How to see what process & domain is using bandwidth ressource ON THE SPOT

[flupke]

when I see a peak on the outgoing traffic, I would like to know how to track what process is currently trowing bytes on the net, isn't there a /proc to look at this.

 

[Amin Taheri]

I dont think there is anything short of an inline solution that can do this, at least not one that is free.

I've been looking for something similar and have been talking with some other people and havent found any solution that fits my needs. Aparently mod_status and mod_security can both do performance tracking as well as portions of ASL but so far only an inline solution can do that.

If you find something, please post it - I'll do the same

 

[flupke]

I think we need something at the IP level of the kernel, the mod_ modules will work for Apache only, I want to know ssh,ftp session....

I keep you informed if I find something.

Regards,

Flupke

 

[Amin Taheri]

ASL does work on the kernel level, but the others are just for apache yes - that is where the vast majority of all traffic will be from. SSH will be minimal, ftp could be higher but more often then not it will be some one offering "streaming" (client side) videos/mp3 or downloads, or some phishing or irc bot through apache.

Its quite possible other methods as well as just apache though so the more you could monitor would be helpfull.