Well, I think this may win the award for “least informative README”. So it’s a traffic monitor – what distinguishes it from, say, tcpdump?

(Also, the instructions in the README indicating you should compile it as root are pretty bogus-looking.)