|
version 1.1.1.1, 2012/02/21 16:57:34
|
version 1.1.1.2, 2016/10/18 14:04:50
|
|
Line 11 iftop - display bandwidth usage on an interface by hos
|
Line 11 iftop - display bandwidth usage on an interface by hos
|
| |
|
| .SH SYNOPSIS |
.SH SYNOPSIS |
| \fBiftop\fP \fB-h\fP | |
\fBiftop\fP \fB-h\fP | |
| [\fB-nNpbBP\fP] [\fB-i\fP \fIinterface\fP] [\fB-f\fP \fIfilter code\fP] [\fB-F\fP \fInet\fP/\fImask\fP] | [\fB-nNpblBP\fP] [\fB-i\fP \fIinterface\fP] [\fB-f\fP \fIfilter code\fP] [\fB-F\fP \fInet\fP/\fImask\fP] |
| [\fB-G\fP \fInet6\fP/\fImask6\fP] |
| .SH DESCRIPTION |
.SH DESCRIPTION |
| \fBiftop\fP listens to network traffic on a named \fIinterface\fP, or on the |
\fBiftop\fP listens to network traffic on a named \fIinterface\fP, or on the |
| first interface it can find which looks like an external interface if none is |
first interface it can find which looks like an external interface if none is |
|
Line 25 By default, \fBiftop\fP will look up the hostnames ass
|
Line 25 By default, \fBiftop\fP will look up the hostnames ass
|
| finds in packets. This can cause substantial traffic of itself, and may result |
finds in packets. This can cause substantial traffic of itself, and may result |
| in a confusing display. You may wish to suppress display of DNS traffic by |
in a confusing display. You may wish to suppress display of DNS traffic by |
| using filter code such as \fBnot port domain\fP, or switch it off entirely, |
using filter code such as \fBnot port domain\fP, or switch it off entirely, |
| by using the \fB-n\fP option or by pressing \fBR\fP when the program is running. | by using the \fB-n\fP option or by pressing \fBr\fP when the program is running. |
| |
|
| By default, \fBiftop\fP counts all IP packets that pass through the filter, and |
By default, \fBiftop\fP counts all IP packets that pass through the filter, and |
| the direction of the packet is determined according to the direction the packet |
the direction of the packet is determined according to the direction the packet |
| is moving across the interface. Using the \fB-F\fP option it is possible to |
is moving across the interface. Using the \fB-F\fP option it is possible to |
| get \fBiftop\fP to show packets entering and leaving a given network. For |
get \fBiftop\fP to show packets entering and leaving a given network. For |
| example, \fBiftop -F 10.0.0.0/255.0.0.0\fP will analyse packets flowing in and | example, \fBiftop \-F 10.0.0.0/255.0.0.0\fP will analyse packets flowing in and |
| out of the 10.* network. |
out of the 10.* network. |
| |
|
| Some other filter ideas: |
Some other filter ideas: |
|
Line 43 Ignore ethernet broadcast packets.
|
Line 43 Ignore ethernet broadcast packets.
|
| Count web traffic only, unless it is being directed through a local web cache. |
Count web traffic only, unless it is being directed through a local web cache. |
| .TP |
.TP |
| \fBicmp\fP |
\fBicmp\fP |
| How much bandwith are users wasting trying to figure out why the network is | How much bandwidth are users wasting trying to figure out why the network is |
| slow? |
slow? |
| |
|
| .SH OPTIONS |
.SH OPTIONS |
|
Line 65 the specified interface is also counted.
|
Line 65 the specified interface is also counted.
|
| \fB-P\fP |
\fB-P\fP |
| Turn on port display. |
Turn on port display. |
| .TP |
.TP |
| |
\fB-l\fP |
| |
Display and count datagrams addressed to or from link-local IPv6 addresses. |
| |
The default is not to display that address category. |
| |
.TP |
| \fB-b\fP |
\fB-b\fP |
| Don't display bar graphs of traffic. |
Don't display bar graphs of traffic. |
| .TP |
.TP |
| |
\fB-m\fP \fIlimit\fP |
| |
Set the upper limit for the bandwidth scale. Specified as a number with a 'K', 'M' or 'G' suffix. |
| |
.TP |
| \fB-B\fP |
\fB-B\fP |
| Display bandwidth rates in bytes/sec rather than bits/sec. |
Display bandwidth rates in bytes/sec rather than bits/sec. |
| .TP |
.TP |
|
Line 79 Use \fIfilter code\fP to select the packets to count.
|
Line 86 Use \fIfilter code\fP to select the packets to count.
|
| counted, so the specified code is evaluated as \fB(\fP\fIfilter code\fP\fB) and ip\fP. |
counted, so the specified code is evaluated as \fB(\fP\fIfilter code\fP\fB) and ip\fP. |
| .TP |
.TP |
| \fB-F\fP \fInet\fP/\fImask\fP |
\fB-F\fP \fInet\fP/\fImask\fP |
| Specifies a network for traffic analysis. If specified, iftop will only | Specifies an IPv4 network for traffic analysis. If specified, iftop will only |
| include packets flowing in to or out of the given network, and packet direction |
include packets flowing in to or out of the given network, and packet direction |
| is determined relative to the network boundary, rather than to the interface. |
is determined relative to the network boundary, rather than to the interface. |
| You may specify \fImask\fP as a dotted quad, such as /255.255.255.0, or as a |
You may specify \fImask\fP as a dotted quad, such as /255.255.255.0, or as a |
| single number specifying the number of bits set in the netmask, such as /24. |
single number specifying the number of bits set in the netmask, such as /24. |
| .TP |
.TP |
| |
\fB-G\fP \fInet6\fP/\fImask6\fP |
| |
Specifies an IPv6 network for traffic analysis. The value of \fImask6\fP can be |
| |
given as a prefix length or as a numerical address string for more compound |
| |
bitmasking. |
| |
.TP |
| \fB-c\fP \fIconfig file\fP |
\fB-c\fP \fIconfig file\fP |
| Specifies an alternate config file. If not specified, iftop will use |
Specifies an alternate config file. If not specified, iftop will use |
| \fB~/.iftoprc\fP if it exists. See below for a description of config files |
\fB~/.iftoprc\fP if it exists. See below for a description of config files |
| |
.TP |
| |
\fB-t\fP \fItext output mode\fP |
| |
Use text interface without ncurses and print the output to STDOUT. |
| |
|
| |
|
| .SH DISPLAY |
.SH DISPLAY |
| |
|
| When running, \fBiftop\fP uses the whole screen to display network usage. At |
When running, \fBiftop\fP uses the whole screen to display network usage. At |
|
Line 104 instance,
|
Line 120 instance,
|
| foo.example.com => bar.example.com 1Kb 500b 100b |
foo.example.com => bar.example.com 1Kb 500b 100b |
| <= 2Mb 2Mb 2Mb |
<= 2Mb 2Mb 2Mb |
| |
|
| .Sp |
|
| .fi |
.fi |
| shows, on the first line, traffic from \fBfoo.example.com\fP to |
shows, on the first line, traffic from \fBfoo.example.com\fP to |
| \fBbar.example.com\fP; in the preceding 2 seconds, this averaged 1Kbit/s, |
\fBbar.example.com\fP; in the preceding 2 seconds, this averaged 1Kbit/s, |
|
Line 187 directive is a name value pair, for example:
|
Line 202 directive is a name value pair, for example:
|
| |
|
| interface: eth0 |
interface: eth0 |
| |
|
| .Sp |
|
| .fi |
.fi |
| sets the network interface. The following config directives are supported: |
sets the network interface. The following config directives are supported: |
| |
|
|
Line 213 Puts the interface into promiscuous mode.
|
Line 227 Puts the interface into promiscuous mode.
|
| \fBport-display:\fP \fI(off|source-only|destination-only|on)\fP |
\fBport-display:\fP \fI(off|source-only|destination-only|on)\fP |
| Controls display of port numbers. |
Controls display of port numbers. |
| .TP |
.TP |
| |
\fBlink-local:\fP \fI(yes|no)\fP |
| |
Determines displaying of link-local IPv6 addresses. |
| |
.TP |
| \fBhide-source:\fP \fI(yes|no)\fP |
\fBhide-source:\fP \fI(yes|no)\fP |
| Hides source host names. |
Hides source host names. |
| .TP |
.TP |
|
Line 229 Sets which column is used to sort the display.
|
Line 246 Sets which column is used to sort the display.
|
| Controls the appearance of each item in the display. |
Controls the appearance of each item in the display. |
| .TP |
.TP |
| \fBshow-totals:\fP \fI(yes|no)\fP |
\fBshow-totals:\fP \fI(yes|no)\fP |
| Shows cummulative total for each item. | Shows cumulative total for each item. |
| .TP |
.TP |
| \fBlog-scale:\fP \fI(yes|no)\fP |
\fBlog-scale:\fP \fI(yes|no)\fP |
| Use a logarithmic scale for bar graphs. |
Use a logarithmic scale for bar graphs. |
| .TP |
.TP |
| \fBmax-bandwidth:\fP \fIbw\fP |
\fBmax-bandwidth:\fP \fIbw\fP |
| Fixes the maximum for the bar graph scale to \fIbw\fP, e.g. "10M" | Fixes the maximum for the bar graph scale to \fIbw\fP, e.g. "10M". Note that the value has to always be in bits, regardless if the option to display in bytes has been chosen. |
| .TP |
.TP |
| \fBnet-filter:\fP \fInet/mask\fP |
\fBnet-filter:\fP \fInet/mask\fP |
| Defines an IP network boundary for determining packet direction. |
Defines an IP network boundary for determining packet direction. |
| .TP |
.TP |
| |
\fBnet-filter6:\fP \fInet6/mask6\fP |
| |
Defines an IPv6 network boundary for determining packet direction. |
| |
.TP |
| \fBscreen-filter:\fP \fIregexp\fP |
\fBscreen-filter:\fP \fIregexp\fP |
| Sets a regular expression to filter screen output. |
Sets a regular expression to filter screen output. |
| |
|
|
Line 308 but WITHOUT ANY WARRANTY; without even the implied war
|
Line 328 but WITHOUT ANY WARRANTY; without even the implied war
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| GNU General Public License for more details. |
GNU General Public License for more details. |
| |
|
| You should have received a copy of the GNU General Public License | You should have received a copy of the GNU General Public License along |
| along with this program; if not, write to the Free Software | with this program; if not, write to the Free Software Foundation, Inc., |
| Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. | 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. |
| |
|
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to iftop.8 CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / iftop