NAME

       nethogs - Net top tool grouping bandwidth per process

SYNOPSIS

       nethogs [-h] [-V] [-d] [-v] [-t] [-c] [-p] [-a] [-s] [-l] [device(s)]

DESCRIPTION

       NetHogs  is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like
       most such tools do, it groups bandwidth by process - and does not rely on a special kernel module  to  be
       loaded.  So  if  there's  suddenly  a lot of network traffic, you can fire up NetHogs and immediately see
       which PID is causing this, and if it's some kind of spinning process, kill it.

   Options
       -h     display available commands usage

       -V     print version info

       -d     delay for refresh rate

       -v     select view mode

       -p     sniff in promiscuous mode (not recommended)

       -a     monitor all devices, even loopback/stopped ones

       -t     tracemode

       -c     limit number of refreshes

       -s     sort by traffic sent

       -l     display command line

       device(s) to monitor. By default eth0 is being used

INTERACTIVE CONTROL

       m      cycle between display modes (KB/s, KB, B, MB, MB/s, GB/s)

       l      display command line

       r      sort by 'received'

       s      sort by 'sent'

       q      quit

RUNNING WITHOUT ROOT

       In order to be run by an unprivileged user, nethogs needs the cap_net_admin and cap_net_raw capabilities.
       These can be set on the executable by using the setcap(8) command, as follows:

           sudo setcap "cap_net_admin,cap_net_raw+pe" /usr/local/sbin/nethogs

SEE ALSO

       netstat(8) tcpdump(1) pcap(3)

AUTHOR

       Written by Arnout Engelen <arnouten@bzzt.net>.

                                                14 February 2004                                      NETHOGS(8)