nethogs - Man Page
Net top tool grouping bandwidth per process
Examples (TL;DR)
- Start nethogs as root (default device is eth0):
sudo nethogs - Monitor bandwidth on specific device:
sudo nethogs device - Monitor bandwidth on multiple devices:
sudo nethogs device1 device2 - Specify refresh rate:
sudo nethogs -t seconds
Synopsis
nethogs [-h] [-V] [-d] [-v] [-t] [-c] [-p] [-a] [-s] [-l] [device(s)]
Description
NetHogs is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like most such tools do, it groups bandwidth by process - and does not rely on a special kernel module to be loaded. So if there's suddenly a lot of network traffic, you can fire up NetHogs and immediately see which PID is causing this, and if it's some kind of spinning process, kill it. display available commands usage print version info delay for refresh rate select view mode sniff in promiscuous mode (not recommended) monitor all devices, even loopback/stopped ones tracemode limit number of refreshes sort by traffic sent display command line device(s) to monitor. By default eth0 is being usedOptions
Interactive Control
- m
cycle between display modes (KB/s, KB, B, MB, MB/s, GB/s)
- l
display command line
- r
sort by 'received'
- s
sort by 'sent'
- q
quit
Running Without Root
In order to be run by an unprivileged user, nethogs needs the cap_net_admin and cap_net_raw capabilities. These can be set on the executable by using the setcap(8) command, as follows:
sudo setcap "cap_net_admin,cap_net_raw+pe" /usr/local/sbin/nethogs
See Also
netstat(8) tcpdump(1) pcap(3)
Author
Written by Arnout Engelen <arnouten@bzzt.net>.