iftop命令¶

iftop: display bandwidth usage on an interface by host:

Synopsis: iftop -h | [-npblNBP] [-i interface] [-f filter code]
  [-F net/mask] [-G net6/mask6]

 -h                  display this message
 -n                  don't do hostname lookups
 -N                  don't convert port numbers to services
 -p                  run in promiscuous mode (show traffic between other
                     hosts on the same network segment)
 -b                  don't display a bar graph of traffic
 -B                  Display bandwidth in bytes
 -i interface        listen on named interface
 -f filter code      use filter code to select packets to count
                    (default: none, but only IP packets are counted)
 -F net/mask         show traffic flows in/out of IPv4 network
 -G net6/mask6       show traffic flows in/out of IPv6 network
 -l                  display and count link-local IPv6 traffic (default: off)
 -P                  show ports as well as hosts
 -m limit            sets the upper limit for the bandwidth scale
 -c config file      specifies an alternative configuration file
 -t                  use text interface without ncurses

 Sorting orders:
 -o 2s                Sort by first column (2s traffic average)
 -o 10s               Sort by second column (10s traffic average) [default]
 -o 40s               Sort by third column (40s traffic average)
 -o source            Sort by source address
 -o destination       Sort by destination address

 The following options are only available in combination with -t
 -s num              print one single text output afer num seconds, then quit
 -L num              number of lines to print

说明:

1.第一行为带宽，这里为1Mbit,不是字节哦.
2.中间连接列表，最后三列分别是2秒，10秒和40秒的平均流量
=> 代表发送
<= 代表接收
3.最后三行表示发送，接收和全部的流量
第二列为你运行iftop到目前流量
第三列为高峰值
第四列为平均值

实例:

iftop           # 默认是监控第一块网卡的流量
iftop -i eth1   # 监控eth1
iftop -n        # 直接显示IP, 不进行DNS反解析
iftop -N        # 直接显示连接埠编号, 不显示服务名称
iftop -F 192.168.1.0/24 or 192.168.1.0/255.255.255.0  # 显示某个网段进出封包流量

iftop -i eth1 -m 500m  # 设定尺度500m