Re: Monitoring internet traffic

Juha Nieminen wrote:
I'm using Suse 10.2.

Since a couple of days something has been downloading something from
the internet at about 25-30 kilobytes/s, constantly, without
interruption, for dozens of hours in total now. I see this from gkrellm.
(This would mean that it has downloaded over 2 gigabytes by now.)

However, I haven't the faintest idea of what it could be. It's
annoying, it's robbing me of a good chunk of my connection, and I want
to know what it is.

But how? I have closed all possible programs, to no avail. I installed
ntop in the hopes that it would tell me which programs are connecting to
the net, to no avail (ntop just seems to produce some pie charts about
general net usage, but not a list of processes connecting to the net).
What next? Any suggestions?

Look up the documentation of the command 'lsof' (man lsof).

It lists "open files" and the processes they belong to, but sockets are also treated as files. With the command line switches, you get all sockets and the programs they have been opened from.

Another useful command is 'iftop'. However, it's not install by default. "sudo zypper install iftop" should take care of that. 'iftop' lists all IPs you are connected to. It doesn't list processes, but the IPs the traffic goes to/comes from is always useful as a clue.
.

Relevant Pages

  • Re: Monitoring internet traffic
    ... Since a couple of days something has been downloading something from ... but not a list of processes connecting to the net). ... "sudo zypper install iftop" should take care of that. ... It lists much more than just connections so one should ...
    (alt.os.linux.suse)
  • Re: stock symbol listing
    ... >>> Ever think about copying and pasting the text from these lists? ... > You need a bit of programming to get the files down and handle ... > Note that the above poster is actually downloading CSV files from ... > Yahoo!, not HTML, and using the darling little text-only ...
    (misc.invest.stocks)
  • Slow performance
    ... The computer is terribly slow ... opening and closing programes, connecting and downloading ...
    (microsoft.public.windowsxp.perform_maintain)
  • Slow Performance
    ... The computer is terribly slow ... opening and closing programes, connecting and downloading ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: zfc and Orpheus
    ... >> Please explain the difference between downloading a lot of threads you ... emails drop into a box called "Mail Lists", except for the two zfc lists ... which drop into another box, with the news from a.zfc, called zfc. ... archiving because you only load them when you want to. ...
    (comp.sys.acorn.misc)