iftop

一款实时流量监控工具

补充说明

iftop命令 是一款实时流量监控工具，监控TCP/IP连接等，缺点就是无报表功能。必须以root身份才能运行。

语法

  1. iftop(选项)

选项

  1. iftop: display bandwidth usage on an interface by host
  3. Synopsis: iftop -h | [-npblNBP] [-i interface] [-f filter code]
  4.     [-F net/mask] [-G net6/mask6]
  6.    -h                  display this message
  7.    -n                  don't do hostname lookups
  8.    -N                  don't convert port numbers to services
  9.    -p                  run in promiscuous mode (show traffic between other
  10.                        hosts on the same network segment)
  11.    -b                  don't display a bar graph of traffic
  12.    -B                  Display bandwidth in bytes
  13.    -i interface        listen on named interface
  14.    -f filter code      use filter code to select packets to count
  15.                       (default: none, but only IP packets are counted)
  16.    -F net/mask         show traffic flows in/out of IPv4 network
  17.    -G net6/mask6       show traffic flows in/out of IPv6 network
  18.    -l                  display and count link-local IPv6 traffic (default: off)
  19.    -P                  show ports as well as hosts
  20.    -m limit            sets the upper limit for the bandwidth scale
  21.    -c config file      specifies an alternative configuration file
  22.    -t                  use text interface without ncurses
  24.    Sorting orders:
  25.    -o 2s                Sort by first column (2s traffic average)
  26.    -o 10s               Sort by second column (10s traffic average) [default]
  27.    -o 40s               Sort by third column (40s traffic average)
  28.    -o source            Sort by source address
  29.    -o destination       Sort by destination address
  31.    The following options are only available in combination with -t
  32.    -s num              print one single text output afer num seconds, then quit
  33.    -L num              number of lines to print

界面说明

第一行为带宽，这里为1Mbit,不是字节哦. 连接列表，最后三列分别是2秒，10秒和40秒的平均流量 => 代表发送
<= 代表接收 最后三行表示发送，接收和全部的流量， 第二列为你运行iftop到目前流量，第三列为高峰值，第四列为平均值。

实例

  1. iftop           # 默认是监控第一块网卡的流量
  2. iftop -i eth1   # 监控eth1
  3. iftop -n        # 直接显示IP, 不进行DNS反解析
  4. iftop -N        # 直接显示连接埠编号, 不显示服务名称
  5. iftop -F 192.168.1.0/24 or 192.168.1.0/255.255.255.0  # 显示某个网段进出封包流量