mirror of
https://github.com/LCTT/TranslateProject.git
synced 2025-02-03 23:40:14 +08:00
Translated 20150227 Bringing a Bunch of Best Known Linux Network Tools.md
This commit is contained in:
FSSlc
parent
0e02e545b7
commit
2fe33a0d0d
@ -1,446 +0,0 @@
|
||||
FSSlc translating
|
||||
|
||||
Bringing a Bunch of Best Known Linux Network Tools
|
||||
================================================================================
|
||||
It is very useful to use command line tools to monitor the network on your system and there are a tons of them out there available for the linux user such as nethogs, ntopng, nload, iftop, iptraf, bmon, slurm, tcptrack, cbm, netwatch, collectl, trafshow, cacti, etherape, ipband, jnettop, netspeed and speedometer.
|
||||
|
||||
Since there are many linux gurus and developers out there it is obvious that other network monitoring tools exist but I am not going to cover all of them in this tutorial.
|
||||
|
||||
Each one of the above tools has its own specifics but at the end all they do is monitor network traffic and there is not really only one way to do the job. For example nethogs can be used to show bandwidth per process in case you want to know the application which is consuming your entire network resources, iftop can be used to show bandwidth per socket connection and tools like nload help to get information about the overall bandwidth.
|
||||
|
||||
### 1) nethogs ###
|
||||
|
||||
nethogs is a free tool that is very handy when it comes to find out which PID is causing the trouble with your network traffic as it groups bandwidth by process instead of breaking the traffic down per protocol or per subnet, like most tools do. It is feature rich, supports both IPv4 and IPv6 and in my opinion is the best utility when you want to identify programs that are consuming all your bandwidth on your linux machine.
|
||||
|
||||
A linux user can use **nethogs** to show TCP download and upload-speed per process, monitor a specific device by using the command **nethogs eth0** where eth0 is the name of the device you want to get information from and also get information on the speed at which the data is currently being transferred.
|
||||
|
||||
To me nethogs is very easy to use, maybe because I like it so much that I use it all the time to monitor network bandwidth on my Ubuntu 12.04 LTS machine.
|
||||
|
||||
For example to sniff in promiscious the option -p is used like shown in the following command.
|
||||
|
||||
nethogs -p wlan0
|
||||
|
||||
If you like to learn more about nethogs and explore it in a very deep way than don't hesitate to read our full tutorial on this network bandwidth monitoring tool.
|
||||
|
||||
### 2) nload ###
|
||||
|
||||
nload is a console application which can be used to monitor network traffic and bandwidth usage in real time and it also visualizes the traffic by providing two easy to understand graphs. This cool network monitoring tool can also be used to switch between devices while monitoring and this can be done by pressing the left and right arrow keys.
|
||||
|
||||
|
||||
|
||||
As you can see from the above screenshot graphs provided by the nload tool are very easy to understand, provide useful information and also display additional info like total amount of transferred data and min/max network usage.
|
||||
|
||||
And what is even cooler is the fact that you can run the tool nload with the help of the following command which seems to be very short and easy to remember.
|
||||
|
||||
nload
|
||||
|
||||
I am very sure that our detailed tutorial on how to use nload will help new linux users and even experienced ones that are looking for more information on it.
|
||||
|
||||
### 3) slurm ###
|
||||
|
||||
slurm is another network load monitoring tool for linux which shows results in a nice ascii grap and it also supports many keys for interaction such as c to switch to classic mode, s to switch to split graph mode, **r** to redraw the screen, **L** to enable TX/RX led, **m** to switch between classic split and large view, and **q** to quit slurm.
|
||||
|
||||
|
||||
|
||||
There are also some other keys available in the network load monitoring tool slurm and you can easily study them in the manual page by using the following command.
|
||||
|
||||
man slurm
|
||||
|
||||
slurm is available in the official repos of Ubuntu and Debian so users of these distros can easy download it by using the apt-get install command like shown below.
|
||||
|
||||
sudo apt-get install slurm
|
||||
|
||||
We have covered slurm usage on a tutorial so please visit it and do not forget to share the knowledge with other linux friends.
|
||||
|
||||
### 4) iftop ###
|
||||
|
||||
iftop is a very useful tool when you want to display bandwidth usage on an interface by host. According to the manual page **iftop** listens to network traffic on a named interface, or on the first
|
||||
interface it can find which looks like an external interface if none is specified, and displays a table of current bandwidth usage by pairs of hosts.
|
||||
|
||||
Ubuntu and Debian users can easily install iftop on their machines by using the following command on a terminal.
|
||||
|
||||
sudo apt-get install iftop
|
||||
|
||||
Use the following command to install iftop on your machine using yum
|
||||
|
||||
yum -y install iftop
|
||||
|
||||
### 5) collectl ###
|
||||
|
||||
collectl can be used to collect data that describes the current system status and it supports the following modes:
|
||||
|
||||
- Record Mode
|
||||
- Playback Mode
|
||||
|
||||
**Record Mode** allows to take data from a live system and either display it on a terminal or writte to one or more files or a socket.
|
||||
|
||||
**Playback Mode**
|
||||
|
||||
According to the manual pages in this mode data is read from one or more data files that were generated in Record Mode.
|
||||
|
||||
Ubuntu and Debian users can use their default package manager to install collectl on their machines. The following command will do the job for them.
|
||||
|
||||
sudo apt-get install collectl
|
||||
|
||||
Use the following command because these distros have collectl in their official repos too.
|
||||
|
||||
yum install collectl
|
||||
|
||||
### 6) Netstat ###
|
||||
|
||||
Netstat is a command line tool for **monitoring incoming** and **outgoing network packets statistics** as well as interface statistics. It displays network connections for the Transmission Control Protocol (both incoming and outgoing),routing tables, and a number of network interface (network interface controller or software-defined network interface) and network protocol statistics.
|
||||
|
||||
Ubuntu and Debian users can use the default package manager to install netstat on their box. Netstat software includes inside the package net-tools. And can be installed by running the below commands in a shell or terminal:
|
||||
|
||||
sudo apt-get install net-tools
|
||||
|
||||
CentOS, Fedora, RHEL users can use the default package manager to install netstat on their box. Netstat software includes inside the package net-tools. And can be installed by running the below commands in a shell or terminal:
|
||||
|
||||
yum install net-tools
|
||||
|
||||
Simply, run the following to monitor the network packet statistic with Netstat:
|
||||
|
||||
netstat
|
||||
|
||||
|
||||
|
||||
For more information or manual about netstat, we can simply type man netstat in a shell or terminal:
|
||||
|
||||
man netstat
|
||||
|
||||
|
||||
|
||||
### 7) Netload ###
|
||||
|
||||
The netload command just displays a small report on the current traffic load, and the total number of bytes transferred since the program start. No more features are there. Its part of the netdiag.
|
||||
|
||||
We can install Netload using yum in fedora as it is in the default repository. But if you're running CentOS or RHEL, we'll need to install [rpmforge repository][1] .
|
||||
|
||||
# yum install netdiag
|
||||
|
||||
Netload is available in the default repository as a part of netdiag so, we can easily install **netdiag** using **apt** manager using the command below.
|
||||
|
||||
$ sudo install netdiag
|
||||
|
||||
To run netload, we must make sure to choose a working network interface name like eth0, eh1, wlan0, mon0, etc. And run the following command accordingly in a shell or a terminal.
|
||||
|
||||
$ netload wlan2
|
||||
|
||||
Note: Please replace wlan2 with the network interface name you wanna use. If you wanna scan for your network interface name run ip link show in a terminal or shell.
|
||||
|
||||
### 8) Nagios ###
|
||||
|
||||
Nagios is a leading open source powerful monitoring system that enables network/system administrators to identify and resolve server related problems before they affect major business processes. With the Nagios system, administrators can able to monitor remote Linux, Windows, Switches, Routers and Printers on a single window. It shows critical warnings and indicates if something went wrong in your network/server which indirectly helps you to begin remediation processes before they occur.
|
||||
|
||||
Nagios has a web interface in which there is a graphical monitor of activities. One can login to the web interface by browsing to the url http://localhost/nagios/ or http://localhost/nagios3/ . Please replace localhost with your IP-address if on remote machine. Then enter the username and pass then, we'll get to see the information like shown below.
|
||||
|
||||
|
||||
|
||||
### 9) EtherApe ###
|
||||
|
||||
EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes and support interfaces Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP and WLAN devices, plus several encapsulation formats. Hosts and links change in size with traffic and color coded protocols display. It can filter traffic to be shown, and can read packets from a file as well as live from the network.
|
||||
|
||||
It is easy to install etherape in CentOS, Fedora, RHEL distributions of Linux cause they are available default on their official repository. We can use yum manager to install it with the command shown below:
|
||||
|
||||
yum install etherape
|
||||
|
||||
We can install EtherApe on Ubuntu, Debian and their derivatives using **apt** manager with the below command.
|
||||
|
||||
sudo apt-get install etherape
|
||||
|
||||
After EtherApe is installed on the system, we'll need to run etherape in root permission as:
|
||||
|
||||
sudo etherape
|
||||
|
||||
Then, the **GUI** of **etherape** will be executed. Then, up in the menu we can select the **Mode** (IP, Link Layer, TCP) and **Interface** under **Capture**. After everything are set, we'll need to click **Start** button. Then, we'll gonna see something like this.
|
||||
|
||||
|
||||
|
||||
### 10) tcpflow ###
|
||||
|
||||
tcpflow is a command line utility that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging. It reconstructs the actual data streams and stores each flow in a separate file for later analysis. It understands TCP sequence numbers and will correctly reconstruct data streams regardless of retransmissions or out-of-order delivery .
|
||||
|
||||
Installing tcpflow in Ubuntu, Debian system is easy via **apt** manager as it is available by default in the official repository.
|
||||
|
||||
$ sudo apt-get install tcpflow
|
||||
|
||||
We can install tcpflow in Fedora, CentOS, RHEL and their derivatives from repository using **yum** manager as shown below.
|
||||
|
||||
# yum install tcpflow
|
||||
|
||||
If it is not available in the repository or can't be installed via yum manager, we need to install manually from **http://pkgs.repoforge.org/tcpflow/** as shown below.
|
||||
|
||||
If you are running 64 bit PC:
|
||||
|
||||
# yum install --nogpgcheck http://pkgs.repoforge.org/tcpflow/tcpflow-0.21-1.2.el6.rf.x86_64.rpm
|
||||
|
||||
If you are running 32 bit PC:
|
||||
|
||||
# yum install --nogpgcheck http://pkgs.repoforge.org/tcpflow/tcpflow-0.21-1.2.el6.rf.i686.rpm
|
||||
|
||||
We can use tcpflow to capture all/some tcp traffic and put it in an easy to read file. The below command does what we want but we'll need to run that command in an empty directory as it creates files of the format x.x.x.x.y-a.a.a.a.z and after done, just press Control-C that command to stop it.
|
||||
|
||||
$ sudo tcpflow -i eth0 port 8000
|
||||
|
||||
Note: Please replace eth0 with the interface of the card you are trying to capture.
|
||||
|
||||
### 11) IPTraf ###
|
||||
|
||||
[IPTraf][2] is a console-based network statistics utility for Linux. It gathers a variety of figures such as TCP connection packet and byte counts, interface statistics and activity indicators, TCP/UDP traffic breakdowns, and LAN station packet and byte counts.
|
||||
|
||||
IPTraf is available in the default repository so, we can easily install IPTraf using **apt** manager using the command below.
|
||||
|
||||
$ sudo apt-get install iptraf
|
||||
|
||||
IPTraf is available in the default repository so, we can easily install IPTraf using yum manager using the command below.
|
||||
|
||||
# yum install iptraf
|
||||
|
||||
We need to run TPTraf in administration permission with a valid network interface name. Here, we have wlan2 so, we'll be using wlan2 as interface name.
|
||||
|
||||
$ sudo iptraf
|
||||
|
||||
|
||||
|
||||
To start the general interface statistics, enter:
|
||||
|
||||
# iptraf -g
|
||||
|
||||
To see the detailed statistics facility on an interface called eth0
|
||||
|
||||
# iptraf -d wlan2
|
||||
|
||||
To see the TCP and UDP monitor on an interface called eth0
|
||||
|
||||
# iptraf -z wlan2
|
||||
|
||||
To displays the packet size counts on an interface called eth0
|
||||
|
||||
# iptraf -z wlan2
|
||||
|
||||
Note: Please replace wlan2 with your interface name. You can check your interface by running command ip link show .
|
||||
|
||||
### 12) Speedometer ###
|
||||
|
||||
Speedometer is a small and simple tool that just draws out good looking graphs of incoming and outgoing traffic through a given interface.
|
||||
|
||||
Speedometer is available in the default repository so, we can easily install Speedometer using yum manager using the command below.
|
||||
|
||||
# yum install speedometer
|
||||
|
||||
Speedometer is available in the default repository so, we can easily install Speedometer using apt manager using the command below.
|
||||
|
||||
$ sudo apt-get install speedometer
|
||||
|
||||
Speedometer can simply be run by executing the following command in a shell or a terminal.
|
||||
|
||||
$ speedometer -r wlan2 -t wlan2
|
||||
|
||||
|
||||
|
||||
Note: Please replace wlan2 with the network interface name you would like to use.
|
||||
|
||||
### 13) Netwatch ###
|
||||
|
||||
Netwatch is part of the netdiag collection of tools, and it too displays the connections between local host and other remote hosts, and the speed at which data is transferring on each connection.
|
||||
|
||||
We can install Netwatch using yum in fedora as it is in the default repository. But if you're running CentOS or RHEL, we'll need to install [rpmforge repository][3] .
|
||||
|
||||
# yum install netwatch
|
||||
|
||||
Netwatch is available in the default repository as a part of netdiag so, we can easily install **netdiag** using **apt** manager using the command below.
|
||||
|
||||
$ sudo install netdiag
|
||||
|
||||
To run netwatch, we'll need to execute the following command in a terminal or shell.
|
||||
|
||||
$ sudo netwatch -e wlan2 -nt
|
||||
|
||||
|
||||
|
||||
Note: Please replace wlan2 with the network interface name you wanna use. If you wanna scan for your network interface name run ip link show in a terminal or shell.
|
||||
|
||||
### 14) Trafshow ###
|
||||
|
||||
Trafshow reports the current active connections like netwatch and pktstat, trafshow, their protocol and the data transfer speed on each connection. It can filter out connections using pcap type filters.
|
||||
|
||||
We can install Netwatch using yum in fedora as it is in the default repository. But if you're running CentOS or RHEL, we'll need to install [rpmforge repository][4] .
|
||||
|
||||
# yum install trafshow
|
||||
|
||||
Trafshow is available in the default repository so, we can easily install it using **apt** manager using the command below.
|
||||
|
||||
$ sudo install trafshow
|
||||
|
||||
To monitor using trafshow, we'll need to run the following command in a shell or terminal.
|
||||
|
||||
$ sudo trafshow -i wlan2
|
||||
|
||||
|
||||
|
||||
To monitor specifically tcp connections add tcp as shown below.
|
||||
|
||||
$ sudo trafshow -i wlan2 tcp
|
||||
|
||||
|
||||
|
||||
Note: Please replace wlan2 with the network interface name you wanna use. If you wanna scan for your network interface name run ip link show in a terminal or shell.
|
||||
|
||||
### 15) Vnstat ###
|
||||
|
||||
Vnstat is bit different from most of the other tools. It actually runs a background service/daemon and keeps recording the size of data transfer all the time. Next it can be used to generate a report of the history of network usage.
|
||||
|
||||
We'll need to turn on EPEL Repository then run **yum** manager to install vnstat.
|
||||
|
||||
# yum install vnstat
|
||||
|
||||
Vnstat is available in the default repository. So, we can run **apt** manager to install it using the following command.
|
||||
|
||||
$ sudo apt-get install vnstat
|
||||
|
||||
Running vnstat without any options would simply show the total amount of data transfer that took place since the date the daemon is running.
|
||||
|
||||
$ vnstat
|
||||
|
||||
|
||||
|
||||
To monitor the bandwidth usage in realtime, use the '-l' option (live mode). It would then show the total bandwidth used by incoming and outgoing data, but in a very precise manner without any internal details about host connections or processes.
|
||||
|
||||
$ vnstat -l
|
||||
|
||||
|
||||
|
||||
After done, press Ctrl-C to stop which will result the following type of output
|
||||
|
||||
|
||||
|
||||
### 16) tcptrack ###
|
||||
|
||||
[tcptrack][5] displays the status of TCP connections that it sees on a given network interface. tcptrack monitors their state and displays information such as state, source/destination addresses and bandwidth usage in a sorted, updated list very much like the **top** command.
|
||||
|
||||
As tcptrack is in the repository , we can simply install tcptrack in Debian, Ubuntu from their repository using apt manager. To do so, we'll need to execute the following command in a shell or terminal:
|
||||
|
||||
$ sudo apt-get install tcptrack
|
||||
|
||||
We can install it using yum in fedora as it is in the default repository. But if you're running CentOS or RHEL, we'll need to install [rpmforge repository][6] . To do so, we'll need to run the following commands.
|
||||
|
||||
# wget http://apt.sw.be/redhat/el6/en/x86_64/rpmforge/RPMS/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
|
||||
|
||||
# rpm -Uvh rpmforge-release*rpm
|
||||
|
||||
# yum install tcptrack
|
||||
|
||||
Note: Here, we have downloaded current latest version of rpmforge-release ie 0.5.3-1 . You can always get the latest version from rpmforge repository and do replace with that you downloaded in the above command.
|
||||
|
||||
**tcptrack** needs to be run in root permission or superuser. We'll need to execute tcptrack with the network interface name we wanna monitor the TCP connections of. Here, we've wlan2 so will be using that as:
|
||||
|
||||
sudo tcptrack -i wlan2
|
||||
|
||||
|
||||
|
||||
If you wanna monitor of specific ports then:
|
||||
|
||||
# tcptrack -i wlan2 port 80
|
||||
|
||||
|
||||
|
||||
Please replace 80 with the port number you wanna monitor .Note: Please replace wlan2 with the network interface name you wanna use. If you wanna scan for your network interface name run ip link show in a terminal or shell.
|
||||
|
||||
### 17) CBM ###
|
||||
|
||||
The CBM or Color Bandwidth Meter displays current traffic of all network device. This program is so simple that is should be self-explanatory. Source code and newer versions of CBM are available at [http://www.isotton.com/utils/cbm/][7] .
|
||||
|
||||
As CBM is in the repository , we can simply install CBM in Debian, Ubuntu from their repository using **apt** manager. To do so, we'll need to execute the following command in a shell or terminal:
|
||||
|
||||
$ sudo apt-get install cbm
|
||||
|
||||
We simply need to run cbm in a shell or terminal as shown below:
|
||||
|
||||
$ cbm
|
||||
|
||||
|
||||
|
||||
### 18) bmon ###
|
||||
|
||||
[Bmon][8] or Bandwidth Monitoring is a tool that intended for debugging and monitor bandwidth in real-time access. This tool is capable to retrieving statistics from various input modules. It provides various output methods including a curses based interface,lightweight HTML output but also formatable ASCII output.
|
||||
|
||||
bmon is available in the repository, so we can install it in Debian, Ubuntu from their repository using apt manager. To do so, we'll need to run the following command in a shell or terminal.
|
||||
|
||||
$ sudo apt-get install bmon
|
||||
|
||||
We can run bmon and monitor our bandwidth status using the command below.
|
||||
|
||||
$ bmon
|
||||
|
||||
|
||||
|
||||
### 19) tcpdump ###
|
||||
|
||||
[TCPDump][9] is a tool for network monitoring and data acquisition. It can save lots of time and can be used for debugging network or server related problems. It prints out a description of the contents of packets on a network interface that match the boolean expression.
|
||||
|
||||
tcpdump is available in the default repository of Debian, Ubuntu so, we can simply use apt manager to install it under sudo privilege . To do so, we'll need to run the following command in a shell or terminal.
|
||||
|
||||
$ sudo apt -get install tcpdump
|
||||
|
||||
tcpdump is also available in the repository of Fedora, CentOS, RHEL so, we can install it via yum manager as:
|
||||
|
||||
# yum install tcpdump
|
||||
|
||||
tcpdump needs to be run in root permission or superuser. We'll need to execute tcpdump with the network interface name we wanna monitor the TCP connections of. Here, we've wlan2 so will be using it as:
|
||||
|
||||
$ sudo tcpdump -i wlan2
|
||||
|
||||
|
||||
|
||||
If you want to monitor to a specific port only, then can run the command as follows. Here is the example for port 80 (webserver).
|
||||
|
||||
$ sudo tcpdump -i wlan2 'port 80'
|
||||
|
||||
|
||||
|
||||
### 20) ntopng ###
|
||||
|
||||
[ntopng][20] is the next generation version of the original ntop. It is a network probe that shows network usage in a way similar to what top does for processes. ntopng is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform, MacOSX and on Win32 as well.
|
||||
|
||||
To install ntopng in Debian, Ubuntu system, we'll first need to install the required **dependencies packages to compile ntopng**. You can install them all by running the below command in a shell or a terminal.
|
||||
|
||||
$ sudo apt-get install libpcap-dev libglib2.0-dev libgeoip-dev redis-server wget libxml2-dev build-essential checkinstall
|
||||
|
||||
Now, we'll need to manually compile ntopng for our system as:
|
||||
|
||||
$ sudo wget http://sourceforge.net/projects/ntop/files/ntopng/ntopng-1.1_6932.tgz/download
|
||||
$ sudo tar zxfv ntopng-1.1_6932.tgz
|
||||
$ sudo cd ntopng-1.1_6932
|
||||
$ sudo ./configure
|
||||
$ sudo make
|
||||
$ sudo make install
|
||||
|
||||
Now, you should have your ntopng installed in your Debian or Ubuntu system.
|
||||
|
||||
We have already covered tutorial on ntopng usages. It is available in both command line and web interface. We can go ahead to get knowledge on it.
|
||||
|
||||
### Conclusion ###
|
||||
|
||||
In this first part we covered some network load monitoring tools for linux that are very helpful to a sysadmin and even a novice user. Each one of the tools covered in this article has its own specifics, different options but at the end they all help you to monitor your network traffic.
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: http://linoxide.com/monitoring-2/network-monitoring-tools-linux/
|
||||
|
||||
作者：[Bobbin Zachariah][a]
|
||||
译者：[译者ID](https://github.com/译者ID)
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出
|
||||
|
||||
[a]:http://linoxide.com/author/bobbin/
|
||||
[1]:http://pkgs.org/centos-7/repoforge-x86_64/netwatch-1.0c-1.el7.rf.x86_64.rpm.html
|
||||
[2]:http://iptraf.seul.org/
|
||||
[3]:http://pkgs.org/centos-7/repoforge-x86_64/netwatch-1.0c-1.el7.rf.x86_64.rpm.html
|
||||
[4]:http://pkgs.org/centos-6/epel-x86_64/trafshow-5.2.3-6.el6.x86_64.rpm.html
|
||||
[5]:http://linux.die.net/man/1/tcptrack
|
||||
[6]:http://pkgs.org/centos-6/repoforge-x86_64/tcptrack-1.4.0-1.el6.rf.x86_64.rpm.html
|
||||
[7]:http://www.isotton.com/utils/cbm/
|
||||
[8]:https://github.com/tgraf/bmon/
|
||||
[9]:http://www.tcpdump.org/
|
||||
[10]:http://www.ntop.org/
|
||||
@ -0,0 +1,443 @@
|
||||
领略一些最著名的 Linux 网络工具
|
||||
================================================================================
|
||||
在你的系统上使用命令行工具来监控你的网络是非常实用的，并且对于 Linux 用户来说，有着许许多多现成的工具可以使用，如 nethogs, ntopng, nload, iftop, iptraf, bmon, slurm, tcptrack, cbm, netwatch, collectl, trafshow, cacti, etherape, ipband, jnettop, netspeed 以及 speedometer。
|
||||
|
||||
鉴于世上有着许多的 Linux 专家和开发者，显然还存在其他的网络监控工具，但在这篇教程中，我不打算将它们所有包括在内。
|
||||
|
||||
上面列出的工具都有着自己的独特之处，但归根结底，它们都做着监控网络流量的工作，且并不是只有一种方法来完成这件事。例如 nethogs 可以被用来展示每个进程的带宽使用情况，以防你想知道究竟是哪个应用在消耗了你的整个网络资源； iftop 可以被用来展示每个套接字连接的带宽使用情况，而 像 nload 这类的工具可以帮助你得到有关整个带宽的信息。
|
||||
|
||||
### 1) nethogs ###
|
||||
|
||||
nethogs 是一个免费的工具，当要查找哪个 PID (注：即 process identifier，进程 ID) 给你的网络流量带来了麻烦时，它是非常方便的。它按每个进程来组织带宽，而不是像大多数的工具那样按照每个协议或每个子网来划分流量。它功能丰富，同时支持 IPv4 和 IPv6，并且我认为，若你想在你的 Linux 主机上确定哪个程序正消耗着你的全部带宽，它是来做这件事的最佳的程序。
|
||||
|
||||
一个 Linux 用户可以使用 **nethogs** 来显示每个进程的 TCP 下载和上传速率，使用命令 **nethogs eth0** 来监控一个特定的设备，上面的 eth0 是那个你想获取信息的设备的名称，你还可以得到有关正在被传输的数据的传输速率的信息。
|
||||
|
||||
对我而言， nethogs 是非常容易使用的，或许是因为我非常喜欢它以至于我总是在我的 Ubuntu 12.04 LTS 机器中使用它来监控我的网络带宽。
|
||||
|
||||
例如要想使用混杂模式来嗅探，可以像下面展示的命令那样使用选项 -p：
|
||||
|
||||
nethogs -p wlan0
|
||||
|
||||
假如你想更多地了解 nethogs 并深入探索它，那么请毫不犹豫地阅读我们做的关于这个网络带宽监控工具的整个教程。
|
||||
|
||||
### 2) nload ###
|
||||
|
||||
nload 是一个控制台应用，可以被用来实时地监控网络流量和带宽使用情况，它还通过提供两个简单易懂的图表来对流量进行可视化。这个绝妙的网络监控工具还可以在监控过程中切换被监控的设备，而这可以通过按左右箭头来完成。
|
||||
|
||||
|
||||
|
||||
正如你在上面的截图中所看到的那样，由 nload 提供的图表是非常容易理解的。nload 提供了有用的信息，也展示了诸如被传输数据的总量和最小/最大网络速率等信息。
|
||||
|
||||
而更酷的是你可以在下面的命令的帮助下运行 nload 这个工具，这个命令是非常的短小且易记的：
|
||||
|
||||
nload
|
||||
|
||||
我很确信的是：我们关于如何使用 nload 的详细教程将帮助到新的 Linux 用户，甚至可以帮助那些正寻找关于 nload 信息的老手。
|
||||
|
||||
### 3) slurm ###
|
||||
|
||||
slurm 是另一个 Linux 网络负载监控工具，它以一个不错的 ASCII 图来显示结果，它还支持许多键值用以交互，例如 **c** 用来切换到经典模式， **s** 切换到分图模式， **r** 用来重绘屏幕， **L** 用来启用 TX/RX（注：TX，发送流量；RX，接收流量） LED，**m** 用来在经典分图模式和大图模式之间进行切换， **q** 退出 slurm。
|
||||
|
||||
|
||||
|
||||
在网络负载监控工具 slurm 中，还有许多其它的键值可用，你可以很容易地使用下面的命令在 man 手册中学习它们。
|
||||
|
||||
man slurm
|
||||
|
||||
slurm 在 Ubuntu 和 Debian 的官方软件仓库中可以找到，所以使用这些发行版本的用户可以像下面展示的那样，使用 apt-get 安装命令来轻松地下载它：
|
||||
|
||||
sudo apt-get install slurm
|
||||
|
||||
我们已经在一个教程中对 slurm 的使用做了介绍，所以请访问相关网页( 注：应该指的是[这篇文章](http://linoxide.com/ubuntu-how-to/monitor-network-load-slurm-tool/) )，并不要忘记和其它使用 Linux 的朋友分享这些知识。
|
||||
|
||||
### 4) iftop ###
|
||||
|
||||
当你想在一个接口上按照主机来展示带宽使用情况时，iftop 是一个非常有用的工具。根据 man 手册，**iftop** 在一个已命名的接口或在它可以找到的第一个接口(假如没有任何特殊情况，它就像一个外部的接口)上监听网络流量，并且展示出一个表格来显示当前一对主机间的带宽使用情况。
|
||||
|
||||
通过在虚拟终端中使用下面的命令，Ubuntu 和 Debian 用户可以在他们的机器中轻易地安装 iftop：
|
||||
|
||||
sudo apt-get install iftop
|
||||
|
||||
在你的机器上，可以使用下面的命令通过 yum 来安装 iftop：
|
||||
|
||||
yum -y install iftop
|
||||
|
||||
### 5) collectl ###
|
||||
|
||||
collectl 可以被用来收集描述当前系统状态的数据，并且它支持如下两种模式：
|
||||
|
||||
- 记录模式
|
||||
- 回放模式
|
||||
|
||||
**记录模式** 允许从一个正在运行的系统中读取数据，然后将这些数据要么显示在终端中，要么写入一个或多个文件或套接字中。
|
||||
|
||||
**回放模式**
|
||||
|
||||
根据 man 手册，在这种模式下，数据从一个或多个由记录模式生成的数据文件中读取。
|
||||
|
||||
Ubuntu 和 Debian 用户可以在他们的机器上使用他们默认的包管理器来安装 colletcl。下面的命令将为他们做这个工作：
|
||||
|
||||
sudo apt-get install collectl
|
||||
|
||||
还可以使用下面的命令来安装 collectl， 因为对于这些发行版本(注:这里指的是用 yum 作为包管理器的发行版本)，在它们官方的软件仓库中也含有 collectl：
|
||||
|
||||
yum install collectl
|
||||
|
||||
### 6) Netstat ###
|
||||
|
||||
Netstat 是一个用来监控**传入和传出的网络数据包统计数据**和接口统计数据的命令行工具。它为传输控制协议 TCP (包括上传和下行)，路由表，及一系列的网络接口(网络接口控制器或者软件定义的网络接口) 和网络协议统计数据展示网络连接情况。
|
||||
|
||||
Ubuntu 和 Debian 用户可以在他们的机器上使用默认的包管理器来安装 netstat。Netsta 软件被包括在 net-tools 软件包中，并可以在 shell 或虚拟终端中运行下面的命令来安装它：
|
||||
|
||||
sudo apt-get install net-tools
|
||||
|
||||
CentOS, Fedora, RHEL 用户可以在他们的机器上使用默认的包管理器来安装 netstat。Netstat 软件被包括在 net-tools 软件包中，并可以在 shell 或虚拟终端中运行下面的命令来安装它：
|
||||
|
||||
yum install net-tools
|
||||
|
||||
运行下面的命令使用 Netstat 来轻松地监控网络数据包统计数据：
|
||||
|
||||
netstat
|
||||
|
||||
|
||||
|
||||
更多的关于 netstat 的信息，我们可以简单地在 shell 或终端中键入 man netstat 来了解：
|
||||
|
||||
man netstat
|
||||
|
||||
|
||||
|
||||
### 7) Netload ###
|
||||
|
||||
netload 命令只展示一个关于当前网络荷载和自从程序运行之后传输数据总的字节数目的简要报告，它没有更多的功能。它是 netdiag 软件的一部分。
|
||||
|
||||
我们可以在 fedora 中使用 yum 来安装 Netload，因为它在 fedora 的默认软件仓库中。但假如你运行的是 CentOS 或 RHEL，则我们需要安装 [rpmforge 软件仓库][1]。
|
||||
|
||||
# yum install netdiag
|
||||
|
||||
Netload 在默认仓库中作为 netdiag 的一部分可以被找到，我们可以轻易地使用下面的命令来利用 **apt** 包管理器安装 **netdiag**：
|
||||
|
||||
$ sudo apt-get install netdiag (注：这里原文为 sudo install netdiag，应该加上 apt-get)
|
||||
|
||||
为了运行 netload，我们需要确保选择了一个正在工作的网络接口的名称，如 eth0, eh1, wlan0, mon0等，然后在 shell 或虚拟终端中运行下面的命令：
|
||||
|
||||
$ netload wlan2
|
||||
|
||||
注意： 请将上面的 wlan2 替换为你想使用的网络接口名称，假如你想通过扫描了解你的网络接口名称，可以在一个虚拟终端或 shell 中运行 `ip link show` 命令。
|
||||
|
||||
### 8) Nagios ###
|
||||
|
||||
Nagios 是一个领先且功能强大的开源监控系统，它使得网络或系统管理员在服务器相关的问题影响到服务器的主要事务之前，鉴定并解决这些问题。 有了 Nagios 系统，管理员便可以在一个单一的窗口中监控远程的 Linux 、Windows 系统、交换机、路由器和打印机等。它显示出重要的警告并指示出在你的网络或服务器中是否出现某些故障，这间接地帮助你在问题发生之前，着手执行补救行动。
|
||||
|
||||
Nagios 有一个 web 界面，其中有一个图形化的活动监视器。通过浏览网页 http://localhost/nagios/ 或 http://localhost/nagios3/ 便可以登录到这个 web 界面。假如你在远程的机器上进行操作，请使用你的 IP 地址来替换 localhost，然后键入用户名和密码，我们便会看到如下图所展示的信息：
|
||||
|
||||
|
||||
|
||||
### 9) EtherApe ###
|
||||
|
||||
EtherApe 是一个针对 Unix 的图形化网络监控工具，它仿照了 etherman 软件。它具有链路层，IP 和 TCP 模式并支持 Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP 及 WLAN 设备等接口，再加上支持一些封装的格式。主机和链接随着流量大小和被着色的协议名称展示而变化。它可以过滤要展示的流量，并可从一个文件或运行的网络中读取数据报。
|
||||
|
||||
在 CentOS、Fedora、RHEL 等 Linux 发行版本中安装 etherape 是一件容易的事，因为在它们的官方软件仓库中就可以找到 etherape。我们可以像下面展示的命令那样使用 yum 包管理器来安装它：
|
||||
|
||||
yum install etherape
|
||||
|
||||
我们可以使用下面的命令在 Ubuntu、Debian 及它们的衍生发行版本中使用 **apt** 包管理器来安装 EtherApe ：
|
||||
|
||||
sudo apt-get install etherape
|
||||
|
||||
在 EtherApe 安装到你的系统之后，我们需要像下面那样以 root 权限来运行 etherape：
|
||||
|
||||
sudo etherape
|
||||
|
||||
然后， **etherape** 的 **图形用户界面** 便会被执行。接着，在菜单上面的 **捕捉** 选项下，我们可以选择 **模式**(IP,链路层，TCP) 和 **接口**。一切设定完毕后，我们需要点击 **开始** 按钮。接着我们便会看到类似下面截图的东西：
|
||||
|
||||
|
||||
|
||||
### 10) tcpflow ###
|
||||
|
||||
tcpflow 是一个命令行工具，它可以捕捉作为 TCP 连接(流)的一部分的传输数据，并以一种方便协议分析或除错的方式来存储数据。它重建了实际的数据流并将每个流存储在不同的文件中，以备日后的分析。它理解 TCP 序列号并可以正确地重建数据流，不管是在重发或乱序发送状态下。
|
||||
|
||||
通过 **apt** 包管理器在 Ubuntu 、Debian 系统中安装 tcpflow 是很容易的，因为默认情况下在官方软件仓库中可以找到它。
|
||||
|
||||
$ sudo apt-get install tcpflow
|
||||
|
||||
我们可以使用下面的命令通过 **yum** 包管理器在 Fedora 、CentOS 、RHEL 及它们的衍生发行版本中安装 tcpflow：
|
||||
|
||||
# yum install tcpflow
|
||||
|
||||
假如在软件仓库中没有找到它或不能通过 yum 包管理器来安装它，则我们需要像下面展示的那样从 **http://pkgs.repoforge.org/tcpflow/** 上手动安装它：
|
||||
|
||||
假如你运行 64 位的 PC：
|
||||
|
||||
# yum install --nogpgcheck http://pkgs.repoforge.org/tcpflow/tcpflow-0.21-1.2.el6.rf.x86_64.rpm
|
||||
|
||||
假如你运行 32 位的 PC：
|
||||
|
||||
# yum install --nogpgcheck http://pkgs.repoforge.org/tcpflow/tcpflow-0.21-1.2.el6.rf.i686.rpm
|
||||
|
||||
我们可以使用 tcpflow 来捕捉全部或部分 tcp 流量并以一种简单的方式把它们写到一个可读文件中。下面的命令执行着我们想要做的事情，但我们需要在一个空目录中运行下面的命令，因为它将创建诸如 x.x.x.x.y-a.a.a.a.z 格式的文件，做完这些之后，只需按 Ctrl-C 便可停止这个命令。
|
||||
|
||||
$ sudo tcpflow -i eth0 port 8000
|
||||
|
||||
注意：请将上面的 eth0 替换为你想捕捉的网卡接口名称。
|
||||
|
||||
### 11) IPTraf ###
|
||||
|
||||
[IPTraf][2] 是一个针对 Linux 平台的基于控制台的网络统计应用。它生成一系列的图形，如 TCP 连接包和字节的数目、接口信息和活动指示器、 TCP/UDP 流量故障以及 LAN 状态包和字节的数目。
|
||||
|
||||
在默认的软件仓库中可以找到 IPTraf，所以我们可以使用下面的命令通过 **apt** 包管理器轻松地安装 IPTraf：
|
||||
|
||||
$ sudo apt-get install iptraf
|
||||
|
||||
在默认的软件仓库中可以找到 IPTraf，所以我们可以使用下面的命令通过 **yum** 包管理器轻松地安装 IPTraf：
|
||||
|
||||
# yum install iptraf
|
||||
|
||||
我们需要以管理员权限来运行 IPTraf(注：这里原文写错为 TPTraf)，并带有一个可用的网络接口名。这里，我们的网络接口名为 wlan2，所以我们使用 wlan2 来作为接口的名称：
|
||||
|
||||
$ sudo iptraf wlan2 (注：这里原文为 sudo iptraf,应该加上 wlan2)
|
||||
|
||||
|
||||
|
||||
开始一般的网络接口统计，键入：
|
||||
|
||||
# iptraf -g
|
||||
|
||||
为了在一个名为 eth0 的接口设备上看详细的统计信息，使用：
|
||||
|
||||
# iptraf -d wlan2 (注：这里的 wlan2 和 上面的 eth0 不一致，下面的几句也是这种情况，请相应地改正)
|
||||
|
||||
为了看一个名为 eth0 的接口的 TCP 和 UDP 监控，使用：
|
||||
|
||||
# iptraf -z wlan2
|
||||
|
||||
为了展示在一个名为 eth0 的接口上的包的大小和数目，使用：
|
||||
|
||||
# iptraf -z wlan2
|
||||
|
||||
注意:请将上面的 wlan2 替换为你的接口名称。你可以通过运行`ip link show`命令来检查你的接口。
|
||||
|
||||
### 12) Speedometer ###
|
||||
|
||||
Speedometer 是一个小巧且简单的工具，它只绘出一幅包含有通过某个给定端口的上行、下行流量的好看的图。
|
||||
|
||||
在默认的软件仓库中可以找到 Speedometer ，所以我们可以使用下面的命令通过 **yum** 包管理器轻松地安装 Speedometer：
|
||||
|
||||
# yum install speedometer
|
||||
|
||||
在默认的软件仓库中可以找到 Speedometer ，所以我们可以使用下面的命令通过 **apt** 包管理器轻松地安装 Speedometer：
|
||||
|
||||
$ sudo apt-get install speedometer
|
||||
|
||||
Speedometer 可以简单地通过在 shell 或虚拟终端中执行下面的命令来运行：
|
||||
|
||||
$ speedometer -r wlan2 -t wlan2
|
||||
|
||||
|
||||
|
||||
注：请将上面的 wlan2 替换为你想要使用的网络接口名称。
|
||||
|
||||
### 13) Netwatch ###
|
||||
|
||||
Netwatch 是 netdiag 工具集里的一部分，并且它也显示出当前主机和其他远程主机的连接情况，以及在每个连接中数据传输的速率。
|
||||
|
||||
我们可以使用 yum 在 fedora 中安装 Netwatch，因为它在 fedora 的默认软件仓库中。但若你运行着 CentOS 或 RHEL ， 我们需要安装 [rpmforge 软件仓库][3]。
|
||||
|
||||
# yum install netwatch
|
||||
|
||||
Netwatch 作为 netdiag 的一部分可以在默认的软件仓库中找到，所以我们可以轻松地使用下面的命令来利用 **apt** 包管理器安装 **netdiag**：
|
||||
|
||||
$ sudo apt-get install netdiag（注：这里应该加上 apt-get
|
||||
|
||||
为了运行 netwatch， 我们需要在虚拟终端或 shell 中执行下面的命令：
|
||||
|
||||
$ sudo netwatch -e wlan2 -nt
|
||||
|
||||
|
||||
|
||||
注意： 请将上面的 wlan2 替换为你想使用的网络接口名称，假如你想通过扫描了解你的网络接口名称，可以在一个虚拟终端或 shell 中运行 `ip link show` 命令。
|
||||
|
||||
### 14) Trafshow ###
|
||||
|
||||
Trafshow 同 netwatch 和 pktstat(注：这里原文中多了一个 trafshow)一样，可以报告当前激活的连接里使用的协议和每个连接中数据传输的速率。它可以使用 pcap 类型的滤波器来筛选出特定的连接。
|
||||
|
||||
我们可以使用 yum 在 fedora 中安装 trafshow(注:这里原文为 Netwatch，应该为 trafshow)，因为它在 fedora 的默认软件仓库中。但若你正运行着 CentOS 或 RHEL ， 我们需要安装 [rpmforge 软件仓库][4]。
|
||||
|
||||
# yum install trafshow
|
||||
|
||||
Trafshow 在默认仓库中可以找到，所以我们可以轻松地使用下面的命令来利用 **apt** 包管理器安装它：
|
||||
|
||||
$ sudo apt-get install trafshow（注：原文少了 apt-get）
|
||||
|
||||
为了使用 trafshow 来执行监控任务，我们需要在虚拟终端或 shell 中执行下面的命令：
|
||||
|
||||
$ sudo trafshow -i wlan2
|
||||
|
||||
|
||||
|
||||
为了特别地监控 tcp 连接，如下面一样添加上 tcp 参数：
|
||||
|
||||
$ sudo trafshow -i wlan2 tcp
|
||||
|
||||
|
||||
|
||||
注意： 请将上面的 wlan2 替换为你想使用的网络接口名称，假如你想通过扫描了解你的网络接口名称，可以在一个虚拟终端或 shell 中运行 `ip link show` 命令。
|
||||
|
||||
### 15) Vnstat ###
|
||||
|
||||
与大多数的其他工具相比，Vnstat 有一点不同。实际上它运行一个后台服务或守护进程，并时刻记录着传输数据的大小。另外，它可以被用来生成一个带有网络使用历史记录的报告。
|
||||
|
||||
我们需要开启 EPEL 软件仓库，然后运行 **yum** 包管理器来安装 vnstat。
|
||||
|
||||
# yum install vnstat
|
||||
|
||||
Vnstat 在默认软件仓库中可以找到，所以我们可以使用下面的命令运行 **apt** 包管理器来安装它：
|
||||
|
||||
$ sudo apt-get install vnstat
|
||||
|
||||
不带有任何选项运行 vnstat 将简单地展示出从该守护进程运行后数据传输的总量。
|
||||
|
||||
$ vnstat
|
||||
|
||||
|
||||
|
||||
为了实时地监控带宽使用情况，使用 ‘-l’ 选项(实时模式)。然后它将以一种非常精确的方式来展示被上行和下行数据所使用的带宽总量，但不会显示任何有关主机连接或进程的内部细节。
|
||||
|
||||
$ vnstat -l
|
||||
|
||||
|
||||
|
||||
完成了上面的步骤后，按 Ctrl-C 来停止，这将会得到如下类型的输出：
|
||||
|
||||
|
||||
|
||||
### 16) tcptrack ###
|
||||
|
||||
[tcptrack][5] 可以展示 TCP 连接的状态，它在一个给定的网络端口上进行监听。tcptrack 监控它们的状态并展示出一个经过排列且不断更新的有关来源/目标地址、带宽使用情况等信息的列表，这与 **top** 命令的输出非常类似 。
|
||||
|
||||
鉴于 tcptrack 在软件仓库中，我们可以轻松地在 Debian、Ubuntu 系统中从软件仓库使用 **apt** 包管理器来安装 tcptrack。为此，我们需要在 shell 或虚拟终端中执行下面的命令：
|
||||
|
||||
$ sudo apt-get install tcptrack
|
||||
|
||||
我们可以通过 yum 在 fedora 中安装它，因为它在 fedora 的默认软件仓库中。但若你运行着 CentOS 或 RHEL 系统，我们需要安装 [rpmforge 软件仓库][6]。为此，我们需要运行下面的命令：
|
||||
|
||||
# wget http://apt.sw.be/redhat/el6/en/x86_64/rpmforge/RPMS/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
|
||||
|
||||
# rpm -Uvh rpmforge-release*rpm
|
||||
|
||||
# yum install tcptrack
|
||||
|
||||
注：这里我们下载了 rpmforge-release 的当前最新版本，即 0.5.3-1，你总是可以从 rpmforge 软件仓库中下载其最新版本，并请在上面的命令中替换为你下载的版本。
|
||||
|
||||
**tcptrack** 需要以 root 权限或超级用户身份来运行。执行 tcptrack 时，我们需要带上那个我们想监视的网络接口 TCP 连接状况的接口名称。这里我们的接口名称为 wlan2，所以如下面这样使用：
|
||||
|
||||
sudo tcptrack -i wlan2
|
||||
|
||||
|
||||
|
||||
假如你想监控特定的端口，则使用：
|
||||
|
||||
# tcptrack -i wlan2 port 80
|
||||
|
||||
|
||||
|
||||
请替换上面的 80 为你想要监控的端口号。注意： 请将上面的 wlan2 替换为你想使用的网络接口名称，假如你想通过扫描了解你的网络接口名称，可以在一个虚拟终端或 shell 中运行 `ip link show` 命令。
|
||||
|
||||
### 17) CBM ###
|
||||
|
||||
CBM 或 Color Bandwidth Meter 可以展示出当前所有网络设备的流量使用情况。这个程序是如此的简单，以至于应该可以从它的名称中看出其功能。CBM 的源代码和新版本可以在 [http://www.isotton.com/utils/cbm/][7] 上找到。
|
||||
|
||||
鉴于 CBM 已经包含在软件仓库中，我们可以简单地使用 **apt** 包管理器从 Debian、Ubuntu 的软件仓库中安装 CBM。为此，我们需要在一个 shell 窗口或虚拟终端中运行下面的命令：
|
||||
|
||||
$ sudo apt-get install cbm
|
||||
|
||||
我们只需使用下面展示的命令来在 shell 窗口或虚拟终端中运行 cbm：
|
||||
|
||||
$ cbm
|
||||
|
||||
|
||||
|
||||
### 18) bmon ###
|
||||
|
||||
[Bmon][8] 或 Bandwidth Monitoring ，是一个用于调试和实时监控带宽的工具。这个工具能够检索各种输入模块的统计数据。它提供了多种输出方式，包括一个基于 curses 库的界面，轻量级的HTML输出，以及 ASCII 输出格式。
|
||||
|
||||
bmon 可以在软件仓库中找到，所以我们可以通过使用 apt 包管理器来在 Debian、Ubuntu 中安装它。为此，我们需要在一个 shell 窗口或虚拟终端中运行下面的命令：
|
||||
|
||||
$ sudo apt-get install bmon
|
||||
|
||||
我们可以使用下面的命令来运行 bmon 以监视我们的网络状态：
|
||||
|
||||
$ bmon
|
||||
|
||||
|
||||
|
||||
### 19) tcpdump ###
|
||||
|
||||
[TCPDump][9] 是一个用于网络监控和数据获取的工具。它可以为我们节省很多的时间，并可用来调试网络或服务器 的相关问题。它打印出在某个网络接口上与布尔表达式匹配的数据包所包含的内容的一个描述。
|
||||
|
||||
tcpdump 可以在 Debian、Ubuntu 的默认软件仓库中找到，我们可以简单地以 sudo 权限使用 apt 包管理器来安装它。为此，我们需要在一个 shell 窗口或虚拟终端中运行下面的命令：
|
||||
|
||||
$ sudo apt -get install tcpdump
|
||||
|
||||
tcpdump 也可以在 Fedora、CentOS、RHEL 的软件仓库中找到。我们可以像下面一样通过 yum 包管理器来安装它：
|
||||
|
||||
# yum install tcpdump
|
||||
|
||||
tcpdump 需要以 root 权限或超级用户来运行，我们需要带上我们想要监控的 TCP 连接的网络接口名称来执行 tcpdump 。在这里，我们有 wlan2 这个网络接口，所以可以像下面这样使用：
|
||||
|
||||
$ sudo tcpdump -i wlan2
|
||||
|
||||
|
||||
|
||||
|
||||
假如你只想监视一个特定的端口，则可以运行下面的命令。下面是一个针对 80 端口(网络服务器)的例子：
|
||||
|
||||
$ sudo tcpdump -i wlan2 'port 80'
|
||||
|
||||
|
||||
|
||||
### 20) ntopng ###
|
||||
|
||||
[ntopng][20] 是 ntop 的下一代版本。它是一个用于展示网络使用情况的网络探头，在一定程度上它与 top 针对进程所做的工作类似。ntopng 基于 libpcap 并且它以可移植的方式被重写，以达到可以在每一个 Unix 平台 、 MacOSX 以及 Win32 上运行的目的。
|
||||
|
||||
为了在 Debian，Ubuntu 系统上安装 ntopng，首先我们需要安装 **编译 ntopng 所需的依赖软件包**。你可以通过在一个 shell 窗口或一个虚拟终端中运行下面的命令来安装它们：
|
||||
|
||||
$ sudo apt-get install libpcap-dev libglib2.0-dev libgeoip-dev redis-server wget libxml2-dev build-essential checkinstall
|
||||
|
||||
现在，我们需要像下面一样针对我们的系统手动编译 ntopng ：
|
||||
|
||||
$ sudo wget http://sourceforge.net/projects/ntop/files/ntopng/ntopng-1.1_6932.tgz/download
|
||||
$ sudo tar zxfv ntopng-1.1_6932.tgz
|
||||
$ sudo cd ntopng-1.1_6932
|
||||
$ sudo ./configure
|
||||
$ sudo make
|
||||
$ sudo make install
|
||||
|
||||
这样，在你的 Debian 或 Ubuntu 系统上应该已经安装上了你编译的 ntopng 。
|
||||
|
||||
我们已经有了有关 ntopng 的使用方法的[教程](linoxide.com/monitoring-2/ntopng-network-monitoring-tool/)，它既可以在命令行也可以在 Web 界面中使用，我们可以前往这些教程来获得有关 ntopng 的知识。
|
||||
|
||||
### 结论 ###
|
||||
|
||||
在第一部分中(注：我认为原文多了 first 这个单词，总之是前后文的内容有些不连贯)，我们介绍了一些在 Linux 下的网络负载监控工具，这对于系统管理员甚至是新手来说，都是很有帮助的。在这篇文章中介绍的每一个工具都有其特点，不同的选项等，但最终它们都可以帮助你来监控你的网络流量。
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
via: http://linoxide.com/monitoring-2/network-monitoring-tools-linux/
|
||||
|
||||
作者：[Bobbin Zachariah][a]
|
||||
译者：[FSSlc](https://github.com/FSSlc)
|
||||
校对：[校对者ID](https://github.com/校对者ID)
|
||||
|
||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创翻译，[Linux中国](http://linux.cn/) 荣誉推出
|
||||
|
||||
[a]:http://linoxide.com/author/bobbin/
|
||||
[1]:http://pkgs.org/centos-7/repoforge-x86_64/netwatch-1.0c-1.el7.rf.x86_64.rpm.html
|
||||
[2]:http://iptraf.seul.org/
|
||||
[3]:http://pkgs.org/centos-7/repoforge-x86_64/netwatch-1.0c-1.el7.rf.x86_64.rpm.html
|
||||
[4]:http://pkgs.org/centos-6/epel-x86_64/trafshow-5.2.3-6.el6.x86_64.rpm.html
|
||||
[5]:http://linux.die.net/man/1/tcptrack
|
||||
[6]:http://pkgs.org/centos-6/repoforge-x86_64/tcptrack-1.4.0-1.el6.rf.x86_64.rpm.html
|
||||
[7]:http://www.isotton.com/utils/cbm/
|
||||
[8]:https://github.com/tgraf/bmon/
|
||||
[9]:http://www.tcpdump.org/
|
||||
[10]:http://www.ntop.org/
|
||||
Loading…
Reference in New Issue
Block a user