Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a web tier where once in a while a web node will slam our data nodes(plural) and if we could see the MB/second coming into that machine on all sockets or on individual sockets, we could immediately know which web node started to have a huge influx of doing stuff. This would be great for our monitoring capability.

Is there way to see a machines "current" MB/s intake?

I do not want to use a tool that tests bandwidth between nodes but rather just want to measure current status.

share|improve this question
up vote 2 down vote accepted

iptables has byte counter for each rule/chain (don't know the terminology exactly). So you can setup a noop policy for the ports you are interested in and then monitor the byte counters.

AFAIK this is the best way to go with some serious (automated) monitoring (as opposed to iftop and etc)

share|improve this answer
+1 for SNMP. I'd also point out that RRD should be used to detect trends. SNMP + RRD is powerful on the long term, whereas all thoe tools reported are for immediate troubleshooting. – Marcel May 31 '13 at 21:55
For point-in time monitoring, adding the layer of complexity of iptables doesn't make sense. SNMP or a RRD-backed collection is the best overall long-term solution. But the OP is asking to see specific machines/ports on demand. – ewwhite Jun 2 '13 at 23:55

You can try to use the iftop command. It provides a nice curses display. This can show realtime and average statistics for an interface or specific source/destination/port. It can can also filter, but I haven't explored that functionality.

enter image description here

Host display:                          General:
 n - toggle DNS host resolution         P - pause display
 s - toggle show source host            h - toggle this help display
 d - toggle show destination host       b - toggle bar graph display
 t - cycle line display mode            B - cycle bar graph average
share|improve this answer

I ususally use iptraf for things like this:


This screen shows a bunch of database connections, but you can filter for whatever you're interested in.

share|improve this answer
You and your fancy tools! – ewwhite May 31 '13 at 19:09

ntop will likely be what you need. It has a web interface for displaying stats on specific interfaces. It filters by protocol so you should have a decent idea.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.