Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

    I have a nice little headless Debian machine setup for small automated tasks.
But a few days ago i noted there is a big bandwidth RX on this one, more than the one predicted.
    I started iftop but now i only now to what ip's the bandwidth is coming from.

Question: How can i find what process is taking up the most bandwidth on this debian machine ?


share|improve this question
up vote 2 down vote accepted

In relation to the netstat solution by lg:

Once you know the port that the data transfer is using, you can use the lsof tool to find out the process.

lsof -i :6753

The command is a lot easier to remember, but on the downside lsof isn't installed on all systems by default.

share|improve this answer

With iftop, press p to view the port; then with netstat -nutap | grep :PORT. In the last column you can see the process name.

share|improve this answer

Install nethogs, it's like top but for network bandwidth.

share|improve this answer

If you know the port used, you can figure out which daemon is using it. Alternatively, you can use pktstat to help. That shows you the port numbers.

share|improve this answer
so i found out the port (i think) what about finding out what process is using it ... ? :D – s.mihai Jul 30 '10 at 7:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.