This article reviews ten open‑source Linux network monitoring utilities that run from the terminal—ideal for SSH‑based management—detailing each tool's purpose, key features, and typical usage scenarios to help administrators choose the right solution for their environment.
This article reviews ten essential Linux network monitoring utilities—iftop, vnstat, iptraf, Monitorix, dstat, bwm‑ng, ibmonitor, htop, and Wireshark—explaining their features, typical use cases, and how they help administrators keep network traffic under control via the command line, especially when working over SSH.
A temporary test server on Tianyi Cloud was compromised by a malicious XMRig miner masquerading as fail2ban, causing CPU usage to skyrocket; the article details how the intrusion was discovered, the forensic steps taken, and a comprehensive remediation and hardening guide to prevent similar attacks.
This guide introduces tcpdump, a powerful network packet capture tool, explains its filtering options, and provides numerous command-line examples—from basic interface listening to complex filters for hosts, ports, protocols, and saving captures—helping users troubleshoot and analyze network traffic effectively.
Network monitoring is crucial for maintaining system security and performance, and this article introduces six free, open‑source tools—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—detailing their core capabilities and why they are valuable for operations teams.
This article introduces six free open‑source network monitoring solutions—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—explaining their key features, how they collect and visualize metrics, and why they are valuable for maintaining system stability and security.
Sniffnet is a free, Rust‑written network monitoring application that offers real‑time traffic visualization, precise IP and geographic identification, protocol analysis, customizable themes, and exportable PCAP capture files, with step‑by‑step installation guides for Windows, macOS, and Linux, plus optional Npcap support.
This comprehensive guide presents a standardized operations manual covering over one hundred core maintenance checkpoints across server hardware, network devices, storage systems, operating systems, databases, virtualization platforms, backup solutions, security appliances, and data‑center facilities, helping IT teams ensure stable and reliable service delivery.
This guide reviews six free open‑source network monitoring solutions—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—detailing their key features and how they help operations teams ensure system security, detect issues early, and maintain smooth network performance.
This article introduces six free open-source network monitoring solutions—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—detailing their key features and how they help operations teams ensure system security and performance, with documentation available for download.
This guide introduces tcpdump, a powerful network packet capture tool, explains its filtering capabilities with logical operators, and provides numerous practical examples—from capturing traffic on specific interfaces and hosts to filtering by ports, protocols, and saving captures—helping users troubleshoot network issues efficiently.
This article introduces six free, open‑source network monitoring solutions—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—detailing their key features and how they help operations teams ensure system stability and quickly resolve issues.
Network monitoring is essential for system reliability, and this article introduces six free, open-source tools—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—detailing their features and how they help operations engineers quickly detect and resolve issues.
The guide explains what the check-docker-connection utility does, its key features, required environment, command‑line options, and provides step‑by‑step examples for monitoring single or multiple Docker containers and displaying the top N containers by network connections, helping users analyze network performance and troubleshoot issues.
This article introduces three practical Shell scripts—an alert sender for Linux systems, a MySQL backup loop, and a real‑time network interface traffic monitor—demonstrating how automation can streamline routine operations and improve system reliability.
This article introduces six free open-source network monitoring solutions—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—explaining their key features and how they help operations teams ensure system security and performance.
This article reviews the eight most popular network monitoring solutions in China for 2025, detailing each tool's key features, suitable scenarios, and advantages, and concludes with practical recommendations for choosing the right solution based on monitoring needs and budget constraints.
SmartPing is a comprehensive network quality monitoring tool that offers forward and reverse ping visualizations, topology mapping, nationwide latency maps, customizable alerts, and decentralized data storage, providing operations teams with real‑time insights and easy installation for reliable network management.
This article explains the technical challenges of cross‑region, cross‑operator network environments and provides a step‑by‑step guide to designing, configuring, and operating a cloud‑native global network quality monitoring solution using synthetic probes, alerts, and dashboards.
This article provides comprehensive Python scripts for system administration tasks including CPU monitoring, memory usage tracking, log analysis, file backup, system updates, network monitoring, service management, user administration, and system information collection.
This guide reviews six free open‑source network monitoring solutions—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—detailing their key features and how they help operations teams ensure system stability, detect issues early, and maintain secure, smooth network performance.
This guide explains how to use tcpdump for network packet capture, covering basic and advanced filtering options, interface selection, host and port targeting, saving captures to files, and a real‑world troubleshooting scenario involving a Node.js server behind Nginx.
This article introduces gping, a Rust‑based network diagnostic tool that extends the classic ping command with real‑time ASCII graphing, multi‑host support, customizable colors, and cross‑platform compatibility, and provides step‑by‑step installation and usage examples on Linux.
This guide introduces six free open‑source network monitoring solutions—Zabbix, Prometheus, Cacti, Grafana, OpenNMS, and Nagios—detailing their key features and how they help operations teams ensure system security and performance.
This article provides two Bash scripts: one that recursively renames all ".sh" files to ".shell" and deletes their second line, and another that repeatedly checks the top‑20 IPs on port 80, reports activity when the smallest request count exceeds 500, or retries after 600 seconds.
This article explains how zero‑intrusion eBPF technology enables detailed, non‑disruptive TCP network monitoring, covering data collection interfaces, aggregation methods, implementation steps, usage limitations, and practical installation and visualization guidance for improving network performance and fault analysis.
This guide introduces five open‑source Linux command‑line utilities—nethogs, nload, cbm, iftop, and iPerf—detailing their purpose, usage examples, and key options for process‑level, interface‑level, host‑level monitoring, and network performance measurement.
This guide introduces five essential Linux command‑line utilities—nethogs, nload, cbm, iftop, and iPerf—explaining their focus areas, key features, and example commands for monitoring process‑level bandwidth, interface traffic, host connections, and conducting network performance tests across multiple machines.
This article introduces five open‑source Linux utilities—nethogs, nload, cbm, iftop, and iPerf—explaining their focus, usage commands, and how they help monitor network traffic at process, interface, and host levels while testing network performance.
Learn how to monitor and test network performance in Linux using five powerful command‑line utilities—nethogs for per‑process bandwidth, nload for real‑time traffic graphs, cbm for colorful interface, iftop for host‑level connections, and iPerf for detailed throughput measurements.
This article presents ten practical Python scripts that automate tasks such as backing up files, downloading data, renaming and processing CSV files, monitoring network status, sending emails, synchronizing directories, scraping web pages, analyzing logs, and scheduling recurring jobs.
This guide introduces five open‑source Linux utilities—NetHogs, nload, CBM, iftop, and iPerf—explaining their focus, usage commands, and how they help monitor process‑level bandwidth, interface traffic, and overall network performance in production settings.
A comprehensive collection of awk, grep, sort, and netstat one‑liners that help you count unique IPs, rank pages by hits, filter by time ranges, identify slow requests, and monitor connection states directly from Apache log files.
This guide walks you through installing tcpdump on Linux, then demonstrates how to capture packets from specific interfaces, hosts, sources, destinations, and ports, including saving captures to files and using advanced filter expressions for precise network monitoring.
Tcpdump is a classic Linux network packet capture tool that intercepts and displays TCP/IP and other packets, works on most Unix-like systems, and offers powerful command‑line options and filter expressions for selective monitoring, with numerous examples covering interfaces, output formats, and common use cases.
The article details Minsheng Bank's step‑by‑step journey from traditional network monitoring to a full‑stack, zero‑intrusion observability platform built with DeepFlow, vTap, distributed data collection, and eBPF, illustrating concrete case studies and future plans for expanding business‑level monitoring.
This guide explains how to create a lightweight daemon called ethcheck that continuously monitors the presence of a USB Ethernet adapter on Linux, checks its IP configuration, and automatically adjusts the interface using low‑level system calls and scripts.
This article describes a Python script that monitors the local network for the boss's phone MAC address, using ARP scans to infer his proximity and automatically alerts the user to stop or resume non‑work activities, complete with step‑by‑step implementation and code examples.
This article introduces Gping, a cross‑platform tool that displays ping results as live line graphs, explains ICMP message structure, tunnel techniques, and stealth aspects, compares traditional and multi‑target ping visualizations, and provides detailed usage and installation instructions for Linux and Windows.
The Network Quality Monitoring Center is a large‑scale system that deploys lightweight agents on every server to issue coordinated ICMP ping probes, a controller to generate and distribute topology‑aware PingLists, and a storage‑analysis module that aggregates latency and loss data for real‑time visualization, alerting and troubleshooting, while addressing load‑balance, ingestion concurrency, and future extensions such as UDP/TCP probes.
This article explains how KubeSkoop leverages eBPF to provide low‑overhead, pod‑level network monitoring and real‑time diagnostics for Kubernetes clusters, covering packet flow fundamentals, traditional troubleshooting tool limitations, the exporter’s probe architecture, daily monitoring practices, and future development plans.
This article introduces five powerful packet‑capture tools—Savvius Omnipeek, Ettercap, Kismet, SmartSniff, and EtherApe—detailing their features, platform support, and unique capabilities as alternatives to the popular Wireshark utility.
This guide explains the advantages of using the Charles proxy tool for software testing—including network traffic monitoring, debugging, environment simulation, security testing, and automation support—followed by detailed instructions for downloading, installing, registering, and configuring the tool.
The article explains how the Linux ss command provides comprehensive socket statistics, offers numerous filtering options, runs dramatically faster than netstat, and includes practical examples and usage tips for monitoring TCP, UDP, and other socket connections.
This guide explains how to employ nethogs, iftop, tcpdump, and iptables on a Linux server to identify bandwidth‑hogging processes, capture network packets, and block malicious IPs, providing step‑by‑step commands and usage tips for effective network troubleshooting.
The paper presents a scalable sFlow‑based traffic analysis system that combines high‑performance agents, collectors, and analyzers—extending Elastiflow with sFlowtool, Logstash, Kafka, and Elasticsearch/Kibana, while adding CMDB integration, Druid storage, and Celery stream processing to achieve sub‑30‑second latency for data‑center monitoring, anomaly detection, and IP‑level analytics, and discusses future needs for broader protocol support and adaptive collection.
This guide explains how to use tcpdump (and its predecessor ethereal) for capturing and analyzing network traffic, describes key command‑line options, and provides dozens of practical examples ranging from basic packet dumps to complex filtered captures and related networking utilities.
This article highlights six popular open-source projects released in May, ranging from an all-in-one AI chatbot client and a database-focused GPT model to a network traffic monitor, a free programming books repository, a web testing automation framework, and a hex editor for researchers.
This article explains Netflow’s principles, its three‑component architecture, implementation details using open‑source tools like nfdump and Kafka, and showcases practical applications such as load balancing, anomaly detection, and traffic engineering, providing a comprehensive guide for building robust network flow monitoring solutions.
This guide reviews eight Linux utilities—sar, /proc/net/dev, ifstat, iftop, nload, iptraf‑ng, nethogs, and additional extensions—detailing their installation, key options, usage examples, and output interpretation for real‑time network interface traffic monitoring.
This guide presents a comprehensive collection of AWK, grep, sed, and netstat one‑liners that let you count unique IPs, rank page visits, measure bandwidth, monitor TCP states, and extract detailed traffic patterns from Apache access logs on Linux systems.
This article provides a comprehensive overview of eBPF, explaining its origins, core concepts, comparison with SystemTap and DTrace, common use cases such as network monitoring, security filtering, and performance analysis, and includes step‑by‑step Python examples with BCC for tracing and latency measurement.
This guide explains the netstat command’s purpose, interprets its output sections for active Internet connections and UNIX domain sockets, details common options such as -a, -t, -u, -l, -p, and provides numerous practical examples for listing ports, monitoring traffic, displaying routing tables, and identifying processes.
This article walks through how an online education operator uses Tencent Cloud Log Service to monitor Cloud Connect Network flow logs, set reject‑traffic alerts, analyze regional, IP, and protocol distributions, track bandwidth trends, and finally expand bandwidth to eliminate service interruptions.
This guide compiles practical Linux shell commands for extracting IP counts, page visit frequencies, time‑range queries, bandwidth usage, HTTP status distribution, and TCP connection states from Apache or Nginx access logs, helping administrators quickly spot traffic patterns, bottlenecks, and potential attacks.
This article introduces five popular open‑source network monitoring solutions—Cacti, Nagios Core, Icinga 2, Zabbix, and Prometheus—explaining their main features, data collection methods, platform support, and typical use cases to help administrators choose the right tool for reliable system oversight.
Wireshark 4.0, the latest major release of the popular open‑source network protocol analyzer, introduces an enhanced display filter syntax, redesigned dialogs, side‑by‑side packet details, faster MaxMind geolocation, new address type AT_NUMERIC, expanded protocol support, and numerous UI and backend improvements.
This guide surveys more than a dozen Linux command‑line utilities—including nethogs, nload, iftop, slurm, netstat, and many others—explaining their unique features, typical use cases, and installation commands so administrators can effectively monitor bandwidth, connections, and overall network health.
Baidu Intelligent Cloud's Flow Log product provides real‑time, high‑throughput network flow collection, visualization, and analysis for VPC, dedicated line, and NAT gateways, enabling fault diagnosis, cost allocation, elephant‑flow management, and security inspection across ultra‑large scale cloud environments.
This guide introduces a curated list of Linux command‑line utilities—including nethogs, nload, slurm, iftop, collectl, netstat, and many others—explaining their purpose, installation commands for various distributions, and basic usage examples to help system administrators monitor network traffic and bandwidth effectively.
This article introduces a curated list of Linux command-line utilities—including nethogs, nload, iftop, slurm, netstat, and more—explaining their unique features, typical use cases, and installation commands to help system administrators and developers effectively monitor network traffic and bandwidth.
This article introduces five popular open‑source network monitoring solutions—Cacti, Nagios Core, Icinga 2, Zabbix, and Prometheus—explaining their main features, supported platforms, data collection methods, and where to obtain them, helping administrators choose the right tool for reliable system oversight.
This article presents a collection of practical Linux shell commands—primarily using awk, grep, sort, uniq, netstat, and tcpdump—to count unique IPs, identify most‑visited pages, filter logs by time or URL, monitor connection states, and calculate traffic statistics for Apache or other web servers.
This article examines whether WeChat messages can be intercepted via network monitoring, explains the security guarantees of modern chat apps through asymmetric and symmetric encryption, explores how network behavior management tools could capture communications, and offers practical advice on protecting against such threats.
This article explains how chat applications like WeChat protect messages with asymmetric and symmetric encryption, why network administrators generally cannot read chat content, and what alternative monitoring methods (such as installed surveillance software, system vulnerabilities, or compromised private keys) could expose your conversations.
This article reviews the 15 leading network monitoring solutions of 2022, detailing each vendor's key features, pricing tiers, and Gartner Peer Insights ratings, while explaining why network visibility is essential for modern hybrid IT environments.
The article explains how modern chat applications protect communication with asymmetric and symmetric encryption, why network eavesdropping alone cannot reveal messages, and how installed monitoring software or system vulnerabilities can still expose chat records, emphasizing the need for regular updates and careful device usage.
This guide explains how to use tcpdump for network packet capture, covering basic usage, interface selection, host and port filtering, logical operators, saving captures to files, and real‑world troubleshooting scenarios with clear command examples.
This article explains the purpose, output format, and frequently used options of the cross‑platform netstat command, illustrating how to list active TCP/UDP connections, UNIX domain sockets, and various statistics, and notes modern replacements such as ss and ip.
The article explains how Android’s shift to Linux kernel 4.x/5.x introduced the eBPF framework, detailing its advantages over iptables, the programming model with helper macros and maps, and its implementation in netd and HAL to collect network statistics, enforce traffic control, and support power‑saving Doze policies.
The article explains how the Linux ss command provides a faster, more detailed view of TCP/UDP sockets than netstat, lists its key features, demonstrates practical examples for filtering by state, address, and port, and shows how to use various ss options for effective network diagnostics.
This guide introduces gping, a Rust‑based visual ping utility, and walks through downloading the appropriate binary for CentOS 7, resolving a GLIBC 2.18 dependency issue, and using its various flags and options to monitor multiple hosts with a dynamic graphical display.
This article introduces FinalShell, a free, cross‑platform server management suite that combines SSH, remote desktop acceleration, network monitoring, file transfer, and customizable themes, offering a powerful alternative to XShell for developers and operations engineers.
This guide compiles a comprehensive set of Linux shell commands that let you examine web server logs, count unique IPs, identify top‑requested pages, filter bots, monitor connection states, and spot performance or security anomalies, helping you keep your site secure and performant.
This guide explains how to use the versatile lsof utility on Unix-like systems to list open files, discover which processes are using specific network ports, filter by user or command, and combine options for advanced troubleshooting and security monitoring.
This article surveys a collection of Linux command‑line utilities that can monitor overall, per‑interface, per‑socket, and per‑process network bandwidth, explaining how each tool works, what data it reports, and how to install it on major distributions.
This article outlines systematic methods for diagnosing subtle performance issues by leveraging detailed data analysis of CPU, memory, disk I/O, and network metrics, and presents real-world case studies that demonstrate how targeted profiling and optimization can reveal and resolve hidden bottlenecks in complex systems.
This article explains how to detect full and half TCP connection queue overflows on Linux servers by interpreting netstat -s output, examining relevant kernel MIB counters, and reviewing the underlying source code, while also offering practical tips for accurate monitoring.
This article introduces a collection of Linux command‑line utilities—such as nload, iftop, iptraf, nethogs, bmon, and many others—that can monitor overall and per‑process network bandwidth, explain their measurement methods, and provide installation instructions for major distributions.
This guide reviews a collection of Linux command-line utilities that let you track overall and per‑process network bandwidth, display inbound and outbound traffic separately, and generate real‑time or historical usage reports, helping administrators quickly identify bandwidth‑heavy processes.
The article presents sixteen practical TCP network‑programming best practices—from setting SO_REUSEADDR and defining port standards to using application‑layer heartbeats, exponential backoff, connection limits, client‑side load balancing, periodic DNS refresh, optimal buffer sizing, configurable timeouts, proper connection‑pool sizing, and comprehensive metrics—to help developers build stable, reliable applications.
This guide explains how to install Kubenurse as a DaemonSet in a Kubernetes cluster, configure its ingress and ServiceMonitor resources, and use Prometheus and Grafana to visualize comprehensive network health metrics such as latency, DNS errors, and API server connectivity.
This guide explains the most useful netstat options for Linux, showing how to list all connections, filter TCP or UDP sockets, disable DNS lookups, display process IDs, monitor listening ports, continuously refresh output, and use grep or awk to map ports to processes and summarize socket states.
This guide compiles twenty practical Linux command-line techniques for analyzing web server logs, revealing visitor IP counts, page popularity, request timing, bandwidth usage, error rates, and connection states, enabling administrators to monitor traffic, detect anomalies, and optimize performance.
This guide presents a comprehensive set of Bash and AWK one‑liners for analyzing web server logs, counting unique IPs, tracking page visits, sorting traffic by time, identifying heavy‑weight requests, monitoring Apache processes, and examining network connection states, helping you detect anomalies and optimize performance.
This guide compiles a series of practical Linux one‑liners—using awk, grep, sort, netstat, and related tools—to count unique IPs, rank page requests, filter bots, monitor connection states, and measure bandwidth, enabling quick forensic analysis of Apache or Nginx access logs.
This tutorial walks you through using the Charles proxy to intercept and analyze mobile app network traffic, covering installation, SSL configuration, certificate setup on both computer and device, and a practical test with a popular app, ensuring you can reliably capture app data.
Tencent Cloud’s network operations platform combines a layered underlay‑overlay architecture, rapid fault detection within seconds and recovery in minutes, chaos‑engineering experiments, rigorous change health checks, high‑frequency multi‑path monitoring, and plans for predictive self‑healing to ensure reliable service across millions of servers.
This article details the background, system design, and successive optimizations of iQIYI's mobile Application Performance Monitoring (APM) network monitoring solution, covering SDK and backend architecture, DNS and weak‑network enhancements, gateway strategies, retry mechanisms, and the resulting significant reduction in error rates.
This guide explains how to install tcpdump, use various options such as -nn, port filters, -c, and -w to capture and save network packets, and introduces tshark commands for detailed HTTP traffic analysis on Linux systems.
This guide explains how to use tcpdump on Linux to capture packets, filter by ports, hosts, interfaces or protocols, save output for later analysis, and interpret both human‑readable and hexadecimal dumps, with practical examples and tips for integrating Wireshark.
Optimizing video player performance requires analyzing the entire playback pipeline—from network request and format detection through parsing, decoding, synchronization, and rendering—while implementing robust error monitoring, adaptive buffering, MP4 moov/mdat handling, stream‑specific optimizations, local proxy caching with video‑id reuse, and fallback to soft decoding or GLSurfaceView for smooth, artifact‑free playback.
The iQIYI mobile APM system provides real‑time, user‑level network monitoring with classified error detection, cloud‑controlled SDK sampling, second‑level backend storage, and web dashboards, while employing DNS three‑layer caching, weak‑network grading, gateway multiplexing, super‑pipeline proxies and layered retry strategies, reducing Android error rates from 5.3 % to 0.48 % and iOS from 4.63 % to 0.35 %.
This guide explains what vnStat is, its key features, and provides step‑by‑step instructions for installing vnStat and vnStati on CentOS, RHEL, Fedora, Debian, and Ubuntu, configuring the service, and using the tools to monitor and graph network traffic on Linux systems.
This article presents a cloud‑based shared proxy solution that addresses common pain points of local proxy tools by enabling multi‑user configuration sharing, isolation, mock & host management, data persistence, analysis, and monitoring, thereby improving development and testing efficiency for teams.
This guide explains how to install and use the Linux command‑line tools iftop and nethogs for real‑time network traffic monitoring, covering installation commands, interface selection, output interpretation, shortcut keys, and advanced options to help troubleshoot slow or blocked network connections.
This guide shows how to install and use nload, iftop, and sar for live network bandwidth monitoring on Linux, explains their key parameters, and provides two shell scripts that calculate per‑second inbound and outbound traffic from /proc/net/dev.
This article explains the concept of full‑path packet loss monitoring, its importance for banking networks, the causes of packet loss, and detailed technical implementations—including traffic splitting, collection, automatic analysis engines, TCP retransmission detection, and algorithms for pinpointing loss locations—to dramatically reduce troubleshooting time.
This guide shows how to install and use nload, iftop, and sar for real‑time network traffic monitoring on Linux, explains each tool's key parameters, and provides two custom shell scripts that calculate per‑second inbound and outbound traffic using /proc/net/dev.
This guide explains how to configure Zabbix 4.4 to monitor network devices such as Huawei and H3C using SNMP, covering system environment setup, metric OIDs, snmpwalk usage, template creation, port traffic aggregation, optical power monitoring, low‑level discovery filtering, and handling 32‑bit versus 64‑bit counter issues.
