Iftop, a real-time network traffic monitoring tool
What is iftop?
Iftop is a free network card real-time traffic monitoring tool, similar to the top command, it can not only monitor the real-time traffic and port connection information of a specific network card, but also display the local network traffic. It is very suitable for monitoring the network traffic of proxy servers or routers.
Install iftop
1. Download: [root@www] # wget http://www.ex-parrot.com/pdw/iftop/download/iftop-1.0pre4.tar.gz 2. Install the necessary program [root@www] # yum install libpcap-devel ncurses-devel 3. Extract and install [root@www] # tar-xzf iftop-1.0pre4.tar.gz [root@www] # cd iftop-1.0pre4 [root@www] #. / configure-- prefix=/usr/local/iftop [root@www] # make & & make install 4. Configuration environment [root@www] # ln-sv / usr/local/iftop/sbin/iftop / usr/local/sbin/iftop
Detailed explanation of iftop parameters
1. Format: [root@www] # iftop-h | [- npblNBP] [- I interface] [- f filter code] [- F net/mask] [- G net6/mask6] 2. Common parameters-h: help parameters-I: specify the interface of the network card to be monitored by the iftop command-n: display all the output information through IP, you have entered DNS reverse parsing-B: the output will display the network card traffic in byte-p: run iftop in promiscuous mode Use iftop as a network sniffer-P: display the port information of the host-N: show only the connection port number, not the service name corresponding to the port-F: show the inbound and outbound traffic of the network card in and out of a specific network segment
Interface description of iftop
The first part: the traffic scale, which is used to display the bandwidth flow of the network card. The second part: mainly records which host the machine is communicating with, where "= >" means to send data. "