linux-kernel - Re: Fwd: Any way to find the network usage by a process?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 03 Oct 2006 17:33:50 +0200
From:	Arnd Hannemann <arnd@...dnet.de>
To:	Irfan Habib <irfan.habib@...il.com>
Cc:	Linux kernel <linux-kernel@...r.kernel.org>
Subject: Re: Fwd: Any way to find the network usage by a process?

Irfan Habib schrieb:
> Hi,
> 
> Is there any method either kernel or user level which tells me which
> process is generating how much traffic from a machine. For example if
> some process is flooding the network, then I would like to know which
> process (PID ideally), is generating the most traffic.

If you want to monitor just specific PIDs you could easily do this with
the "Owner match support" from netfilter. However if you also want to
monitor traffic for all processes that may be created in the future this
is probably a bit tricky. Off course you could try to add a rule for
every possible PID ;-)
Seriously, you could write a daemon which permanently scans for new or
died processes and which adds/deletes appropriate netfilter rules...

Best regards
Arnd Hannemann
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/