DOKK / manpages / debian 10 / nethogs / nethogs.8.en
NETHOGS(8) System Manager's Manual NETHOGS(8)

nethogs - Net top tool grouping bandwidth per process

nethogs [-h] [-V] [-d] [-v] [-t] [-c] [-p] [-s] [device(s)]

NetHogs is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like most such tools do, it groups bandwidth by process - and does not rely on a special kernel module to be loaded. So if there's suddenly a lot of network traffic, you can fire up NetHogs and immediately see which PID is causing this, and if it's some kind of spinning process, kill it.

display available commands usage.
prints Version info.
delay for refresh rate.
select view mode
sniff in promiscious mode (not recommended).
tracemode.
limit number of refreshes
-s
sort by traffic sent

device(s) to monitor. By default eth0 is being used.

cycle between display modes (kb/s, kb, b, mb)
sort by 'received'
sort by 'sent'
quit

netstat(8) tcpdump(1) pcap(3)

Written by Arnout Engelen <arnouten@bzzt.net>.
14 February 2004