Skip to content

Latest commit

 

History

History
147 lines (108 loc) · 7.42 KB

ifstat.rst

File metadata and controls

147 lines (108 loc) · 7.42 KB
Raw

ifstat

网络监控工具很多，但是一直想找针对指定网口流量的监控工具。1

  1. Overall bandwidth - nload, bmon, slurm, bwm-ng, cbm, speedometer, netload
  2. Overall bandwidth (batch style output) - vnstat, ifstat, dstat, collectl
  3. Bandwidth per socket connection - iftop, iptraf, tcptrack, pktstat, netwatch, trafshow
  4. Bandwidth per process - nethogs

从大到小的观察方式： 整个系统 dstat -> 各个接口 ifstat -> 某个TCP连接 iftop

安装

yum install nload iftop nethogs htop ifstat pktstat

查看整个系统的流量。dstat

[root@localhost ~]# dstat
You did not select any stats, using -cdngy by default.
----total-cpu-usage---- -dsk/total- -net/total- ---paging-- ---system--
usr sys idl wai hiq siq| read  writ| recv  send|  in   out | int   csw
  0   0  99   0   0   0|  16k   22k|   0     0 |  14k   20k|  10k 8862
  1   0  99   0   0   0|   0     0 |2476k  476M|   0     0 |  22k   11k
  1   0  99   0   0   0|   0     0 |2236k  400M|   0     0 |  20k   11k
  0   0  99   0   0   0|   0  2968k|2112k  418M|   0     0 |  20k   11k
  1   0  99   0   0   0|   0     0 |2646k  499M|   0     0 |  24k   13k
  1   0  99   0   0   0|   0     0 |2494k  446M|   0     0 |  23k   11k
  1   0  99   0   0   0|   0     0 |2333k  445M|   0     0 |  22k   11k
  1   0  99   0   0   0|   0     0 |2890k  531M|   0     0 |  25k   11k
  1   0  99   0   0   0|   0     0 |2743k  481M|   0     0 |  24k   11k
[root@localhost ~]#

查看指定网络端口的流量。ifstat nload

ifstat 可以观察所有接口或者指定接口的带宽 :

user1@Arm64-server:~$ ifstat -i eno1,eno2,eno3,enp189s0f0
      eno1                eno2                eno3             enp189s0f0
KB/s in  KB/s out   KB/s in  KB/s out   KB/s in  KB/s out   KB/s in  KB/s out
   0.00      0.00      0.00      0.00      0.00      0.00      0.06      0.10
   0.00      0.00      0.00      0.00      0.00      0.00      0.18      0.10
   0.00      0.00      0.00      0.00      0.00      0.00      0.06      0.10
   0.00      0.00      0.00      0.00      0.00      0.00      0.18      0.10
   0.00      0.00      0.00      0.00      0.00      0.00      0.12      0.10
   0.00      0.00      0.00      0.00      0.00      0.00      0.66      0.20

ifstat 目前在iproute2项目维护2

nload 也用于观察接口的带宽 :

nload -m


Device em1 [192.168.100.118] (1/9):
==============================================================================================================================
Incoming:                                                      Outgoing:
Curr: 2.12 kBit/s                                              Curr: 28.61 kBit/s
Avg: 4.32 kBit/s                                               Avg: 49.00 kBit/s
Min: 0.00 Bit/s                                                Min: 0.00 Bit/s
Max: 7.30 kBit/s                                               Max: 100.50 kBit/s
Ttl: 84.48 MByte                                               Ttl: 95.69 MByte

Device em2 (2/9):
==============================================================================================================================
Incoming:                                                      Outgoing:
Curr: 0.00 Bit/s                                               Curr: 0.00 Bit/s
Avg: 0.00 Bit/s                                                Avg: 0.00 Bit/s
Min: 0.00 Bit/s                                                Min: 0.00 Bit/s
Max: 0.00 Bit/s                                                Max: 0.00 Bit/s
Ttl: 0.00 Byte                                                 Ttl: 0.00 Byte

查看端口下的TCP和UDP数据包

pktstat 可以查看各种类型数据包的占比 :

sudo pktstat -B

interface: enp189s0f0
Bps

   Bps    % desc
71.9   8% arp
73.1   8% ethertype 0x88cc
71.3   8% llc 802.1d -> 802.1d
111.8  12% tcp 192.168.1.107:34116 <-> Arm64-server:ssh
            udp Arm64-server:43057 <-> ubuntu:domain
            udp Arm64-server:59122 <-> ubuntu:domain
            udp Arm64-server:60086 <-> ubuntu:domain

查看进程的流量 iftop 和 nethogs

iftop 可以查看主机到各个主机的tcp socket连接 :

12.5Kb                   25.0Kb                   37.5Kb                   50.0Kb              62.5Kb

└────────────────────────┴────────────────────────┴────────────────────────┴────────────────────────┴───────────────────────── localhost.localdomain:ssh => 115.171.85.202:51346 32.1Kb 27.2Kb 23.1Kb <= 1.77Kb 1.38Kb 828b localhost.localdomain:ssh => 192.168.100.12:41678 2.28Kb 1.73Kb 2.09Kb <= 208b 208b 379b 255.255.255.255:bootps => 0.0.0.0:bootpc 0b 0b 0b <= 0b 266b 66b localhost.localdomain:54269 => public1.114dns.com:domain 0b 59b 15b <= 0b 87b 22b localhost.localdomain:33555 => public1.114dns.com:domain 0b 0b 13b <= 0b 0b 20b

nethogs 有同样的功能，但是有时候经常无法刷新 :

NetHogs version 0.8.5

    PID USER     PROGRAM                         DEV        SENT      RECEIVED
 155017 root     fio                             p7p2    40193.922     269.434 KB/sec
 155035 root     fio                             p7p2    42799.801     249.772 KB/sec
 155065 root     fio                             p7p2    27634.619     180.794 KB/sec
 155057 root     fio                             p7p2    29825.311     165.916 KB/sec
 155079 root     fio                             p7p2    30595.211     162.005 KB/sec
 155009 root     fio                             p7p2    22149.711     134.591 KB/sec
 155059 root     fio                             p7p2     5550.278      32.793 KB/sec
 155069 root     fio                             p7p2     5945.441      31.159 KB/sec
 158413 root     sshd: root@pts/1                em1         4.339       0.245 KB/sec
 155027 root     fio                             p7p2        0.119       0.089 KB/sec

  1. https://www.binarytides.com/linux-commands-monitor-network↩

  2. https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/tree/misc/ifstat.c↩