Linux Network traffic Monitoring tool-iftop

Reference:
Http://blog.163.com/[email protected]/blog/static/28596246201092081139283/

I. Acquisition and installation of Iftop

Centos:yum Install Iftop

Ubuntu:sudo Apt-get Install Iftop

Compile and install:

Iftop is also a member of the Free Army, as follows:
Click to download Iftop

Iftop needs to rely on two packages, Libpcap and tcpdump respectively, to install the two guys before installing iftop.
Click to download Libpcap and tcpdump

Don't rush to download and install Libpcap and tcpdump, if the system is installed by default, no need to reload

#rpm-qa Libpcap
#rpm-qa tcpdump


My machine itself has been installed, so the direct installation of Iftop ok~~ hehe!


Iftop installation is very simple
#tar XZVF iftop-0.17pre3.tar.gz
#cd Iftop-0.17pre3

#./configure
#make
#make Install

Installation Complete ~

Second, the use of Iftop monitoring network card traffic

If there is no custom installation path when installing Iftop, then run Iftop directly to mediate the traffic monitoring console

#iftop

Can be very intuitive real-time observation network card data traffic changes, that IP accounted for the amount of traffic at a glance, it is a bright!

Exit Iftop Press "Q" ~ ~

Iftop Memo ~

Iftop Interface Description :
First line: Bandwidth display

Middle section: List of external connections, that is, what IP is logged and the network connection to this computer

Middle part right: The real-time parameters are the average traffic that the access IP is connected to this machine for 2 seconds, 10 seconds, and 40 seconds, respectively.

= = Sends data, <= represents the received data

Bottom three lines: Send, receive and all traffic

Bottom three row second column: Run Iftop to current traffic for you

Bottom three row third column: for peak value

Bottom three row fourth column: Average

#iftop-I network interface//settings detect the specific network card of the machine
Such as:
#iftop-I. eth2
Indicates the traffic condition of the eth2 NIC is detected

For more detailed usage please refer to:

[Email protected]:~# iftop-h

Iftop:display bandwidth usage on a interface by host

synopsis:iftop-h | [-NPBBP] [-I. Interface] [-F Filter Code] [-N Net/mask]

-H Display this message

-N don ' t do hostname lookups

-N don ' t convert port numbers to services

-P run in promiscuous mode (show traffic between other

Hosts on the same network segment)

-B don ' t display a bar graph of traffic

-B Display Bandwidth in bytes

-I interface listen on named interface

-F Filter Code use filter code to select packets to Count

(Default:none, but only IP packets is counted)

-F Net/mask Show traffic flows in/out of the network

-P show ports as well as hosts

-m limit sets the upper limit for the bandwidth scale

-C config file specifies an alternative configuration file

Iftop, version 0.17

Copyright (c) 2002 Paul Warren <[email protected]> and contributors

Common combinations are: #iftop-I interface-n-b

Linux Network traffic Monitoring tool-iftop