Is there a top like tool that shows processes and ports, live?

Question

I'd like to be monitoring ports in "realtime" and the processes that use them. Is there any tool that can handle that? I imagine somethinkg like top, but with a column that lists all ports the process is using... or a list of ports, protocol, and the process that has that port open or is listenting to.

This is for Linux based OS.

Joshua Huber · Answer 1 · 2014-05-29T23:26:27.580

4

Was just going to ask which OS and noticed that you edited to add that. You're in luck then. Try this quick and dirty one-liner (as root) in a BASH shell:

while true ; do output=$(netstat -anptu) ; clear ; echo "$output" ; sleep 2 ; done

edit: More concise, ordered output:

while true ; do output=$( (netstat -anpt | awk '{ print $1" "$4" "$7" "$6 }' | tail -n +3 ; netstat -anpu | awk '{ print $1" "$4" "$6 }' | tail -n +3 ) | egrep '[0-9]\/' | sort | uniq) ; clear ; date ; echo "$output" ; sleep 2 ; done

edited May 29 '14 at 23:26

answered May 29 '14 at 22:49

Joshua Huber

817
6
7

This is great! I prefer this approach as I can customize it to whatever needs I have, thank you! – Luis Lobo Borobia May 30 '14 at 00:05
You can use the "watch" command in place of the wile loop. – dmourati Sep 27 '15 at 21:05

score 2 · Answer 2 · answered May 29 '14 at 22:41

2

You did not specify an OS. But if it is Linux (which I guess is likely, since you mention top), then there exist a tool called iftop, which can display the current bandwidth usage by IP address. This is not exactly what you asked for, but depending on your needs, might be close enough.

answered May 29 '14 at 22:41

kasperd

30,455
17
76
124

Thanks, yes, it's for Linux, I've just edited the question to make it clear. I've seen that you can enable source and destination ports pressing capital S, and D. Thanks! – Luis Lobo Borobia May 29 '14 at 22:47
Is there a way to show the process too? – Luis Lobo Borobia May 29 '14 at 22:52
1

@LuisLoboBorobia You could try `watch 'netstat -ntlp'` or variants of that. – kasperd May 29 '14 at 23:07
Thanks, that one is useful too. I prefer Joshua's answer though, as I can customize it. Thanks anyway! your answers were great too. – Luis Lobo Borobia May 30 '14 at 00:06

score 2 · Answer 3 · answered Sep 27 '15 at 20:59

2

Why wouldn't anyone suggest the -c option for netstat.

Add -c to your existing netstat command & it would show you the output live.

answered Sep 27 '15 at 20:59

deppfx

429
3
13

score 1 · Accepted Answer · answered Nov 18 '16 at 17:18

1

After some time I found nethogs, it's right what I needed in the first place:

It needs the device name as the first parameter, and must be run as sudo: sudo nethogs wlp9s0

answered Nov 18 '16 at 17:18

Luis Lobo Borobia

438
5
19

score 0 · Answer 5 · answered Sep 11 '19 at 08:21

0

Look at -i and -p options of lsof tool:

watch lsof -a -itcp -p <PID>

answered Sep 11 '19 at 08:21

void

101
2

Is there a top like tool that shows processes and ports, live?

5 Answers5