使用iftop实时监控网卡流量

iftop是类似于top的实时流量监控工具，无报表功能，需使用root运行。

官方网站：http://www.ex-parrot.com/~pdw/iftop/
目前最新版本为: iftop-0.17pre3.tar.gz
安装需要:
libpcap和libcurses

用yum或手动编译
yum install libpcap-devel

安装libpcap时出错
http://www.tcpdump.org/
gcc -O2 -I.  -DHAVE_CONFIG_H  -D_U_=”__attribute__((unused))” -c ./fad-getad.c
In file included from ./fad-getad.c:64:
/usr/include/linux/if_packet.h:52: 错误：expected specifier-qualifier-list before ‘__u32’
make: *** [fad-getad.o] 错误 1

iftop界面:
 

iftop界面说明：
第一行为带宽，这里为1Mbit,不是字节哦.
连接列表，最后三个分别是2秒，10秒和40秒的平均流量
=>代表发送，<= 代表接收
最后三行表示发送，接收和全部的流量，第二列为你运行iftop到目前流量，第三列为高峰值，第四列为平均值。

iftop命令说明：
iftop: display bandwidth usage on an interface by host
 
Synopsis: iftop -h | [-npbBP] [-i interface] [-f filter code] [-N net/mask]
 
   -h                  display this message
   -n                  don’t do hostname lookups（不进行dns解析）
   -N                  don’t convert port numbers to services (直接显示端口号，不显示服务名称)
   -p                  run in promiscuous mode (show traffic between other
                       hosts on the same network segment)（嗅探器）
   -b                  don’t display a bar graph of traffic
   -B                  Display bandwidth in bytes (以字节统计)
   -i interface        listen on named interface
   -f filter code      use filter code to select packets to count
                       (default: none, but only IP packets are counted)
   -F net/mask         show traffic flows in/out of network
   -P                  show ports as well as hosts（按照端口对应ip地址）
   -m limit            sets the upper limit for the bandwidth scale
   -c config file      specifies an alternative configuration file
 
iftop, version 0.17pre3
copyright (c) 2002 Paul Warren <[email protected]> and contributors

iftop安装
wget http://www.ex-parrot.com/~pdw/iftop/download/iftop-0.17pre3.tar.gz
tar zxvf iftop-0.17pre3.tar.gz
cd iftop-0.17pre3
./configure
make
make install
iftop

========================================================

              12.5Kb        25.0Kb        37.5Kb        50.0Kb  62.5Kb
mqqqqqqqqqqqqqvqqqqqqqqqqqqqvqqqqqqqqqqqqqvqqqqqqqqqqqqqvqqqqqqqqqqqqq
192.168.54.96         => 192.168.54.83         1.00Kb  1.86Kb  2.42Kb
                      <=                        160b    518b    485b
192.168.54.96         => 202.96.209.5             0b      0b     95b
                      <=                          0b      0b    168b
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
TX:             cumm:  3.77KB   peak: rates:Kb 1.00Kb  1.86Kb  2.51Kb
RX:                     980B            1.31Kb  160b    518b    653b
TOTAL:                 4.73KB           7.10Kb 1.16Kb  2.36Kb  3.15Kb