/*
* tcptop: display top TCP network packets by process.
* Written using DTrace tcp Provider.
*
* Usage: dtrace -s tcptop.d [count] [interval]
*
* This analyses TCP network packets and prints the responsible PID plus
* standard details such as IP address and port. This captures traffic
* of newly created TCP connections that were established while this program
* was running along with traffic from existing connections. It can help
* identify which processes is causing TCP traffic.
*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
*
* Portions Copyright 2010 Brendan Gregg
*/
#pragma D option defaultargs
/*
* Print header
*/
{
/* starting values */
TCP_out = 0;
TCP_in = 0;
printf("Sampling... Please wait.\n");
}
{
}
{
}
/*
* TCP Systemwide Stats
*/
/secs != 0/
{
secs--;
}
/*
* Print Report
*/
/secs == 0/
{
/* fetch 1 min load average */
/* convert TCP counters to Kb */
TCP_out /= 1024;
TCP_in /= 1024;
/* print status */
printf("%Y, load: %d.%02d, TCPin: %6d Kb, TCPout: %6d Kb\n\n",
/* print headers */
printf("%6s %6s %-15s %5s %-15s %5s %9s\n",
"ZONE", "PID", "LADDR", "LPORT", "RADDR", "RPORT", "SIZE");
/* print data */
printf("\n");
/* clear data */
TCP_in = 0;
TCP_out = 0;
secs = 5;
counts--;
}
/*
* End of program
*/
/counts == 0/
{
exit(0);
}
/*
* Cleanup for Ctrl-C
*/
{
}