Nethogs – Monitor Linux Network Traffic Usage Per Process
Jul 08, 2025 am 09:57 AMThere are many open-source network monitoring tools available online for Linux operating systems. For instance, you can utilize the iftop command to track bandwidth consumption, the netstat or ss commands to view interface statistics, or the top command to monitor active processes on your system.
However, if you're seeking a tool that provides real-time network bandwidth statistics categorized by individual processes, then NetHogs is the ideal choice for you.
What is NetHogs?
NetHogs is an open-source terminal-based utility (reminiscent of the Linux top command) designed to display live network traffic bandwidth consumption per process or application in Linux.
From NetHogs Project Page
NetHogs is a compact 'net top' utility. Unlike most tools that categorize traffic by protocol or subnet, it organizes bandwidth usage by process. It does not depend on loading any specific kernel module. If there's a sudden surge in network activity, launching NetHogs will quickly reveal which PID is responsible, making it easy to pinpoint applications consuming excessive bandwidth.
In this guide, we’ll walk through how to install and utilize the nethogs utility to monitor real-time network bandwidth usage per process on Unix/Linux platforms.
Installing NetHogs on Linux Systems
The NetHogs bandwidth monitoring tool is accessible across various Linux distributions. Depending on your Linux OS, use one of the following methods to install nethogs:
Install NetHogs on RHEL, CentOS, Rocky Linux, and AlmaLinux
To proceed with installing nethogs, enable the EPEL repository on your RedHat-based system first, then execute the following yum command to fetch and install the nethogs package.
<code># yum install epel-release # yum install nethogs</code>
On Fedora Linux, use the dnf command as follows.
<code># dnf install nethogs</code>
Install NetHogs on Ubuntu, Linux Mint, and Debian
Use the apt command below to install nethogs.
<code>$ sudo apt install nethogs</code>
Using NetHogs to Monitor Bandwidth Usage Per Process
Launch the nethogs utility using the following command on Red Hat-based systems.
<code># nethogs</code>
For Debian-based Linux systems, root privileges are required, so run it using sudo.
<code>$ sudo nethogs</code>
Sample Output from NetHogs:
As shown above, the send and received columns indicate the volume of traffic each process is utilizing. At the bottom, total sent and received bandwidth usage is summarized. You can manage sorting and order via the interactive controls discussed later.
NetHogs Command-Line Parameters
Here are some commonly used nethogs command-line options. Use ‘-d
‘ to specify the refresh interval, and provide device names to monitor specific interfaces (default is eth0).
For example, to set the refresh rate to 5 seconds, run:
<code># nethogs -d 5</code>
<code>$ sudo nethogs -d 5</code>
To monitor only a particular device (eth0) for network bandwidth, execute:
<code># nethogs eth0</code>
<code>$ sudo nethogs eth0</code>
To monitor both eth0 and eth1 interfaces, use the following command:
<code># nethogs eth0 eth1</code>
<code>$ sudo nethogs eth0 eth1</code>
NetHogs Options and Arguments
-
-d
– sets the refresh delay. -
-h
– displays command help. -
-p
– enables promiscuous mode (not advised). -
-t
– activates trace mode. -
-V
– shows version details.
NetHogs Interactive Controls
Below are some useful keyboard shortcuts while using NetHogs.
-
-m
– cycles through bandwidth units like KB/sec -> KB -> B -> MB. -
-r
– sorts by overall traffic magnitude. -
-s
– sorts by outgoing traffic. -
-q
– quits the program and returns to the shell prompt.
To explore all command-line options available for nethogs, consult the man pages by typing ‘man nethogs‘ or ‘sudo man nethogs‘ in your terminal.
For more information, visit the official Nethogs project page.
The above is the detailed content of Nethogs – Monitor Linux Network Traffic Usage Per Process. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

LXD is described as the next-generation container and virtual machine manager that offers an immersive for Linux systems running inside containers or as virtual machines. It provides images for an inordinate number of Linux distributions with support

When encountering DNS problems, first check the /etc/resolv.conf file to see if the correct nameserver is configured; secondly, you can manually add public DNS such as 8.8.8.8 for testing; then use nslookup and dig commands to verify whether DNS resolution is normal. If these tools are not installed, you can first install the dnsutils or bind-utils package; then check the systemd-resolved service status and configuration file /etc/systemd/resolved.conf, and set DNS and FallbackDNS as needed and restart the service; finally check the network interface status and firewall rules, confirm that port 53 is not

If you find that the server is running slowly or the memory usage is too high, you should check the cause before operating. First, you need to check the system resource usage, use top, htop, free-h, iostat, ss-antp and other commands to check CPU, memory, disk I/O and network connections; secondly, analyze specific process problems, and track the behavior of high-occupancy processes through tools such as ps, jstack, strace; then check logs and monitoring data, view OOM records, exception requests, slow queries and other clues; finally, targeted processing is carried out based on common reasons such as memory leaks, connection pool exhaustion, cache failure storms, and timing task conflicts, optimize code logic, set up a timeout retry mechanism, add current limit fuses, and regularly pressure measurement and evaluation resources.

As a system administrator, you may find yourself (today or in the future) working in an environment where Windows and Linux coexist. It is no secret that some big companies prefer (or have to) run some of their production services in Windows boxes an

Frankly speaking, I cannot recall the last time I used a PC with a CD/DVD drive. This is thanks to the ever-evolving tech industry which has seen optical disks replaced by USB drives and other smaller and compact storage media that offer more storage

In Linux systems, 1. Use ipa or hostname-I command to view private IP; 2. Use curlifconfig.me or curlipinfo.io/ip to obtain public IP; 3. The desktop version can view private IP through system settings, and the browser can access specific websites to view public IP; 4. Common commands can be set as aliases for quick call. These methods are simple and practical, suitable for IP viewing needs in different scenarios.

Built on Chrome’s V8 engine, Node.JS is an open-source, event-driven JavaScript runtime environment crafted for building scalable applications and backend APIs. NodeJS is known for being lightweight and efficient due to its non-blocking I/O model and

Data replication is the process of copying your data across multiple servers to improve data availability and enhance the reliability and performance of an application. In MySQL replication, data is copied from a database from the master server to ot
