This is the all-in-one package for displaying traces in binary tcpdump format (recorded with -w option) for Windows. It includes tracelook, windump, txgraph, tcl/tk, and awk. It does not require cygwin or anything else to operate. It works at least in Windows 98/NT/2k. INSTALLATION 1) Put the win-tcl self-extracting archieve into c:\. 2) Execute it to install files into c:\win-tcl. (other directory can be used than c:\, but then tl-setup.reg has to be edited to point to that directory) 3) Run tl-setup.reg from the win-tcl\bin\ directory. This creates a shortcut for .dmp file extension, so dump files can be opened by tracelook with double-clicking. 4) Try double-clicking on win-tcl\example\sample.dmp, it should open a window. Double-clicking on the connection on the right panel should open a graph of TCP connection. Parts of the trace can be zoomed in by selecting a zoom area with mouse. If double-clicking on a .dmp file does not work: If some other program has been associated with .dmp extension previously on Win2000, open Windows Explorer, Tools menu, Folder Options, File types, find .dmp file from the list, open it, press 'Restore' button. If double-clicking on a .dmp file still does not work: b) try adding the following command manually for .dmp extension c:\tl-win\bin\wish80.exe c:\tl-win\bin\tracelook.tcl -- -nflag "%1" c:\tl-win\bin into File types, .dmp file, command 'open' Andrei Gurtov gurtov@cs.helsinki.fi http://www.cs.helsinki.fi/u/gurtov