Find the answer to your Linux question:
Results 1 to 8 of 8
This software should have the ability to monitor traffic generated by a program and can privde information about process, IP addresses of connection endpoints, sent and received bytes . The ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Just Joined!
    Join Date
    Dec 2006
    Posts
    4

    Is there any software in Linux like TCPView in Windows


    This software should have the ability to monitor traffic generated by a program and can privde information about process, IP addresses of connection endpoints, sent and received bytes. The functions should like TCPView in Windows.

    tcpdump cannot provide process information, lsof cannot provide all information metioned above. But if both could be bound into one, the requiremets could be met.

    Can anybody give some information about this kind of softwares?

    Thanks in advance!

  2. #2
    Linux Guru bigtomrodney's Avatar
    Join Date
    Nov 2004
    Location
    Ireland
    Posts
    6,133
    You're probably looking for something like ethereal. It ships with a lot of distros and so might be on your install disks. If not it's easy enough to build.

  3. #3
    Just Joined!
    Join Date
    Dec 2006
    Posts
    4
    thanks to bigtomrodney.

    As I know, most of current traffic monitor softwares use libpcap for capturing packets. They cannot provide process information.

    I have ever installed ethereal in Windows (using winpcap), it seems that it cannot provide process information. TCPView in Windows can do so. Are you sure ethereal in Linux can provide all this information: process, IP addresses of connection endpoints, sent and received bytes?

  4. $spacer_open
    $spacer_close
  5. #4
    Linux Guru AlexK's Avatar
    Join Date
    Feb 2005
    Location
    Earth
    Posts
    3,379
    if you just want to read the tcp headers, then yes ethereal can do that windows or linux. (e.g. ip address of end points and packet size). I am not sure what you mean by processes though.
    Life is complex, it has a real part and an imaginary part.

  6. #5
    Just Joined!
    Join Date
    Dec 2006
    Posts
    4
    Quote Originally Posted by AlexK
    if you just want to read the tcp headers, then yes ethereal can do that windows or linux. (e.g. ip address of end points and packet size). I am not sure what you mean by processes though.
    Process information means which process or program in local host sends or receives how many bytes with remote endpoint (remoteIP : port).

    Below is a screenshot from TCPView Pro

  7. #6
    Linux Guru AlexK's Avatar
    Join Date
    Feb 2005
    Location
    Earth
    Posts
    3,379
    No, ethereal doesn't provide the processes information, atleast no version which I have ever used does.
    Life is complex, it has a real part and an imaginary part.

  8. #7
    Just Joined!
    Join Date
    Dec 2006
    Posts
    4
    Anybody knows, is there any this kind of software in Linux?

  9. #8
    Just Joined!
    Join Date
    Feb 2008
    Location
    Bucharest
    Posts
    5

    Net Activity Viewer

    Try netactview. Like tcpview it is able to show process information.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •