tcptrace comes with a plugin module architecture so that users can develop their own modules to do more sophisticated analysis pertinent to their needs. This chapter describes the modules distributed with tcptrace namely, TRAFFIC, HTTP, SLICE, COLLIE, and REAL-TIME, and uses the REAL-TIME module to explain how to write your own modules.