# I am the Watcher. I am your guide through this vast new twtiverse.
#
# Usage:
# https://watcher.sour.is/api/plain/users View list of users and latest twt date.
# https://watcher.sour.is/api/plain/twt View all twts.
# https://watcher.sour.is/api/plain/mentions?uri=:uri View all mentions for uri.
# https://watcher.sour.is/api/plain/conv/:hash View all twts for a conversation subject.
#
# Options:
# uri Filter to show a specific users twts.
# offset Start index for quey.
# limit Count of items to return (going back in time).
#
# twt range = 1 22
# self = https://watcher.sour.is/conv/lkr7vhq
QOTD: Hello Linux users, what do you use to monitor your network traffic?
As you can see in most of my screenshots, I have a widget at the top of my screen that shows the current bandwidth usage:
https://movq.de/v/303e1b1cad/a.jpg
But what does that tell me? What do I do when I see a sudden spike and I don’t know where it’s coming from? 🤔 I don’t have an answer for that. I’d like to have something like a summarized log of the recent network activity of all processes.
Something like tcpdump doesn’t help here, because the traffic is often already finished when I notice it.
QOTD: Hello Linux users, what do you use to monitor your network traffic?
As you can see in most of my screenshots, I have a widget at the top of my screen that shows the current bandwidth usage:
https://movq.de/v/303e1b1cad/a.jpg
But what does that tell me? What do I do when I see a sudden spike and I don’t know where it’s coming from? 🤔 I don’t have an answer for that. I’d like to have something like a summarized log of the recent network activity of all processes.
Something like tcpdump doesn’t help here, because the traffic is often already finished when I notice it.
QOTD: Hello Linux users, what do you use to monitor your network traffic?
As you can see in most of my screenshots, I have a widget at the top of my screen that shows the current bandwidth usage:
https://movq.de/v/303e1b1cad/a.jpg
But what does that tell me? What do I do when I see a sudden spike and I don’t know where it’s coming from? 🤔 I don’t have an answer for that. I’d like to have something like a summarized log of the recent network activity of all processes.
Something like tcpdump doesn’t help here, because the traffic is often already finished when I notice it.
@movq An eBPF logger would do the trick here 👌
@movq An eBPF logger would do the trick here 👌
@movq An eBPF logger would do the trick here 👌
@movq @prologic I just don't. But this script looks really interesting.
@movq Yeah I immediately thought of this when you asked, because we use eBPF-based tools in Kubernetes clusters. It's very powerful stuff and you can do a lot very cheaply with it, including tying packets to processes.
@movq Yeah I immediately thought of this when you asked, because we use eBPF-based tools in Kubernetes clusters. It's very powerful stuff and you can do a lot very cheaply with it, including tying packets to processes.
@movq Yeah I immediately thought of this when you asked, because we use eBPF-based tools in Kubernetes clusters. It's very powerful stuff and you can do a lot very cheaply with it, including tying packets to processes.
@mckinley Ahh, right, nethogs, iftop, stuff like that. I forgot about those. 🥴 If I’m quick enough to open them, they’re pretty useful as well. (I’m just too slow most of the time and the thing hogging the net is already gone. 😅)
@mckinley Ahh, right, nethogs, iftop, stuff like that. I forgot about those. 🥴 If I’m quick enough to open them, they’re pretty useful as well. (I’m just too slow most of the time and the thing hogging the net is already gone. 😅)
@mckinley Ahh, right, nethogs, iftop, stuff like that. I forgot about those. 🥴 If I’m quick enough to open them, they’re pretty useful as well. (I’m just too slow most of the time and the thing hogging the net is already gone. 😅)
@movq You could always keep it running in a detached tmux session and attach it when you see the spike. Processes that were recently using the netwotk stay in the list for 10 or 15 seconds after they're finished so you don't have to catch it in the act.
@mckinley Hmmmmmmmmmmmmmmm, why have I never experimented with this kind of workflow? 🤔 Probably useful for lots of things.
@mckinley Hmmmmmmmmmmmmmmm, why have I never experimented with this kind of workflow? 🤔 Probably useful for lots of things.
@mckinley Hmmmmmmmmmmmmmmm, why have I never experimented with this kind of workflow? 🤔 Probably useful for lots of things.
@movq It's very useful. I always start my music player in a tmux session so I can SSH in, attach it, and control the music from another computer. It's also handy for letting long-running tasks on a remote machine continue in the background even if the SSH connection is broken.