iftop is an open source utility that displays bandwidth usage on an interface by host. iftop does for network usage what top does for processor usage. This utility listens to network traffic on a named interface and displays a table of current bandwidth usage by pairs of hosts.
iftop listens to network traffic on a named interface, or on the first interface it can find which looks like an external interface if none is specified, and displays a table of current bandwidth usage by pairs of hosts. iftop must be run with sufficient permissions to monitor all network traffic on the interface.
By default, iftop counts all IP packets that pass through the filter, and the direction of the packet is determined according to the direction the packet is moving across the interface.
When running, iftop uses the whole screen to display network usage. At the top of the display is a logarithmic scale for the bar graph which gives a visual indication of traffic.
Key Features
- View bandwidth usage distinguished by source-ip source-port destination-ip destination port.
- Filters.
- Linear bar graphs.
- Support for 802.1q VLANs.
- Support for “tun” interfaces.
- Supports both IPv4 and IPv6.
- Optional removal of the shell escape function.
- Optional fixed bandwidth limits.
- Monitor and display only specific host interface, host source, IP address, IP network block, destination host, bandwidth exceed limit, filter rules, bandwidth rate, bandwidth usage summary, sorting order.
- Option to run iftop in promiscuous mode, so that traffic which does not pass directly through the specified interface is also counted.
- Disable DNS lookups – resolving IPs can reduce performance of the tool and artifically change the traffic statistics.
- Show port data.
- Configuration file support.
Website: www.ex-parrot.com/pdw/iftop
Support: Mailing List
Developer: Paul Warren, Chris Lightfoot
License: GNU General Public License v2.0

iftop is written in C. Learn C with our recommended free books and free tutorials.
Related Software
| Network 'top' Tools | |
|---|---|
| ntopng | Web-based network traffic monitoring application with an open source version |
| NetHogs | Groups bandwidth by process |
| nload | Real time network traffic monitor for the text console |
| IPTraf-ng | Fork of IPTraf |
| iftop | Displays bandwidth usage on an interface by host |
| ntop | Network traffic probe that shows the network usage |
| IPTraf | Interactive Colourful IP LAN Monitor |
| socktop | Remote system monitor with a rich TUI |
Read our verdict in the software roundup.
Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |


How does the bar graph work at the top? it bounces all over the place from KB to GB and doesn’t seem to compare with total bandwidth usage.
In fact nload, nethogs, iptraf all suck. Is there no single tool that can just tell us current total network utilization on all interfaces and utilization over a period of time.