Linux sar analyzes Nic traffic

Yum install sysstat sar-n {DEV | EDEV | NFS | NFSD | SOCK | ALL} sar provides six different syntax options to display network information. The-n option uses six different switches: DEV | EDEV | NFS | NFSD | SOCK | ALL. DEV displays network interface information, EDEV displays statistics on network errors, NFS statistics on active NFS clients, NFSD statistics on NFS servers, and SOCK displays socket information, ALL shows ALL 5 switches. They can be used independently or together. Www.2cto.com # sar-n DEV 2 10 Linux 2.6.18-53. el5PAE (localhost. localdomain) 03/29/2009 01:39:40 am iface rxpck/s txpck/s rxbyt/s txbyt/s rxcmp/s txcmp/s rxmcst/s01: 39: 42 AM lo 0.00 0.00 0.00 0.00 0.00 0.00 0.0001: 39: 42 AM eth1 131.34 104.98 119704.48 36110.45 0.00 0.00: 39: 42 AM sit0 0.00 0.00 0.00 0.00 0.00 0.00 01:39:42 am iface rxpck/s txpck/s rxbyt/s txbyt/s rxcmp/s txcmp/s rxmcst/s01: 39: 44 AM lo 0.00 0.00 0.00 0.00 0.00 0.00 0.0001: 39: 44 AM eth1 168.00 165.50 114496.50 83938.50 0.00 0.00: 39: 44 AM sit0 0.0001 0.00 0.00 0.00 0.00 0.00 IFACE: LAN interface rxpck/s: The data packet received per second txpck/s: The data packet sent per second rxbyt/s: the number of bytes received per second txbyt/s: number of bytes sent per second rxcmp/s: the compressed data packet received per second txcmp/s: the compressed data packet sent per second rxmcst/s: multicast packets received per second # sar-n EDEV 2 10 Linux 2.6.18-53. el5PAE (localhost. localdomain) 03/29/2009 www.2cto.com 01:42:18 am iface rxerr/s txerr/s coll/s rxdrop/s txdrop/s txcarr/s rxfram/s rxfifo/s txfifo/s01: 42: 20 AM lo 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00: 42: 20 AM eth1 0.0001 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00: 42: 20 AM sit0 0.00 0.00 0.00 0.00 0.00 0.00 0.00 0.00 IFACE: LAN interface rxerr/s: bad packets received per second txerr/s: bad packets sent per second coll/s: conflict per second rxdrop/s: Because the buffer is full, the number of received packets discarded per second txdrop/s: Because the buffer is full, the number of sent packets discarded per second txcarr/s: when a packet is sent, the number of carrier errors per second rxfram/s: the number of frames Alignment Errors for packets received per second rxfifo/s: the number of received packets per second FIFO speed errors txfifo/s: the number of FIFO overspeed errors sent per second # sar-n SOCK 2 10 Linux 2.6.18-53. el5PAE (localhost. localdomain) 03/29/2009 www.2cto.com 01:44:32 AM totsck tcpsck udpsck rawsck ip-frag01: 44: 34 AM 243 9 8 0 00:44:36 AM 242 9 7 0 00:44:38 AM 238 9 7 0 00:44:40 AM 238 9 7 0 0 totsck: Total number of sockets used tcpsck: number of TCP sockets used udpsck: number of UDP sockets used rawsck: Number of raw sockets used ip address-frag: number of IP segments used