Hi,
When using "sysstat" from the command line, it's very easy to get an idea of the network throughput that is currently being handled by the filer, and with commands like "vif stat" it's easy to get an idea on the interfaces that are transmitting or receiving this traffic.
However, I am wondering if is it possible to get an idea on the client IP addresses that are generating most of the network traffic without having to resort to pktt every time, then copying over the capture file and analyzing it afterwards ?
Are there any counters availble from a command that show how much traffic a particular IP address has sent/received ? I tried various commands (eg. netstat has a few interesting options) but couldn't find anything that solved my problem.
At the moment, if I need to determine the hosts that are using most of the iSCSI or NFS bandwidth, I have to resort to pktt, and I am looking for a easier way to achieve what I want. Ideally, I'd like to get information on the protocols and ports involved too, but having IP addresses would already be very useful.
Best regards, Filip