1NETHOGS(8) System Manager's Manual NETHOGS(8)
2
3
4
6 nethogs - Net top tool grouping bandwidth per process
7
9 nethogs [-h] [-V] [-d] [-v] [-t] [-c] [-p] [-a] [-s] [-l] [device(s)]
10
12 NetHogs is a small 'net top' tool. Instead of breaking the traffic down
13 per protocol or per subnet, like most such tools do, it groups band‐
14 width by process - and does not rely on a special kernel module to be
15 loaded. So if there's suddenly a lot of network traffic, you can fire
16 up NetHogs and immediately see which PID is causing this, and if it's
17 some kind of spinning process, kill it.
18
19
20 Options
21 -h display available commands usage
22
23 -V print version info
24
25 -d delay for refresh rate
26
27 -v select view mode
28
29 -p sniff in promiscuous mode (not recommended)
30
31 -a monitor all devices, even loopback/stopped ones
32
33 -t tracemode
34
35 -c limit number of refreshes
36
37 -s sort by traffic sent
38
39 -l display command line
40
41 device(s) to monitor. By default eth0 is being used
42
43
45 m cycle between display modes (KB/s, KB, B, MB, MB/s, GB/s)
46
47 l display command line
48
49 r sort by 'received'
50
51 s sort by 'sent'
52
53 q quit
54
55
57 In order to be run by an unprivileged user, nethogs needs the
58 cap_net_admin and cap_net_raw capabilities. These can be set on the
59 executable by using the setcap(8) command, as follows:
60
61 sudo setcap "cap_net_admin,cap_net_raw+pe" /usr/local/sbin/nethogs
62
63
65 netstat(8) tcpdump(1) pcap(3)
66
68 Written by Arnout Engelen <arnouten@bzzt.net>.
69
70
71
72 14 February 2004 NETHOGS(8)