isolating net usage
 

I came in this morning and sat down at my pc to see gkrellm reporting a constant 55-60k transfer on my eth0. What's the best way to isolate which process is sending/receiving the connection? Maybe it's netstat and I just don't have the right options combo.

what kind of machine is this.. server.. workstation..? and i wouldnt think netstat would do it.. i dont think any utility included in linux will.. i think mabey a third party.. probably the only way would be to see how much bandwidth is going through each port.. though im not sure how to do that.. i alwase just looked at my system processes and figgured out which was using the most bandwith by processor use (if it was using 3% when the system is idle i knew that was the one..

It's my workstation at the office. So we have probably a T3 line. I can get 500k downloads from just about anywhere. But still a sustained ~60K connection that I can't figure out where it's coming from is something I'd like to know about.

I don't know much about tcp/ip so I figured I would ask.

i alwase used just looked at the results of ps -aux to see the processor use.. that generally told me what was up.. are you running any server applications (ftp... http.. nfs.. samba) if so those are probably whats sucking it up..