iftop

一款实时流量监控工具

补充说明

iftop命令 是一款实时流量监控工具,监控TCP/IP连接等,缺点就是无报表功能。必须以root身份才能运行。

语法

  1. iftop(选项)

选项

  1. iftop: display bandwidth usage on an interface by host
  2. Synopsis: iftop -h | [-npblNBP] [-i interface] [-f filter code]
  3. [-F net/mask] [-G net6/mask6]
  4. -h display this message
  5. -n don't do hostname lookups
  6. -N don't convert port numbers to services
  7. -p run in promiscuous mode (show traffic between other
  8. hosts on the same network segment)
  9. -b don't display a bar graph of traffic
  10. -B Display bandwidth in bytes
  11. -i interface listen on named interface
  12. -f filter code use filter code to select packets to count
  13. (default: none, but only IP packets are counted)
  14. -F net/mask show traffic flows in/out of IPv4 network
  15. -G net6/mask6 show traffic flows in/out of IPv6 network
  16. -l display and count link-local IPv6 traffic (default: off)
  17. -P show ports as well as hosts
  18. -m limit sets the upper limit for the bandwidth scale
  19. -c config file specifies an alternative configuration file
  20. -t use text interface without ncurses
  21. Sorting orders:
  22. -o 2s Sort by first column (2s traffic average)
  23. -o 10s Sort by second column (10s traffic average) [default]
  24. -o 40s Sort by third column (40s traffic average)
  25. -o source Sort by source address
  26. -o destination Sort by destination address
  27. The following options are only available in combination with -t
  28. -s num print one single text output afer num seconds, then quit
  29. -L num number of lines to print

界面说明

第一行为带宽,这里为1Mbit,不是字节哦. 连接列表,最后三列分别是2秒,10秒和40秒的平均流量 => 代表发送
<= 代表接收 最后三行表示发送,接收和全部的流量, 第二列为你运行iftop到目前流量,第三列为高峰值,第四列为平均值。

实例

  1. iftop # 默认是监控第一块网卡的流量
  2. iftop -i eth1 # 监控eth1
  3. iftop -n # 直接显示IP, 不进行DNS反解析
  4. iftop -N # 直接显示连接埠编号, 不显示服务名称
  5. iftop -F 192.168.1.0/24 or 192.168.1.0/255.255.255.0 # 显示某个网段进出封包流量