1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
5
>TCP and UDP Traffic Statistics</TITLE
8
CONTENT="Modular DocBook HTML Stylesheet Version 1.64
11
TITLE="IPTraf User's Manual"
12
HREF="manual.html"><LINK
14
TITLE="Statistical Breakdowns"
15
HREF="statbreakdowns.html"><LINK
17
TITLE="Statistical Breakdowns"
18
HREF="statbreakdowns.html"><LINK
20
TITLE="LAN Station Statistics"
21
HREF="hostmon.html"></HEAD
40
>IPTraf User's Manual</TH
48
HREF="statbreakdowns.html"
49
><<< Previous</A
55
>Statistical Breakdowns</TD
62
>Next >>></A
75
>TCP and UDP Traffic Statistics</A
78
> IPTraf also includes a facility that generates statistics on TCP and UDP
79
traffic. This facility displays counts of all TCP and UDP packets with
80
source or destination ports numbered less than 1024. Ports 1 to 1023 are
81
reserved for the TCP/IP application protocols (well-known ports).</P
89
SRC="iptraf-tcpudp.png"></P
92
>Figure 2. The TCP/UDP service monitor</B
96
> The statistics window indicates the protocol (TCP or UDP), the
97
port number, the total packets and bytes counted for this particular
98
protocol/port combination, the packets and bytes destined for that
99
protocol and port, and the packets and bytes coming
100
from that protocol and port.</P
102
> Byte counts include the IP header and payload only. The data link header
105
> The protocol/port indicators are color-coded for easier identification
106
on color terminals. TCP indicators are in yellow, UDP in bright green.</P
108
> Some network applications or protocols may use port numbers higher
110
of these include application proxy servers (HTTP proxy servers typically
111
use values like 8000, 8080, 8888, and the like), and IRC
112
(IRC servers commonly accept connections on ports 6660 to 6669). These
113
ports are by default not included in the counts. If you do want
114
to include a higher-numbered port in the statistics, you can add
115
them yourself from the <I
120
>/Additional ports...</I
122
menu item. See the section below.</P
124
> If logging is enabled, The statistics are also written to a log file
128
>tcp_udp_services-<TT
135
is the selected interface (for example,
138
>tcp_udp_services-eth0.log</TT
141
> IPTraf computes the total, incoming, outgoing, and data rates of the
142
protocol currently indicated by the facility's highlight bar. The data
143
rates are indicated at the bottom of the screen. If logging is
144
enabled, the average data rates since the start of the facility are
145
placed in the log file.</P
147
> The Up and Down cursor keys move the highlight bar. Pressing X or Ctrl+X
148
exits and returns to the main menu (or the shell if it was started
149
from the command line).</P
156
>Sorting TCP/UDP Entries</A
159
> Pressing the S key brings up a window which allows you to
160
select the field by which the entries will be sorted. You can press R to
161
sort by port, P to sort by total packets, B to sort by total bytes, T to
162
sort by incoming packets (packets to), O to sort by incoming bytes
163
(bytes to), F to sort by outgoing packets (packets from) and M to sort
164
by outgoing bytes (bytes from). Pressing any other key cancels the sort.</P
166
> Port numbers are sorted in ascending order (least first) but
167
statistics are sorted in descending order (largest counts first).</P
169
> As with the IP traffic monitor, sorting is performed only with
170
this sequence. Automatic sorting is not performed so as not to
171
affect performance.</P
179
SRC="iptraf-tcpudpsort.png"></P
182
>Figure 3. The TCP/UDP monitor's sort criteria</B
192
>Additional Information</A
195
>IPTraf's filters affect the output of this facility. See Chapter 7, <A
198
> for more information about filters.</P
201
If you wish to start this facility from the command line, you can
203
CLASS="COMPUTEROUTPUT"
205
> option followed by an interface to monitor. For example,</P
219
> brings up this module for traffic on
223
>. The interface must be specified, or
224
IPTraf will drop back to the shell.</P
242
HREF="statbreakdowns.html"
243
><<< Previous</A
259
>Next >>></A
267
>Statistical Breakdowns</TD
273
HREF="statbreakdowns.html"
280
>LAN Station Statistics</TD
b'\\ No newline at end of file'
added
removed
Documentation/servmon.html
