Solaris 查询那个程序占用了你的流量

最近发现某个程序在访问外网的资源，占用了流量。

通过iftop命令

bash-3.00# /usr/local/sbin/iftop
interface: bnx0
IP address is: 211.160.54.147
MAC address is: 00:22:19:56:c4:b8
                  195Kb             391Kb              586Kb             781Kb         977Kb
└─────────────────┴─────────────────┴─────────────
211.160.54.148                   => 61.129.54.172                    78.0Kb  74.6Kb  54.8Kb
                                 <=                                   797Kb   786Kb   577Kb
211.160.54.148                   => 220.181.61.229                   34.3Kb  12.2Kb  13.2Kb
                                 <=                                  3.10Kb   826b    984b
211.160.54.148                   => 220.181.61.216                    336b   3.88Kb  3.87Kb
                                 <=                                  2.17Kb   573b    564b
wh002                            => 119.119.255.200                  2.92Kb  3.00Kb  2.80Kb
                                 <=                                   160b    160b    160b
211.160.54.148                   => 66.232.97.145                       0b    479b    120b
                                 <=                                     0b   1.92Kb   491b
211.160.54.148                   => 220.181.19.171                      0b   1.19Kb  1.19Kb
                                 <=                                     0b    430b    430b
211.160.54.148                   => 58.50.3.51                          0b    239b    239b
                                 <=                                     0b    431b    431b
255.255.255.255                  =>  *                                  0b      0b      0b
                                 <=                                  1.28Kb   262b     66b
211.160.54.148                   => 61.178.84.244                       0b     83b   7.58Kb
                                 <=                                   320b    147b    930b
211.160.54.148                   => 203.208.60.9                        0b     83b   1.75Kb
                                 <=                                     0b     83b    194b
wh002                            => 219.150.32.132                    292b     58b     44b
                                 <=                                   528b    106b     26b
──────────────────────────────────────────────────
TX:             cumm:  4.24MB   peak:    341Kb              rates:    116Kb  96.0Kb   115Kb
RX:                    13.6MB            887Kb                        805Kb   791Kb   584Kb
TOTAL:                 17.9MB           0.99Mb                        921Kb   887Kb   699Kb

发现某个程序向 61.129.54.172服务器请求数据。


通过  pfiles /proc/* > /pf.out 命令将进程信息输出到文件 /pf.out

打开这个文件搜索  61.129.54.172能够看到请求这个ip的进程的id

在通过 ps命令查看是那个程序，杀死它，问题得到解决！