From owner-freebsd-ports@FreeBSD.ORG Thu Jul 6 16:48:01 2006 Return-Path: X-Original-To: freebsd-ports@freebsd.org Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4AFE416A4DA for ; Thu, 6 Jul 2006 16:48:01 +0000 (UTC) (envelope-from fcash@ocis.net) Received: from smtp.sd73.bc.ca (smtp.sd73.bc.ca [142.24.13.140]) by mx1.FreeBSD.org (Postfix) with ESMTP id DCE2343D46 for ; Thu, 6 Jul 2006 16:48:00 +0000 (GMT) (envelope-from fcash@ocis.net) Received: from localhost (localhost [127.0.0.1]) by localhost.sd73.bc.ca (Postfix) with ESMTP id B15138A0073; Thu, 6 Jul 2006 09:55:18 -0700 (PDT) Received: from smtp.sd73.bc.ca ([127.0.0.1]) by localhost (smtp.sd73.bc.ca [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 86809-03-28; Thu, 6 Jul 2006 09:55:11 -0700 (PDT) Received: from webmail.sd73.bc.ca (unknown [10.10.10.17]) by smtp.sd73.bc.ca (Postfix) with ESMTP id E25FB8A007F; Thu, 6 Jul 2006 09:55:02 -0700 (PDT) Received: from webmail.sd73.bc.ca (localhost.localdomain [127.0.0.1]) by webmail.sd73.bc.ca (Postfix) with ESMTP id 2F98C9000607; Thu, 6 Jul 2006 09:47:44 -0700 (PDT) Received: from 192.168.0.10 (SquirrelMail authenticated user fcash) by webmail.sd73.bc.ca with HTTP; Thu, 6 Jul 2006 09:47:44 -0700 (PDT) Message-ID: <48118.192.168.0.10.1152204464.squirrel@webmail.sd73.bc.ca> In-Reply-To: <44AD3BCD.7000908@chrismaness.com> References: <44AC2A4B.4070401@chrismaness.com> <56413.192.168.0.10.1152134318.squirrel@webmail.sd73.bc.ca> <44AD3BCD.7000908@chrismaness.com> Date: Thu, 6 Jul 2006 09:47:44 -0700 (PDT) From: "Freddie Cash" To: "Chris Maness" User-Agent: SquirrelMail/1.5.1 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Virus-Scanned: by amavisd-new using ClamAV at sd73.bc.ca Cc: freebsd-ports@freebsd.org Subject: Re: Netwatch? X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: fcash@ocis.net List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Jul 2006 16:48:01 -0000 On Thu, July 6, 2006 9:35 am, Chris Maness wrote: > Freddie Cash wrote: >> On Wed, July 5, 2006 2:08 pm, Chris Maness wrote: >>> Used to have this cool little tool on my slackware box to monitor >>> network traffic. Just curious as to why it has not been ported >>> (are there any issues with it?) >>> http://linux.maruhn.com/sec/netwatch.html >>> p.s. What would be a good substitute for now? >> Install trafshow instead. > This program seems to stay in memory after the shell closes and eats > up processor time. Top showed this thing at 98%. Does this app. have > a bug? I've never had a problem with it, but I've never let it run for more than 5 minutes at a time while tracking down a problem station. And I've always quit it manually using CTRL+C or Q. Doing a quick test on a 6.0-p4 system, I can reproduce this issue, though: in terminal 1: ssh to remote system su - to root start trafshow in terminal 2: ssh to remote system su - to root kill -9 the first instance of csh check ps to make sure it's dead but trafshow is still alive check top and see 0% idle, ~66% system and ~33% user, with trafshow at the top of the process list kill trafshow in top, get 99% idle Not sure if this is a bug in csh, trafshow, both, or something else. ---- Freddie Cash fcash@ocis.net