Security-related question

[Dale Farnsworth]

Jason wrote:
> On 02/22/2011 09:06 AM, Jim March wrote:
> > One other thing: on top of the Windows guest issue, I've got *something*
> > in Linux that's also hitting the wire a lot.  Is there something similar
> > to "top" that tracks Linux processes by network traffic impact?  I'd
> > like to eliminate whatever that is before I start on the Windows issues.  
> 
> You can use ntop, but the tcpdump/wireshark combo should give you enough
> information to determine the source.

I haven't used ntop, but iftop is great when you have unknown network
traffic.  It sorts the traffic from each src/dest pair by most bandwidth
used.

-Dale