3 Linux Network Monitoring tools

1 Iftop:

If you want to see what applications are currently in use, and how much bandwidth each application occupies, you can display them with iftop. The parameters used are as follows:

-H Display this message

-N don ' t do hostname lookups

-N don ' t convert port numbers to services

-P run in promiscuous mode (show traffic between other

Hosts on the same network segment)

-B don ' t display a bar graph of traffic

-B Display Bandwidth in bytes

-I interface listen on named interface

-F Filter Code use filter code to select packets to Count

(Default:none, but only IP packets is counted)

-F Net/mask Show traffic flows in/out of IPV4 Network

-G net6/mask6 Show traffic flows in/out of IPV6 Network

-l display and Count link-local IPv6 traffic (Default:off)

-P show ports as well as hosts

-m limit sets the upper limit for the bandwidth scale

-C config file specifies an alternative configuration file

-t use text interface without ncurses

Sorting orders:

-o 2s Sort by first column (2s traffic average)

-O 10s Sort by second column (10s traffic average) [default]

-O 40s Sort by third column (40s traffic average)

-O source Sort by Source address

-O destination Sort by Destination address

The following options is available in combination with-t

-S NUM Print one single text output afer num seconds and then quit

-L num number of lines to print

If you have only one network interface, you can run iftop directly , if you have more than one you need to specify through-I, such as our use of iftop-i wlp2s0. shown below, the left column is the source address and the domain name is displayed. The middle is the display of the destination address that is used by the network, followed by the rate

The following shows the size of the packets that are accepted and emitted. And a total of calculations.

On the page you can also change the display options when the command is run:

H switch Help interface

n whether the domain name is resolved

s Toggle Source Address Display

S Displays port number

T Toggle Text Display Interface

P Pause Display updates

Q Launch program

n whether the port is resolved

Nethogs:

Nethogs is a quick and easy way to create an interface to listen with root , which shows the application and the process number, so you can find the process number by this command when you want to kill a process.

the command parameters for Nethogs are as follows:

Options

-h Display available commands usage.

-V Prints Version info.

-D delay for refresh rate.

-V Select view mode

-P sniff in promiscious mode (not recommended).

-T TraceMode.

-C Limit number of refreshes

-s sort by traffic sent

There are fewer commands to display the page, only a few:

M cycle between display modes (KB/S, KB, b, MB)

R sort by ' received '

s sort by ' sent '

Q quit

Vnstat:

Vnstat displays all of the network data in real time.

You can also filter the data display in several ways:

-H: display statistics by the hour

-D Display statistics by day

-W Display information by week

-M display information by month

-L View real-time updates

3 Linux Network Monitoring tools