Re: Where's my bandwidth going?

2012-05-04 Thread Abel Abraham Camarillo Ojeda
and fstat(1)...

On Fri, May 4, 2012 at 7:10 AM, Stuart Henderson  wrote:
> The request was specifically for pids...
>
> On 2012-05-04, Abel Abraham Camarillo Ojeda  wrote:
>> I use pktstat from ports...
>>
>> On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio  wrote:
>>> The suggestion on this thread are interesting. But tcpdump -n is pretty
>> manageable over a modem link and shows you exactly what you want to know,
not
>> just a summary of it.
>>>
>>> Alan Corey [ab...@devio.us] wrote:
 I'm on a modem, so there's only about 3 K/sec anyway, but is there
 anything that'll show me at least pids of what's using bandwidth?
 I've learned to close Firefox and even mc sessions I'm not using,
 and I'm watching a wget download and pftop and "netstat -b -I tun0
 -w 1".

 I've got it under control right now by shutting off my wireless
 access point because my Kindle Fire was talking to s3.amazonaws.com.
 Poking around in userland ppp sources I see something called
 netgraph. B How do I use that and what does it do?

 B B Alan
>>>
>>> --
>>> Keep them laughing half the time, scared of you the other half. And
always
>> keep them guessing. -- Clair George



Re: Where's my bandwidth going?

2012-05-04 Thread Alan Corey
That's OK, I've mostly got it figured out.  Having many (10+) tabs open in 
Firefox is the main culprit, especially when some of those pages refresh. 
I don't trust Yahoo mail anymore, even though I close that tab.  mc seems 
to use bandwidth for something too.


I've got pktstat running now, I like systat too and pftop.  tcpdump -n is 
pretty noisy, with some intentional download with wget going on.


  Alan

On Fri, 4 May 2012, Stuart Henderson wrote:


The request was specifically for pids...

On 2012-05-04, Abel Abraham Camarillo Ojeda  wrote:

I use pktstat from ports...

On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio  wrote:

The suggestion on this thread are interesting. But tcpdump -n is pretty

manageable over a modem link and shows you exactly what you want to know, not
just a summary of it.


Alan Corey [ab...@devio.us] wrote:

I'm on a modem, so there's only about 3 K/sec anyway, but is there
anything that'll show me at least pids of what's using bandwidth?
I've learned to close Firefox and even mc sessions I'm not using,
and I'm watching a wget download and pftop and "netstat -b -I tun0
-w 1".

I've got it under control right now by shutting off my wireless
access point because my Kindle Fire was talking to s3.amazonaws.com.
Poking around in userland ppp sources I see something called
netgraph. B How do I use that and what does it do?

B  Alan


--
Keep them laughing half the time, scared of you the other half. And always

keep them guessing. -- Clair George




Re: Where's my bandwidth going?

2012-05-04 Thread Stuart Henderson
The request was specifically for pids...

On 2012-05-04, Abel Abraham Camarillo Ojeda  wrote:
> I use pktstat from ports...
>
> On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio  wrote:
>> The suggestion on this thread are interesting. But tcpdump -n is pretty
> manageable over a modem link and shows you exactly what you want to know, not
> just a summary of it.
>>
>> Alan Corey [ab...@devio.us] wrote:
>>> I'm on a modem, so there's only about 3 K/sec anyway, but is there
>>> anything that'll show me at least pids of what's using bandwidth?
>>> I've learned to close Firefox and even mc sessions I'm not using,
>>> and I'm watching a wget download and pftop and "netstat -b -I tun0
>>> -w 1".
>>>
>>> I've got it under control right now by shutting off my wireless
>>> access point because my Kindle Fire was talking to s3.amazonaws.com.
>>> Poking around in userland ppp sources I see something called
>>> netgraph. B How do I use that and what does it do?
>>>
>>> B  Alan
>>
>> --
>> Keep them laughing half the time, scared of you the other half. And always
> keep them guessing. -- Clair George



Re: Where's my bandwidth going?

2012-05-03 Thread Abel Abraham Camarillo Ojeda
I use pktstat from ports...

On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio  wrote:
> The suggestion on this thread are interesting. But tcpdump -n is pretty
manageable over a modem link and shows you exactly what you want to know, not
just a summary of it.
>
> Alan Corey [ab...@devio.us] wrote:
>> I'm on a modem, so there's only about 3 K/sec anyway, but is there
>> anything that'll show me at least pids of what's using bandwidth?
>> I've learned to close Firefox and even mc sessions I'm not using,
>> and I'm watching a wget download and pftop and "netstat -b -I tun0
>> -w 1".
>>
>> I've got it under control right now by shutting off my wireless
>> access point because my Kindle Fire was talking to s3.amazonaws.com.
>> Poking around in userland ppp sources I see something called
>> netgraph. B How do I use that and what does it do?
>>
>> B  Alan
>
> --
> Keep them laughing half the time, scared of you the other half. And always
keep them guessing. -- Clair George



Re: Where's my bandwidth going?

2012-05-03 Thread Chris Cappuccio
The suggestion on this thread are interesting. But tcpdump -n is pretty 
manageable over a modem link and shows you exactly what you want to know, not 
just a summary of it. 

Alan Corey [ab...@devio.us] wrote:
> I'm on a modem, so there's only about 3 K/sec anyway, but is there
> anything that'll show me at least pids of what's using bandwidth?
> I've learned to close Firefox and even mc sessions I'm not using,
> and I'm watching a wget download and pftop and "netstat -b -I tun0
> -w 1".
> 
> I've got it under control right now by shutting off my wireless
> access point because my Kindle Fire was talking to s3.amazonaws.com.
> Poking around in userland ppp sources I see something called
> netgraph.  How do I use that and what does it do?
> 
>   Alan

-- 
Keep them laughing half the time, scared of you the other half. And always keep 
them guessing. -- Clair George



Re: Where's my bandwidth going?

2012-04-27 Thread David Diggles
> To see the ins and outs of our network traffic, I like
> using pftop.  I looked at iftop too, it has an interesting
> display but pftop was more useful for me.

The systat command is useful too.

systat states - provides similar view to that of pftop.



Re: Where's my bandwidth going?

2012-04-25 Thread Stuart Henderson
On 2012-04-25, Alan Corey  wrote:
> I'm on a modem, so there's only about 3 K/sec anyway, but is there 
> anything that'll show me at least pids of what's using bandwidth?

You can watch each packet with "match log(all,user)" in pf.conf and
running "tcpdump -enipflog0 -v". The *second* pid reported shows the
associated program. (The *first* pid is that of the pfctl instance
which added the rule).

Or it may be easier to use some other program to grab the bandwidth
figures (darkstat, perhaps?) and then look in pflog to identify the
pid, in which case the per-packet information is probably not useful
so maybe just do "match log(user)" which will just show one entry
for each state that was setup.



Re: Where's my bandwidth going?

2012-04-25 Thread Barry Grumbine
On Tue, Apr 24, 2012 at 9:27 PM, Alan Corey  wrote:
> I'm on a modem, so there's only about 3 K/sec anyway, but is there anything
> that'll show me at least pids of what's using bandwidth?  I've learned to
> close Firefox and even mc sessions I'm not using, and I'm watching a wget
> download and pftop and "netstat -b -I tun0 -w 1".
>
> I've got it under control right now by shutting off my wireless access
point
> because my Kindle Fire was talking to s3.amazonaws.com.  Poking around in
> userland ppp sources I see something called netgraph.  How do I use that
and
> what does it do?
>
>  Alan
>

Running OpenBSD, you shouldn't have much trouble
with rouge processes sucking bandwidth.  You should
know what processes you started.

To see the ins and outs of our network traffic, I like
using pftop.  I looked at iftop too, it has an interesting
display but pftop was more useful for me.

-Barry



Re: Where's my bandwidth going?

2012-04-25 Thread Timmy L Steve

drop to a debain net and grab lsof

On 04/25/12 03:14, Mihai Popescu wrote:

I was using trafshow from packages, it was quick to install and very simple.




Re: Where's my bandwidth going?

2012-04-25 Thread Mihai Popescu
I was using trafshow from packages, it was quick to install and very simple.



Where's my bandwidth going?

2012-04-24 Thread Alan Corey
I'm on a modem, so there's only about 3 K/sec anyway, but is there 
anything that'll show me at least pids of what's using bandwidth?  I've 
learned to close Firefox and even mc sessions I'm not using, and I'm 
watching a wget download and pftop and "netstat -b -I tun0 -w 1".


I've got it under control right now by shutting off my wireless access 
point because my Kindle Fire was talking to s3.amazonaws.com.  Poking 
around in userland ppp sources I see something called netgraph.  How do I 
use that and what does it do?


  Alan