Dear all,
I am looking for a solution to monitor bandwidth usage
a) broken up by source and destination ip address
b) broken up by either user or process (pid) which is causing the bandwidth
I have found out how to solve a) with the pcap library.
Is it also possible to solve b) using pcap or other methods?
Is there any chance to relate a captured packet to the application/process/pid
which has sent or received this packet? Or at least relate packets to the user
on behalf of whom they were sent or received?
Thanks
Patrick
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
