:
	./tcap -b -d eth1 -p 10000 

	Check your syslog and database. Information should appear n the database after about 30 seconds.

Usage:
	x dns expiry time: the time an entry lives int he dns cache
	-s sleep_time: the time the write sleeps for
	-p num_packets: the number of packets to collect, 0 for forever
	-f filter: pcap filter argument
	-d or -i: device (or interface) to capure on
	-a: age of to/from packets inactivity before writing to db
	-c: connection string
	-b background

Flush interval flags '-F'
	If a connection is maintained for a long time and there is regular traffic over this connection
	(for example a VPN with regular keepalive packets) this connection will not have its traffic logged
	until there is no more data for at least the expiry time. The flush interval flags control the mandatory flushing 
	of these connections. A mandatory flush will flush the complete connection list.
	This timer is quantized on the period divider. For example if you select 60, then the flush will occur
	on the minute or as close to as possible.
	

Note that the -f filter specification is the pcap filter grammar and is described in the tcpdump manual entry.
Example:
	./tcap -b -d eth1 -p 10000 -f "dst host not 172.28.11.255"



NOTE:
	make sure postgresql.conf in the postgres data dir has
	tcpip_socket = true
	near the top for the odbs driver to be able to connect to it.


