Steven
02-01-2004, 06:56 PM
What is iftop? What does it do?
iftop does for network usage what top(1) does for CPU usage.
Screenshot:
http://www.ex-parrot.com/~pdw/iftop/iftop_normal.png
Installation:
wget http://www.ex-parrot.com/~pdw/iftop/download/iftop-0.15.tar.gz
tar -zxvf iftop-0.15.tar.gz
cd iftop-0.15
./configure
make
make install
To run it:
/usr/local/sbin/iftop
mainarea
02-03-2004, 05:59 PM
checking where to find pcap.h... no idea
configure: error: can't find pcap.h
You're not going to get very far without libpcap.
You may want to add how to install libpcap on your system. That error shows up on a plain RedHat 9 box.
- Matt
choon
02-03-2004, 06:32 PM
Actually it required:
libpcap
libcurses
which we can read it at http://www.ex-parrot.com/~pdw/iftop/
Using up2date to install the required packages:
up2date libpcap ncurses ncurses-devel
AP2k2
02-04-2004, 02:49 AM
you can add your libpcap from your WHM. Go to install rpm. Go down to libpcap.
choon
02-04-2004, 02:57 AM
Originally posted by AP2k2
you can add your libpcap from your WHM. Go to install rpm. Go down to libpcap.
What if you are not using any control panel ?
mainarea
02-06-2004, 09:13 AM
http://www.rpmfind.net/linux/rpm2html/search.php?query=libpcap
http://www.rpmfind.net/linux/rpm2html/search.php?query=ncurses
You can get RPMs for those files from RPMFind.
- Matt
(edit: removed signature)
websterworld
02-06-2004, 10:06 AM
why not use apt-get? (if its been ported to your distro)
<edit>signature removed</edit>
daveman
02-16-2004, 11:13 PM
Nice tool, thanks.
<edit>signature removed</edit>
devilbala
02-17-2004, 06:16 AM
I've implemented it in my Redhat box.
Nice tool... Now, I can make my network monitoring software to use this to do some of the work that i really thought of coding myself.
Thanks.
-Devil
uneedawebsit
02-17-2004, 08:27 AM
Does this put the ethernet card into PROMISC mode? I installed it and chkrootkit told me the ethernet was in PROMISC mode the next time it ran.
<edit>signature removed</edit>
Slidey
02-17-2004, 11:03 AM
iirc yes it will, iftop is based on pcap, which will set the interface this way so you can capture all the packets on teh card
KingAdmin
02-19-2004, 01:19 PM
actually chkrootkit reports anomalies pretty often. if you run cpanel it will also indicate smtps listening on port 465 as a bindshell which is a false alarm of course.
<edit>signature removed</edit>
KIA-Joe
03-14-2004, 11:57 AM
Nice app ...
<edit>signature removed</edit>
joekushner
04-28-2004, 10:10 AM
this is a nice app.. any way with name based hosting for it to show the actual domain of the site or am i stuck with just seeing the server name as the address