Identifying process using network?

[Wes Hardin]

On 09/23/2010 11:02 AM, D. R. Evans wrote:
> Since a recent upgrade, I find that some process on my lucid system is
> sending about 50MB per hour of traffic somewhere. This is obviously not good.
>
> How can I determine which process is using the network interface to send so
> much traffic?

I think I would recommend a combination of iftop and netstat.  Iftop can give 
you the amount of traffic (T to toggle cumulative) and its source and 
destination.  Armed with that, you can use netstat with the -p option to put 
that with a PID.

-- 
/* Wes Hardin */
UNIX System Administrator, IT Engineering Support
Maxim Integrated Products: Innovation Delivered