I found this article http://www.tecmint.com/command-line-tools-to-monitor-linux-performance/ but I'm kind of stuck here. I'm running a server with Centos 6.8 64bit for hosting customers. I have about 100 IP addresses routed here and The server is using high consistent bandwidth throughout the day. I'm trying to figure out which specific IP address it's coming from, which user. It appears mostly incoming, probably apache requests but I simply need help to pinpoint which specific user/IP address (both), not just the interface itself.
Thanks.