Monitor network traffic

[juno2]

Is there any linux command that can use to check / monitor the network traffic in / from the linux server ? I use RH8 . Thx in advance .

[Claudio Cilloni]

if you need a generic view of the network traffic you can use the 'iptraf' utility.

If you need a detailed traffic analisys there is 'ethereal'. It has even graphical interface.

run these command from root user.

ciao
Claudio

[Alexander Chuzhoy]

there is a utility called tcpdump
simply issue tcpdump at the command prompt


you can also use ethereal -a very nice gui utility -so you should run X before you start it.
It is linux version of network monitor

[juno2]

Thx reply, in our RH 8 , there is a directory /usr/lib/ethereal , how can I run this command ? thx.

[Stuart Browne]

rpm -ql ethereal

will list a binary /usr/sbin/tethereal

this is a text based ethereal binary. As for the gui one, I am unsure what it's name would be..

[Alexander Chuzhoy]

to run ethereal
simply issue: ethereal
You should have X running

be sure that you have these RPMs installed:
ethereal-0.9.6-1.i386.rpm
ethereal-gnome-0.9.6-1.i386.rpm
(these are defaults of redhat 8.0)

P.S.
why don't you assign points to people who help you?

[Huc_1 · Accepted solution]

/usr/bin/iptraf
/usr/bin/ethereal
/usr/sbin/tcpdump

All of theses are related to network monitoring
depending on distribution/setup the location could be different just do a

whereis iptrf
or a
locate iptraf
or
man iptraf
or
rpm -ql iptraf (as mention by Stuart Browne)

two more info sometimes you need to be root to run theses tools and theses also put your ethernet card in promiscuous mode

for general purpose I find iptraf does the job
for real hacking/sniffing tcpdump or ethereal.

hope this helps

Jean-Pierre

[Huc_1]

ooppss

Rectification Ethereal and tcpdump could run in promiscuous mode.

I always belived they did by default but now if I run then and do a ifconfig I dont see them in that mode ?

will dig that out when I have more time

Jean-Pierre

[Huc_1]

Just a last one I just found

xosview &

this is neat ...

Jean-Pierre