Re: [tcpdump-workers] TCPDUMP RPM

2010-10-04 Thread Guy Harris
On Oct 4, 2010, at 5:40 PM, Branca Beiruth wrote: > I have been used SuSE Linux Server and I need TcpDump. > Can you help me? http://software.opensuse.org/113/en Type "tcpdump" into the search box, select whatever version of SuSE SLE you have from the version list (what version are you

[tcpdump-workers] TCPDUMP RPM

2010-10-04 Thread Branca Beiruth
Hello! I have been used SuSE Linux Server and I need TcpDump. Can you help me? Thank you so much! Branca Beiruth. -- "Se você procurar bem, você acaba encontrando não a explicação (duvidosa) da vida, mas a poesia (inexplicável) da vida." (Carlos Drummond de Andrade) - This is the tcpdump-workers

Re: [tcpdump-workers] bandwidth by user or process id

2010-10-04 Thread Rob Hasselbaum
On Mon, Oct 4, 2010 at 4:35 PM, Rob Hasselbaum wrote: > On Mon, Oct 4, 2010 at 10:53 AM, Patrick Kurz wrote: > >> One more question: which part of a line from /proc/net/tcp like the >> following >> has a unique counterpart in the packet captured with pcap? >> >sl local_address rem_address st t

Re: [tcpdump-workers] bandwidth by user or process id

2010-10-04 Thread Rob Hasselbaum
On Mon, Oct 4, 2010 at 10:53 AM, Patrick Kurz wrote: > One more question: which part of a line from /proc/net/tcp like the > following > has a unique counterpart in the packet captured with pcap? > >sl local_address rem_address st tx_queue rx_queue tr tm->when retrnsmt > uid > >timeout inode

Re: [tcpdump-workers] bandwidth by user or process id

2010-10-04 Thread Patrick Kurz
Thanks a lot for this detailed answer! I'll check if the dbus service does not add too much overhead. Then I could use your Sentry project instead. One more question: which part of a line from /proc/net/tcp like the following has a unique counterpart in the packet captured with pcap? >sl local_

[tcpdump-workers] bandwidth by user or process id

2010-10-04 Thread Patrick Kurz
Dear all, I am looking for a solution to monitor bandwidth usage a) broken up by source and destination ip address b) broken up by either user or process (pid) which is causing the bandwidth I have found out how to solve a) with the pcap library. Is it also possible to solve b) using pcap or othe

Re: [tcpdump-workers] bandwidth by user or process id

2010-10-04 Thread Rob Hasselbaum
On Mon, Oct 4, 2010 at 8:49 AM, Patrick Kurz wrote: > Dear all, > I am looking for a solution to monitor bandwidth usage > a) broken up by source and destination ip address > b) broken up by either user or process (pid) which is causing the bandwidth > > Yes, it is possible (on Linux, anyway), bu