Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I represent a reasonably popular game server community here in Australia. We rent a dedicated server that has limited bandwidth. In the last couple of days we have seen a huge spike in our bandwidth consumption, despite outsourcing our download server to the US.

We are very interested in figuring out what exactly is using all this bandwidth suddenly. Each of our servers is assigned a specific port, so it makes sense to monitor bandwidth by port. We'd like to do this monitoring over a reasonably long time period so that we can see accurate results.

Here's a list of things I've tried and the problems I've had with them.

nethogs - Monitors bandwidth per process and therefore doesn't seem to properly count bandwidth for services using child processes (for example, I'm pretty sure Apache has used more than 0.8MB over the last 2 days)

iftop - Monitors bandwidth by host, data seems pretty useless considering the amount of users we have. Our load is most likely not caused by one person but by all of them.

iptraf - Monitors bandwidth by connection instead of by port, so the data is useless to us.

darkstat - Groups connections by host instead of by port.

vnstat - Monitors bandwidth by interface not by port.

bandwidthd - Measures by host or subnet not by port.

Is there a tool that exists that would help me out?

Thanks,

YM

share|improve this question

1 Answer 1

Look at ntop.

# dpkg -l ntop
ii  ntop  3:4.99.3+ndpi5517+dfsg3-1 amd64 display network usage in web browser

There is pretty option --sticky-hosts, so you can find what host suck all of traffic.

Look also at the nethogs:

# dpkg -l nethogs
ii  nethogs   0.8.0-1 amd64   Net top tool grouping bandwidth per process

You can get bandwidth by applications, but if your game service written in one way than another, you'll get only one string about bandwidth of whole game service.

However no one of this two apps can log by ports.

There is commercial project splunk, it has 30 days free trial. You can register as a new customer without any credit information(anonymously) and get deb package. It is awesome, but adobe flash. Check this. Especially plugins section.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.