I have come across vnstat
recently, and am enjoying it's simplicity, low resource usage, and its ability to record network history long term.
However, I am looking for a similar tool (for long term archival history), which can record the amount of traffic through network ports.
Ultimately, I'd like to be able to view the data in a way that shows me:
- most used TCP/UDP port (e.g. Ports sorted by most bytes TX, or RX)
- most used TCP/UDP port (e.g. Ports sorted by most number of packets)
- amount of bytes and/or packets transmitted on that port over "X" period of time (days, months, hours)
- ability to exclude certain ports (e.g. http:80)
I would prefer a non-GUI tool. Wireshark and similar are too bulky for my needs.
Progs I've tried
- bandwidthd
- bmon
- bwm, bwm-ng
- dstat
- ifstat
- ifstatus
- iftop
- iperf/netperf/uperf
- iptrack
- nethogs
- nload
- strobe
- tcptrack