流量监控脚本

公司有台服务器每天晚上流量很高,但是不知道确定是到哪个IP的流量

把改脚本定时到晚上执行

#!/bin/sh
nic='em1'
myFile=$nic'monitor'
#iftop -P -n -N -t -B -L100 -s10 -i $nic | grep -Ev 'Listening| Host|Total|total' | sed -e 's/=>//g' -e 's/<=//g' | grep -Ev '=|-' | sed -e 's/ [0-9]{1,3} //g' | sort -t'.' -k1,1n -k2,2n -k3,3n -k4,4n > $nic
if [ ! -f "$myFile" ];
then
    touch $myFile
fi
function KMG ()
{
        MB=`echo $1 |grep -Eo 'KB|MB|GB|B'`
        NUM=`echo $1 |sed -e 's/K|G|M|B//g'`
        if [ "$MB"x = "KB"x ];then
            z=`echo $NUM | awk '{printf ("%.2f
",$1 *1024)}'`
        elif [ "$MB"x = "MB"x ];then
            z=`echo $NUM | awk '{printf ("%.2f
",$1 *1024*1024)}'`
        elif [ "$MB"x = "GB"x ];then
            z=`echo $NUM | awk '{printf ("%.2f
",$1 *1024*1024*1024)}'`
        else
            z=`echo $NUM`
        fi
        
        echo $z
        
}
while true
do

    iftop -P -n -N -t -B -L1000 -s10 -i $nic | grep -Ev 'Listening| Host|Total|total' | sed -e 's/=>//g' -e 's/<=//g' | grep -Ev '=|-' | sed -e 's/ [0-9]{1,3} //g' | sort -t'.' -k1,1n -k2,2n -k3,3n -k4,4n > $nic && echo `date "+%Y-%m-%d %H:%M:%S"`
    ip=`cat $nic | awk '{print $1}'`
    for i in ${ip[@]}
    do
            #iftop获取到的当前值,并判断是否有冒号(没有冒号会导致将有冒号的值也会计算)
            t=`echo $i | grep -Eo ':'`
            if [ "$t"x = ":"x ];then
                B=`grep -w $i $nic | awk '{print $5}'`
                #echo "1" $i $B
            else
                B=`grep -w $i $nic | grep -v ':' |awk '{print $5}'`
                #echo "2" $i $B
            fi
            
            #循环当前的值
            for flow in ${B[@]}
            do
                A=`KMG $flow`
                
                #判断是否有冒号
                
                if [ "$t"x = ":"x ];then
                    #判断是否已经存在值，不存在直接写入
                    #echo "1" $i $A
                    if grep -wq $i $myFile;then
                        KMGNUM=`grep -w $i $myFile | awk '{printf ("%.2f
",$2 + A)}' A="$A"`
                        #echo '1' `grep $i $myFile`
                        sed -i "/$i/d" $myFile && echo $i $KMGNUM >> $myFile
                        #echo '2' `grep $i $myFile`
                        #echo $i $KMGNUM
                        #echo "A" $i $A
                    else
                        echo $i $A >> $myFile #&&echo "B" $i $A
                    fi
                else
                    #判断是否已经存在值，不存在直接写入
                    #echo "2" $i $A
                    if grep $i $myFile | awk '{print $1}' | grep -v ':' | grep -q $i;then
                        KMGNUM=`grep -w $i $myFile | grep -v ':' | awk '{printf ("%.2f
",$2 + A)}' A="$A"`
                        #echo '1' `grep $i $myFile| grep -v ':'`
                        sed -i "/$i /d" $myFile && echo $i $KMGNUM >> $myFile
                        #echo '2' `grep $i $myFile| grep -v ':'`
                        #echo $i $KMGNUM
                        #echo "A" $i $A
                    else
                        echo $i $A >> $myFile #&& echo "B" $i $A
                        #echo $i $A
                    fi
                fi
            done
        done
done

使用方法

cat *monitor | sort -t ' ' -k2.1nr | sed -n '1,10p' | awk '{print $1,$2 /1024/1024 }'