[Iftop-users] Monitoring all traffic

Scott Bertilson ssb at umn.edu
Fri, 21 Oct 2011 14:04:48 -0500


--20cf303ea6a4409ed304afd3bfae
Content-Type: text/plain; charset=ISO-8859-1

It might be worth your while to see if you can try to build and test the 1.0
pre-release:
   http://www.ex-parrot.com/~pdw/iftop/download/iftop-1.0pre2.tar.gz

Scott

On Fri, Oct 21, 2011 at 1:49 PM, joedson marques <joedson.anid@gmail.com>wrote:

> Bertilson,
>
> It's remains the same wiht "-p". Even if this works,
> is not what I want,I wanna the whole bandwith,
> passing through a single interface.
>
> I'm using the release 0.17.
>
> Thanks!
>
> On Fri, Oct 21, 2011 at 3:31 PM, Scott Bertilson <ssb@umn.edu> wrote:
>
>> Any difference in behavior if you use the "-p" (promiscuous) option?
>>
>> Are you using the previous release (0.17) or 1.0pre2?
>>
>> Scott
>>
>>
>> On Fri, Oct 21, 2011 at 1:04 PM, joedson marques <joedson.anid@gmail.com>wrote:
>>
>>> Warren,
>>>
>>> Sorry for won't be clear;
>>>
>>> Lets me try explain better.
>>>
>>> As long I open the iftop (passing an interface as parameter)
>>> it's show all traffic passing through the respective
>>> interface; but shortly after, it starts decreasing
>>> the traffic that value, until remains only:
>>> current bandwidth usage by *pairs of hosts*,
>>> this means, only hosts *directy connected*
>>> with the current host (the freeBSD).
>>>
>>> As this host is a router, most of the  traffic that
>>> pass through it, isn't directy connected
>>> with it, it's *just forwards* this traffic.
>>>
>>> So, as I wanna monitoring *whole bandwidth*, passing
>>> through the interface, the iftop does not show
>>> it (all the time, just when I start it); just the traffic of
>>> pairs of hosts.
>>>
>>> Is possible monitoring all traffic passing through
>>> the interface, instead only the traffic of the
>>> pairs?
>>>
>>> Thanks!
>>>
>>
>>
>

--20cf303ea6a4409ed304afd3bfae
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

It might be worth your while to see if you can try to build and test the 1.=
0 pre-release:<div>=A0=A0=A0<a href=3D"http://www.ex-parrot.com/~pdw/iftop/=
download/iftop-1.0pre2.tar.gz">http://www.ex-parrot.com/~pdw/iftop/download=
/iftop-1.0pre2.tar.gz</a></div>
<div><br></div><div>Scott</div><div><br><div class=3D"gmail_quote">On Fri, =
Oct 21, 2011 at 1:49 PM, joedson marques <span dir=3D"ltr">&lt;<a href=3D"m=
ailto:joedson.anid@gmail.com" target=3D"_blank">joedson.anid@gmail.com</a>&=
gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><span style=3D"color:#790619"><span style=3D=
"color:rgb(0, 0, 0)">Bertilson,<br><br>It&#39;s remains the same wiht &quot=
;-p&quot;. Even if this works, <br>

is not what I want,I wanna the whole bandwith, <br>passing through a single=
 interface.<br>
</span><br style=3D"color:rgb(0, 0, 0)"><span style=3D"color:rgb(0, 0, 0)">=
I&#39;m using the release 0.17.</span><br><br><font color=3D"#000000">Thank=
s!</font><br></span><div><div></div><div><br><div class=3D"gmail_quote">
On Fri, Oct 21, 2011 at 3:31 PM, Scott Bertilson <span dir=3D"ltr">&lt;<a h=
ref=3D"mailto:ssb@umn.edu" target=3D"_blank">ssb@umn.edu</a>&gt;</span> wro=
te:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">Any difference in behavior if you use the &q=
uot;-p&quot; (promiscuous) option?<div><br></div><div>Are you using the pre=
vious release (0.17) or 1.0pre2?</div>


<div><br></div><div><font color=3D"#888888">Scott</font><div><div></div><di=
v><br><br><div class=3D"gmail_quote">On Fri, Oct 21, 2011 at 1:04 PM, joeds=
on marques <span dir=3D"ltr">&lt;<a href=3D"mailto:joedson.anid@gmail.com" =
target=3D"_blank">joedson.anid@gmail.com</a>&gt;</span> wrote:<br>



<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">Warren,<br><br>Sorry for won&#39;t be clear;=
<br><br>Lets me try explain better. <br><br>As long I open the iftop (passi=
ng an interface as parameter)<br>



it&#39;s show all traffic passing through the respective<br>interface; but =
shortly after, it starts decreasing<br>
the traffic that value, until remains only:<br>current bandwidth usage by <=
b>pairs of hosts</b>,<br>this means, only hosts <b>directy connected</b><br=
>with the current host (the freeBSD).<br><br>As this host is a router, most=
 of the=A0 traffic that<br>




pass through it, isn&#39;t directy connected<br>with it, it&#39;s <b>just f=
orwards</b> this traffic.<br><br>So, as I wanna monitoring <b>whole bandwid=
th</b>, passing<br>through the interface, the iftop does not show<br>it (al=
l the time, just when I start it); just the traffic of <br>




pairs of hosts.<br><br>Is possible monitoring all traffic passing through<b=
r>the interface, instead only the traffic of the<br>pairs?<br><br>Thanks!<b=
r>
</blockquote></div><br></div></div></div>
</blockquote></div><br>
</div></div></blockquote></div><br>
</div>

--20cf303ea6a4409ed304afd3bfae--