Shulou(Shulou.com)06/02 Report--

Iftop can be used to monitor the real-time traffic of the network card (you can specify a network segment), reverse parse ip, display port information, and so on.

Direct operation

[root@yoon ~] # iftop

Iftop interface related instructions

The interface shows a scale range similar to that of a scale, which is used as a ruler for long bars that display flow patterns.

The two left and right arrows in the middle indicate the direction of the traffic.

TX: sending traffic

RX: receive traffic

TOTAL: total traffic

Cumm: total traffic from running iftop to the present

Peak: peak traffic

Rates: indicates the average traffic in the past 2s, 10s and 40s, respectively

Iftop related parameters

Common parameters

-I specify the network card to be tested, such as iftop-I bond0

-B displays traffic in bytes (default is bits), such as iftop-B

-n causes host information to display IP directly by default, such as: iftop-n

-N causes port information to display port number directly by default, such as iftop-N

-F shows the inbound and outbound traffic of a specific network segment, such as iftop-F 10.20.1.0 hip 24 or iftop-F 10.20.1.0 amp 255.255.255.0

-h help information

-P makes host information and port information display by default

-p after using this parameter, the list in the middle shows the local host information and IP information other than the local host appears.

-m sets the maximum value of the scale at the top of the interface, which is displayed in five segments, such as iftop-m 10m

Some operation commands after entering the iftop screen (pay attention to case)

Press h to toggle whether to display help

Press n to toggle to display the IP or hostname of this machine

Press s to switch whether to display the host information of this computer.

Press d to toggle whether to display the host information of the remote target host

Toggle the display format by t to 2 lines / 1 lines / only send traffic / only received traffic

Press N to toggle to display the port number or port service name

Press S to toggle whether to display the port information of this machine.

Press D to toggle whether to display the port information of the remote target host

Press p to toggle whether to display port information

Press P to toggle pause / resume display

Press b to toggle whether to display the average flow graph bar

Calculate the average traffic within 2 seconds or 10 seconds or 40 seconds by B switch

Press T to toggle whether to display the total traffic for each connection

Press l to open the screen filtering function, and enter the characters to be filtered, such as ip. After pressing enter, the screen will only display the traffic information related to this IP.

Press L to switch the scale on the display screen; if the scale is different, the flow graph bar will change

Press j or k to scroll up or down the connection record displayed on the screen

Press 1 or 2 or 3 to sort according to the three columns of traffic data displayed on the right

Press

Sort by the hostname or IP of the remote target host

Press o to toggle whether to display only the current connection

Press f to edit the filter code, which is translated, and I haven't used this yet.

Press! You can use the shell command, this is not used! I don't understand what orders work here.

Press Q to exit monitoring

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.