In the last episode (May 23), Louis LeBlanc said:
> I have a strange question. Well, maybe not so strange.
>
> I am working on my 5.3 RELEASE system, and I notice my network
> monitor on gkrellm is showing unexplained loads (15/23Kbps sustained)
> in traffic on the external interface.
>
> I'm not too concerned that this is a security breach, but I do notice
> at least one ESTABLISHED connection that I can't explain (it goes
> back to AOL, which naturally sows a little mistrust).
>
> Anyway, how to I find the actual process (server or otherwise) on my
> end that is handling a given connection, and what kind of load it is
> handling?
sockstat or "lsof -i" will tell you which sockets belong to which
processes, and tcpdump or any of a dozen or so programs in ports will
give you detailed network usage. Start with trafshow and iftop.
--
Dan Nelson
[EMAIL PROTECTED]
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
