Re: Where's my bandwidth going?
and fstat(1)... On Fri, May 4, 2012 at 7:10 AM, Stuart Henderson wrote: > The request was specifically for pids... > > On 2012-05-04, Abel Abraham Camarillo Ojeda wrote: >> I use pktstat from ports... >> >> On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio wrote: >>> The suggestion on this thread are interesting. But tcpdump -n is pretty >> manageable over a modem link and shows you exactly what you want to know, not >> just a summary of it. >>> >>> Alan Corey [ab...@devio.us] wrote: I'm on a modem, so there's only about 3 K/sec anyway, but is there anything that'll show me at least pids of what's using bandwidth? I've learned to close Firefox and even mc sessions I'm not using, and I'm watching a wget download and pftop and "netstat -b -I tun0 -w 1". I've got it under control right now by shutting off my wireless access point because my Kindle Fire was talking to s3.amazonaws.com. Poking around in userland ppp sources I see something called netgraph. B How do I use that and what does it do? B B Alan >>> >>> -- >>> Keep them laughing half the time, scared of you the other half. And always >> keep them guessing. -- Clair George
Re: Where's my bandwidth going?
That's OK, I've mostly got it figured out. Having many (10+) tabs open in Firefox is the main culprit, especially when some of those pages refresh. I don't trust Yahoo mail anymore, even though I close that tab. mc seems to use bandwidth for something too. I've got pktstat running now, I like systat too and pftop. tcpdump -n is pretty noisy, with some intentional download with wget going on. Alan On Fri, 4 May 2012, Stuart Henderson wrote: The request was specifically for pids... On 2012-05-04, Abel Abraham Camarillo Ojeda wrote: I use pktstat from ports... On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio wrote: The suggestion on this thread are interesting. But tcpdump -n is pretty manageable over a modem link and shows you exactly what you want to know, not just a summary of it. Alan Corey [ab...@devio.us] wrote: I'm on a modem, so there's only about 3 K/sec anyway, but is there anything that'll show me at least pids of what's using bandwidth? I've learned to close Firefox and even mc sessions I'm not using, and I'm watching a wget download and pftop and "netstat -b -I tun0 -w 1". I've got it under control right now by shutting off my wireless access point because my Kindle Fire was talking to s3.amazonaws.com. Poking around in userland ppp sources I see something called netgraph. B How do I use that and what does it do? B Alan -- Keep them laughing half the time, scared of you the other half. And always keep them guessing. -- Clair George
Re: Where's my bandwidth going?
The request was specifically for pids... On 2012-05-04, Abel Abraham Camarillo Ojeda wrote: > I use pktstat from ports... > > On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio wrote: >> The suggestion on this thread are interesting. But tcpdump -n is pretty > manageable over a modem link and shows you exactly what you want to know, not > just a summary of it. >> >> Alan Corey [ab...@devio.us] wrote: >>> I'm on a modem, so there's only about 3 K/sec anyway, but is there >>> anything that'll show me at least pids of what's using bandwidth? >>> I've learned to close Firefox and even mc sessions I'm not using, >>> and I'm watching a wget download and pftop and "netstat -b -I tun0 >>> -w 1". >>> >>> I've got it under control right now by shutting off my wireless >>> access point because my Kindle Fire was talking to s3.amazonaws.com. >>> Poking around in userland ppp sources I see something called >>> netgraph. B How do I use that and what does it do? >>> >>> B Alan >> >> -- >> Keep them laughing half the time, scared of you the other half. And always > keep them guessing. -- Clair George
Re: Where's my bandwidth going?
I use pktstat from ports... On Thu, May 3, 2012 at 11:34 PM, Chris Cappuccio wrote: > The suggestion on this thread are interesting. But tcpdump -n is pretty manageable over a modem link and shows you exactly what you want to know, not just a summary of it. > > Alan Corey [ab...@devio.us] wrote: >> I'm on a modem, so there's only about 3 K/sec anyway, but is there >> anything that'll show me at least pids of what's using bandwidth? >> I've learned to close Firefox and even mc sessions I'm not using, >> and I'm watching a wget download and pftop and "netstat -b -I tun0 >> -w 1". >> >> I've got it under control right now by shutting off my wireless >> access point because my Kindle Fire was talking to s3.amazonaws.com. >> Poking around in userland ppp sources I see something called >> netgraph. B How do I use that and what does it do? >> >> B Alan > > -- > Keep them laughing half the time, scared of you the other half. And always keep them guessing. -- Clair George
Re: Where's my bandwidth going?
The suggestion on this thread are interesting. But tcpdump -n is pretty manageable over a modem link and shows you exactly what you want to know, not just a summary of it. Alan Corey [ab...@devio.us] wrote: > I'm on a modem, so there's only about 3 K/sec anyway, but is there > anything that'll show me at least pids of what's using bandwidth? > I've learned to close Firefox and even mc sessions I'm not using, > and I'm watching a wget download and pftop and "netstat -b -I tun0 > -w 1". > > I've got it under control right now by shutting off my wireless > access point because my Kindle Fire was talking to s3.amazonaws.com. > Poking around in userland ppp sources I see something called > netgraph. How do I use that and what does it do? > > Alan -- Keep them laughing half the time, scared of you the other half. And always keep them guessing. -- Clair George
Re: Where's my bandwidth going?
> To see the ins and outs of our network traffic, I like > using pftop. I looked at iftop too, it has an interesting > display but pftop was more useful for me. The systat command is useful too. systat states - provides similar view to that of pftop.
Re: Where's my bandwidth going?
On 2012-04-25, Alan Corey wrote: > I'm on a modem, so there's only about 3 K/sec anyway, but is there > anything that'll show me at least pids of what's using bandwidth? You can watch each packet with "match log(all,user)" in pf.conf and running "tcpdump -enipflog0 -v". The *second* pid reported shows the associated program. (The *first* pid is that of the pfctl instance which added the rule). Or it may be easier to use some other program to grab the bandwidth figures (darkstat, perhaps?) and then look in pflog to identify the pid, in which case the per-packet information is probably not useful so maybe just do "match log(user)" which will just show one entry for each state that was setup.
Re: Where's my bandwidth going?
On Tue, Apr 24, 2012 at 9:27 PM, Alan Corey wrote: > I'm on a modem, so there's only about 3 K/sec anyway, but is there anything > that'll show me at least pids of what's using bandwidth? I've learned to > close Firefox and even mc sessions I'm not using, and I'm watching a wget > download and pftop and "netstat -b -I tun0 -w 1". > > I've got it under control right now by shutting off my wireless access point > because my Kindle Fire was talking to s3.amazonaws.com. Poking around in > userland ppp sources I see something called netgraph. How do I use that and > what does it do? > > Alan > Running OpenBSD, you shouldn't have much trouble with rouge processes sucking bandwidth. You should know what processes you started. To see the ins and outs of our network traffic, I like using pftop. I looked at iftop too, it has an interesting display but pftop was more useful for me. -Barry
Re: Where's my bandwidth going?
drop to a debain net and grab lsof On 04/25/12 03:14, Mihai Popescu wrote: I was using trafshow from packages, it was quick to install and very simple.
Re: Where's my bandwidth going?
I was using trafshow from packages, it was quick to install and very simple.
Where's my bandwidth going?
I'm on a modem, so there's only about 3 K/sec anyway, but is there anything that'll show me at least pids of what's using bandwidth? I've learned to close Firefox and even mc sessions I'm not using, and I'm watching a wget download and pftop and "netstat -b -I tun0 -w 1". I've got it under control right now by shutting off my wireless access point because my Kindle Fire was talking to s3.amazonaws.com. Poking around in userland ppp sources I see something called netgraph. How do I use that and what does it do? Alan