iftop command listens to network traffic on a named network interface, or on the first interface it can find which looks like an external interface if none is specified, and displays a table of current bandwidth usage by pairs of hosts. iftop is a perfect tool for remote Linux server over ssh session.
iftop must be run by the root or the user who has sufficient permissions to monitor all network traffic on the network interface.
Type iftop command at tge shell prompt to display traffic:
# iftop
However, iftop works best when you use filters. For example, if you want to find out how much bandwidth users are wasting or trying to figure out why the network is slow,
# iftop -f icmp
You can display or analyses packet flowing in and out of the 192.168.1.0/24 network:
# iftop -F 192.168.1.0/24
Disable output for DNS traffic by using filter code such as:
# iftop -f 'not port domain'
iftop has many options read man page for further information.
See also:
- Email this to a friend
- Printable version
- Rss Feed
- Last Updated: Oct/19/2007
{ 2 comments… read them below or add one }
It is a very useful program. This commando shows I deal and the port of a single IP
iftop -P -i any -F 62.165.165.245/32
———————————
My life is
http://www.hechospiscos.com
It’s also possible to apply filter when iftop is already running: just press “f” button and type filter you wish like:
Net filter> host 192.168.0.7