[ADD] analyze: begin to use tcptrace