# Install yconalyzer with Homebrew TCP traffic analyzer. Version 1.0.4 via Homebrew; verified 2026-06-19. ## Install ```sh sudo av install brew:yconalyzer ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install yconalyzer ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:yconalyzer - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.0.4 - **Source summary:** TCP traffic analyzer - **Homepage:** - **Upstream docs:** - **License:** BSD-3-Clause - **Source archive:** - **Last updated:** 2026-06-19T12:33:05-07:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - yconalyzer (cli) - yconalyzer (alias) ## Uses from macOS - libpcap ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.0.4 - Package-manager updated: 2026-06-19 - Local data: ok - Upstream repository: https://sourceforge.net/projects/yconalyzer/ - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage Yconalyzer is a low-overhead libpcap-based TCP connection analyzer. It captures or reads pcap data for a selected TCP port and summarizes connection duration, retry behavior, volume, and throughput. ### Project history Yconalyzer was published on SourceForge as TCP Traffic Analyzer by Subbu Subramaniam. Its file feed shows early public tarballs in April 2010, followed by 1.0.x source archives and changelogs through June 2010. The project manual explains the core design: capture only TCP control packets with SYN, FIN, or RST set, then use those comparatively small packet streams to infer connection-level performance. That made it a specialized monitoring tool rather than a full packet dissector. ### Adoption history Yconalyzer appears to have had modest adoption. It is documented on SourceForge, has a FreeBSD ports entry, and is packaged by Homebrew, but the available source material points to a small utility with a narrow operator audience rather than a large active ecosystem. Its adoption niche is server-side traffic diagnosis where tcpdump-compatible pcap files are already part of the workflow and an operator wants connection distributions without running a heavier analyzer. ### How it is used The manual describes three modes: capture mode with `-w`, analyze mode with `-r`, and live traffic analysis. The `-p` port option is mandatory, and users can add ordinary tcpdump/BPF filters to narrow the capture. Typical examples include capturing port 80 or port 25 control packets, analyzing tcpdump-created pcap files, bucketing connections by duration or byte volume, and piping raw output through shell scripts for cron-based monitoring or alerts. ### Why package nerds care Yconalyzer matters as an example of a tiny operations tool whose packaging value is preservation. The upstream is quiet, but package managers keep a buildable command around for people who still want this exact pcap-to-connection-summary behavior. It also demonstrates a classic Unix packaging pattern: a small C network utility, libpcap as the real platform interface, text output for scripts, and compatibility with tcpdump files. ### Timeline - 2010-04-23: The SourceForge file feed lists an early yconalyzer.tgz upload. - 2010-05-18: A yconalyzer 1.0.2 archive is published. - 2010-06-03: A yconalyzer 1.0.3 archive and changelog are published. - 2010-06-29: A yconalyzer 1.0.4 archive and changelog are published. - 2013-04-11: SourceForge records a later project update date. ### Related projects - Related projects and technologies include libpcap, tcpdump, Berkeley Packet Filter, Wireshark, tshark, netsniff-ng, Tranalyzer, and RFC 793 TCP tooling. ### Sources - - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** yconalyzer - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** yes - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [flow-tools](https://www.automicvault.com/pkg/brew/flow-tools/) - Shares av.db curated category or tags: cli, networking, traffic-analysis. - [fprobe](https://www.automicvault.com/pkg/brew/fprobe/) - Shares av.db curated category or tags: cli, libpcap, network-monitoring, networking, traffic-analysis. - [miruo](https://www.automicvault.com/pkg/brew/miruo/) - Shares av.db curated category or tags: cli, network-monitoring, networking, pcap, tcp. - [ndpi](https://www.automicvault.com/pkg/brew/ndpi/) - Shares av.db curated category or tags: cli, networking, traffic-analysis. - [sniffer](https://www.automicvault.com/pkg/brew/sniffer/) - Shares av.db curated category or tags: cli, network-monitoring, networking, pcap, traffic-analysis. - [daemonlogger](https://www.automicvault.com/pkg/brew/daemonlogger/) - Shares av.db curated category or tags: cli, network-monitoring, networking, pcap. - [httpflow](https://www.automicvault.com/pkg/brew/httpflow/) - Shares av.db curated category or tags: cli, networking, pcap, traffic-analysis. - [httpry](https://www.automicvault.com/pkg/brew/httpry/) - Shares av.db curated category or tags: cli, libpcap, network-monitoring, networking. - [jnettop](https://www.automicvault.com/pkg/brew/jnettop/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, monitoring, network, network-monitoring, networking. ## Combined YAML source View the package source record on GitHub. [combined/yconalyzer.yml](https://github.com/automic-vault/db/blob/main/combined/yconalyzer.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph