Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

There are plenty of ways to monitor traffic on a specific interface or even by port. But if I am on a router and suspect one of the workstations is using more bandwidth then others, how to check?

share|improve this question

2 Answers

up vote 1 down vote accepted

iftop will show the TCP/UDP streams on an interface in realtime, which is often sufficient to identify which host is hogging the bandwidth. If you want something to record this over time, try darkstat or bandwidthd.

share|improve this answer
Thank you, any way to monitor across multiple interfaces? either with iftop or similar? – Alex Jun 12 '12 at 3:44
Looks like you have to run an iftop per interface. – mgorven Jun 12 '12 at 4:19

Try using something like Wireshark and filtering the IP's to the workstation's specific IP. You can see how much data is on the network that has originated from that machine. If its flooding the network with traffic then you will see on Wireshark.

Wireshark does come with command line tools if you don't have a X server on your Linux router. Its not the most elegant solution but it will get it down and tell you exactly how much data its sending.

Bill

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.