-IPtraf network card traffic monitoring

U case requirements

1. Install the iptraf package and view the Nic traffic information in the command line interface

two。 View the network traffic data information in the host in the following ways:

1) View the data communication in the eth0 Nic by IP data connection

2) View the overall data communication in the system according to different network interfaces

3) check the data communication according to TCP and UDP protocols

4) View the data communication in the eth0 Nic by packet size

5) View the detailed statistical information of all kinds of network communication data in the eth0 network card and write it to the log file

U knowledge hint

The RPM installation package for the IPTraf traffic tool is provided on the system CD of RHEL5. IPTraf is a console-based network monitoring tool that collects data such as TCP connection packet and byte counts, interface statistics and activity indicators, TCP/UDP traffic analysis, and LAN site packets and byte counts.

The features of IPTraf include:

1. An IP traffic monitor that displays TCP flag information, packet and byte counts, ICMP details, OSPF packet types, and oversized IP packet warnings

two。 Display IP, TCP, UDP, ICMP, non-IP and other IP packet counts, IP check value error, interface statistics for mobile and packet size counting

3. A TCP and UDP service monitor that displays inbound and outbound packet counts for public TCP and UDP program ports

4. A LAN statistical module that discovers active hosts and displays their activity statistics

5. TCP, UDP, and other protocols display filters (so you can view only the communication data you want to see)

6. Keep a log

7. Support for Ethernet, FDDI, ISDN, SLIP, PPP, and loopback interfaces

8. The use of the built-in primitive socket interface of the Linux kernel, so it can be used on a wide range of supported network cards

After installing the iptraf software package, you can directly iptraf the program and choose to perform the corresponding operation through the text interactive interface program, or you can use different command options to start the iptraf program to enter the traffic monitoring window of different modes.

Reference answer:

1) View the data communication in the eth0 Nic by IP data connection

[root@localhost] # iptraf-I eth0

2) View the overall data communication in the system according to different network interfaces

[root@localhost ~] # iptraf-g

3) check the data communication according to TCP and UDP protocols

[root@localhost] # iptraf-s eth0

4) View the data communication in the eth0 Nic by packet size

[root@localhost ~] # iptraf-z eth0

5) View the detailed statistical information of all kinds of network communication data in the eth0 network card and write it to the log file

[root@localhost] # iptraf-d eth0-L / var/log/iptraf/traflog.eth0