macOS
brew install yconalyzerlocal Homebrew formula metadata
brew
TCP traffic analyzer. Version 1.0.4 via Homebrew; verified 2026-06-19.
install
brew install yconalyzerlocal Homebrew formula metadata
overview
TCP traffic analyzer
history
Yconalyzer is a low-overhead libpcap-based TCP connection analyzer. It captures or reads pcap data for a selected TCP port and summarizes connection duration, retry behavior, volume, and throughput.
Yconalyzer was published on SourceForge as TCP Traffic Analyzer by Subbu Subramaniam. Its file feed shows early public tarballs in April 2010, followed by 1.0.x source archives and changelogs through June 2010.
The project manual explains the core design: capture only TCP control packets with SYN, FIN, or RST set, then use those comparatively small packet streams to infer connection-level performance. That made it a specialized monitoring tool rather than a full packet dissector.
Yconalyzer appears to have had modest adoption. It is documented on SourceForge, has a FreeBSD ports entry, and is packaged by Homebrew, but the available source material points to a small utility with a narrow operator audience rather than a large active ecosystem.
Its adoption niche is server-side traffic diagnosis where tcpdump-compatible pcap files are already part of the workflow and an operator wants connection distributions without running a heavier analyzer.
The manual describes three modes: capture mode with `-w`, analyze mode with `-r`, and live traffic analysis. The `-p` port option is mandatory, and users can add ordinary tcpdump/BPF filters to narrow the capture.
Typical examples include capturing port 80 or port 25 control packets, analyzing tcpdump-created pcap files, bucketing connections by duration or byte volume, and piping raw output through shell scripts for cron-based monitoring or alerts.
Yconalyzer matters as an example of a tiny operations tool whose packaging value is preservation. The upstream is quiet, but package managers keep a buildable command around for people who still want this exact pcap-to-connection-summary behavior.
It also demonstrates a classic Unix packaging pattern: a small C network utility, libpcap as the real platform interface, text output for scripts, and compatibility with tcpdump files.
security posture
narrow executable package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
yconalyzer | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://sourceforge.net/projects/yconalyzer/
install metadata
| Package key | brew:yconalyzer |
|---|---|
| Version | 1.0.4 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/yconalyzer |
| Homepage | https://sourceforge.net/projects/yconalyzer/ |
| Upstream docs | https://sourceforge.net/projects/yconalyzer |
| License | BSD-3-Clause |
| Source archive | https://downloads.sourceforge.net/project/yconalyzer/yconalyzer-1.0.4.tar.bz2 |
| Last updated | 2026-06-19T12:33:05-07:00 |
| Pulse | updated |
| Uses from macOS | libpcap |
| Bottle | available (on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | yconalyzer |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | yes |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.