9

We have a web tier where once in a while a web node will slam our data nodes(plural) and if we could see the MB/second coming into that machine on all sockets or on individual sockets, we could immediately know which web node started to have a huge influx of doing stuff. This would be great for our monitoring capability.

Is there way to see a machines "current" MB/s intake?

I do not want to use a tool that tests bandwidth between nodes but rather just want to measure current status.

4 Answers 4

3

iptables has byte counter for each rule/chain (don't know the terminology exactly). So you can setup a noop policy for the ports you are interested in and then monitor the byte counters.

AFAIK this is the best way to go with some serious (automated) monitoring (as opposed to iftop and etc)

2
  • 1
    +1 for SNMP. I'd also point out that RRD should be used to detect trends. SNMP + RRD is powerful on the long term, whereas all thoe tools reported are for immediate troubleshooting.
    – Marcel
    May 31, 2013 at 21:55
  • For point-in time monitoring, adding the layer of complexity of iptables doesn't make sense. SNMP or a RRD-backed collection is the best overall long-term solution. But the OP is asking to see specific machines/ports on demand.
    – ewwhite
    Jun 2, 2013 at 23:55
16

You can try to use the iftop command. It provides a nice curses display. This can show realtime and average statistics for an interface or specific source/destination/port. It can can also filter, but I haven't explored that functionality.

enter image description here

Host display:                          General:
 n - toggle DNS host resolution         P - pause display
 s - toggle show source host            h - toggle this help display
 d - toggle show destination host       b - toggle bar graph display
 t - cycle line display mode            B - cycle bar graph average
7

I ususally use iptraf for things like this:

iptraf

This screen shows a bunch of database connections, but you can filter for whatever you're interested in.

1
  • 1
    You and your fancy tools!
    – ewwhite
    May 31, 2013 at 19:09
1

ntop will likely be what you need. It has a web interface for displaying stats on specific interfaces. It filters by protocol so you should have a decent idea.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .