1, with the proviso installation # yum install flex byacc libpcap ncurses ncurses-devel libpcap-devel 2, download iftop Source Package # wget http://www.ex-parrot.com/pdw/iftop/download/iftop-0.17.tar. gz 3, mounted iftop # tar xvf iftop-0.17.tar.gz # cd iftop-0.17 # ./configure --prefix = / usr / local / iftop # make # make install 4, using # / usr / local / iftop / sbin / iftop <can be written to the path environment variable> 5, and description parameters <1, the display interface iftop interface described above is related to the scale of similar scale range, to show flow rate patterns for long scale use. Intermediate <= => both left and right arrows indicate the direction of flow. TX: sending traffic RX: receiving traffic TOTAL: Total flow Cumm: iftop to the current running time total flow peak: peak flow rates: respectively represent an average flow rate of 2s 10s 40s <2, iftop common parameter setting parameters -i LAN monitoring, such as: # iftop -i eth1 -B show flow in bytes (default bits), such as: # iftop -B -n the host information directly show the default IP, such as: # iftop -n -N the default port information so that the port number is displayed directly, such as: # iftop -N -F specific network traffic to and from the display, such as # iftop -F 10.10.1.0/24 or # iftop -F 10.10.1.0/255.255.255.0 -h (display this message), helps display the -p parameter information using this parameter, the local host information in the middle of the list shows, there has been the IP information other than this machine; -b graphic bar the flow rate is displayed by default; -f this temporary is also not very good, the packet filter is calculated using; -P host information and port information so that it is displayed by default; maximum scale -m uppermost setting interface, a large scale in five-segment display, for example: # iftop -m 100M to enter the command some operations iftop screen (note case) by switching whether to display help h; n switched by the IP or hostname of the machine; s by switching whether to display the information of the client host; d by switching whether to display the remote target host information of the host; t switch the display by format 2 lines / 1 line / flow rate shows only the transmission / reception traffic display only; N switch the display by port number or service name; S by switching whether to display the port information of the client; D by switching whether to display the remote target host port information; press p switching whether to display port information; by P switch suspend / resume display; press b switching whether to display an average flow rate pattern strip; calculating an average flow rate within 2 seconds or 10 seconds or 40 seconds by switching B; by T toggles shows the total traffic per connection; l by filtering screen opening, to filter the input characters, such as IP, press enter, the screen displays only the IP-related traffic information; the display screen on top of the scale by switching L; scale With, flow will change the graphic bar; or by connecting the recording Press j k may scroll up or down the screen display; by 1 or 2 or 3 can be sorted according to three data traffic appears to the right; Press <The left this name or IP sort; press> hostname or IP sort remote target host; o by switching whether to display only the current fixed connection; f may be edited by the filter code, which is translated to say, I have not used about this! Press! You can use shell commands, this never used! Not understood what command in this easy to use it! Press q to exit monitoring. Press p toggle display port information; P switching by the suspend / resume display; b by switching whether to display the graphic bar average flow rate; calculating an average flow rate within 2 seconds or 10 seconds or 40 seconds by switching B; T by switching whether to display each total flow connection; l by filtering screen opening, to filter the input characters, such as IP, press enter, the screen displays only the IP-related traffic information; the display screen on top of the scale by switching L; different scales, flow graphical bar will change; press j or k can scroll down by connecting up a screen display or recording; press 1 or 2 or 3 can be sorted according to three data traffic appears to the right; according <machine name on the left according to the present or IP sort; by> sort hostname or IP remote target host; o press toggle whether fixed only displays the current connection; f can edit the filter press code, which is translated to say, I have not used this! Press! You can use shell commands, this never used! Not understood what command in this easy to use it! Press q to exit monitoring. Press p toggle display port information; P switching by the suspend / resume display; b by switching whether to display the graphic bar average flow rate; calculating an average flow rate within 2 seconds or 10 seconds or 40 seconds by switching B; T by switching whether to display each total flow connection; l by filtering screen opening, to filter the input characters, such as IP, press enter, the screen displays only the IP-related traffic information; the display screen on top of the scale by switching L; different scales, flow graphical bar will change; press j or k can scroll down by connecting up a screen display or recording; press 1 or 2 or 3 can be sorted according to three data traffic appears to the right; according <machine name on the left according to the present or IP sort; by> sort hostname or IP remote target host; o press toggle whether fixed only displays the current connection; f can edit the filter press code, which is translated to say, I have not used this! Press! You can use shell commands, this never used! Not understood what command in this easy to use it! Press q to exit monitoring.
Reproduced in: https: //my.oschina.net/766/blog/211462