nethogs (8)

nethogs [-d] [-h] [-p] [-t] [-V] [device(s)]

NetHogs is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like most such tools do, it groups bandwidth by process - and does not rely on a special kernel module to be loaded. So if there's suddenly a lot of network traffic, you can fire up NetHogs and immediately see which PID is causing this, and if it's some kind of spinning process, kill it.

Options

-d

delay for refresh rate.

-h

display available commands usage.

-p

sniff in promiscious mode (not recommended).

-t

tracemode.

-V

prints Version info.

device(s) to monitor. By default eth0 is being used.

m

cycle between display modes (kb/s, kb, b, mb)

r

sort by 'received'

s

sort by 'sent'

q

quit

netstat(8) tcpdump(1) pcap(3)

Written by Arnout Engelen <[email protected]>.