From owner-freebsd-questions@FreeBSD.ORG Tue May 24 14:37:40 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 08BAC16A426 for ; Tue, 24 May 2005 14:37:40 +0000 (GMT) (envelope-from leblanc@keyslapper.net) Received: from russian-caravan.cloud9.net (russian-caravan.cloud9.net [168.100.1.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id ABFF843D48 for ; Tue, 24 May 2005 14:37:39 +0000 (GMT) (envelope-from leblanc@keyslapper.net) Received: from russian-caravan.cloud9.net (localhost [127.0.0.1]) by russian-caravan.cloud9.net (Postfix) with SMTP id 0560D1956E for ; Tue, 24 May 2005 10:37:39 -0400 (EDT) Received: from keyslapper.net (250-119.customer.cloud9.net [168.100.250.119]) by russian-caravan.cloud9.net (Postfix) with ESMTP id B10E719080 for ; Tue, 24 May 2005 10:37:38 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by keyslapper.net (Postfix) with ESMTP id 50E78114E9 for ; Tue, 24 May 2005 10:37:38 -0400 (EDT) Received: from keyslapper.net ([127.0.0.1]) by localhost (keyslapper.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30184-10 for ; Tue, 24 May 2005 10:37:38 -0400 (EDT) Received: by keyslapper.net (Postfix, from userid 1001) id 252C811433; Tue, 24 May 2005 10:37:38 -0400 (EDT) Date: Tue, 24 May 2005 10:37:38 -0400 From: Louis LeBlanc To: freebsd-questions@freebsd.org Message-ID: <20050524143737.GD27658@keyslapper.net> Mail-Followup-To: freebsd-questions@freebsd.org References: <20050523185517.GC44534@keyslapper.net> <20050523193524.GC16069@dan.emsphone.com> <20050524122838.6fd7b626@it.buh.cameradicommercio.ro> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline In-Reply-To: <20050524122838.6fd7b626@it.buh.cameradicommercio.ro> X-PGP-Key: http://www.keyslapper.net/~leblanc/leblanc-at-keyslapper-net.asc User-Agent: Mutt/1.5.9i X-Virus-Scanned: amavisd-new at keyslapper.net X-AntiVirus: Checked by Vexira Antivirus v1.5 Subject: Re: tracking down network load? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-questions@FreeBSD.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 May 2005 14:37:40 -0000 On 05/24/05 12:28 PM, Ion-Mihai Tetcu sat at the `puter and typed: > On Mon, 23 May 2005 14:35:25 -0500 > Dan Nelson wrote: > > > In the last episode (May 23), Louis LeBlanc said: > > > I have a strange question. Well, maybe not so strange. > > > > > > I am working on my 5.3 RELEASE system, and I notice my network > > > monitor on gkrellm is showing unexplained loads (15/23Kbps sustained) > > > in traffic on the external interface. > > > > > > I'm not too concerned that this is a security breach, but I do notice > > > at least one ESTABLISHED connection that I can't explain (it goes > > > back to AOL, which naturally sows a little mistrust). > > > > > > Anyway, how to I find the actual process (server or otherwise) on my > > > end that is handling a given connection, and what kind of load it is > > > handling? > > > > sockstat or "lsof -i" will tell you which sockets belong to which > > processes, and tcpdump or any of a dozen or so programs in ports will > > give you detailed network usage. Start with trafshow and iftop. > > Nice thing iftop; unfortunately iftop is not maintained and on my > 5-STABLE after a few seconds: Ah. Love those neat little utilities you install when you need them then forget once the unexplained behavior subsides or is explained. I installed mine some time ago, and apparently upgraded the port back in February. Of course I forgot I had such a tool long before. Ah well. Thanks for the pointer. I'll keep your message around and hopefully I'll find it if this odd behavior should crop back up. BTW, I don't seem to have any problems with it - so far. If you were to keep the code around in the port, you might be able to figure out the problem. > Unregistered ;) FreeBSD "user" I love it! I might have to borrow that (it's not copyrighted, is it?) :D Thanks again. Lou -- Louis LeBlanc FreeBSD-at-keyslapper-DOT-net Fully Funded Hobbyist, KeySlapper Extrordinaire :) Please send off-list email to: leblanc at keyslapper d.t net Key fingerprint = C5E7 4762 F071 CE3B ED51 4FB8 AF85 A2FE 80C8 D9A2 today, n.: A nice place to visit, but you can't stay here for long.