Hi,

Is there any way to see who is connected into my computer?

I know that there are the commands user and who, but I would like more information about the user e.g.

ip, bandwidth etc, either through fpt, http, ssh or whatever


do I need a network sniffer for such a thing and if yes which one could I use?

Thanks in advance

"sudo netstat -tanocupe" in combination with "who" can give some more infos.

Thanks conconga for your reply.

It seems that netstat -tanocupe is a kind of a network sniffer. I checked it out in the manual of netstat but it doesn't take any parameter tanocupe, and in Internet I didn't find any information about it.

Also, what do you mean in combination with who?

Could you please be more analytic?

Thanks in advance

Please re-read, more carefully, and consider that the problem may be your understanding, rather than the post than the post that you read.

• you'll know when you have tried what was suggested.
• could you think what you might use 'who' for?

I can't see any problem with 'analytic-ness'. Maybe a bit less than effusive, but you have something to work with. When you actually try what was suggested, I think you'll get further. And, I think you'll have specific questions that can be answered.

Other tools you might like are wireshark, jnettop, iptraf (err, and others...you know how to find stuff in the manpages, don't you?). But you'll have to learn the tool that you are using, there won't be much handholding from the tool itself.

Dear Salasi,

thanks also for your reply and sorry for not being clear enough.

First of all I asked if there is a command in linux, which I could use in order to give me some information about the user who are connected in my pc through the network. What I had in mind was a command like top but for users...

I already know the w, who, and user...but these only give me information about the registered users.

I have used in GUI, mostly in windows, sniffers like wireshark and microsoft network monitor, but because I'm trying to use CLI, which unfortunately I'm not so good at, I'm trying to find useful tools for it.

netstat -tanocupe
1. it seems to be a network sniffer...I got confused because I couldn't find any headers to explain me some of Information it gave me. Actually it has scrolled quite a lot and they were hidden...
2. I had connected through ftp as an anonymous user from another computer and although I waited to see my ip Address I didn't see it. Maybe because of the 1. ...Now that I have checked it more thoroughly, it is there.
3. This tool doesn't seem so practical...And in man pages of netstat I can't find any information about tanocupe

So I understand that what I need for my purpose is a network sniffer like the one you proposed me...I' ll checked them out...Which one do you think is better...

Thanks...I hope now I'm more specific.

No you won't, but the command as originally suggested is still good. From your comments, maybe you wanted something less continuous and that is represented by the c, if memory serves, so you might try -tanoupe. Has a little light gone on yet?


Well, for my money, wireshark is the best network sniffer, but that's not what you want; it shows packets, source and destination addresses and has filtering capabilities (and is gui; there may also be a cli version, but I'm not sure). I don't think that gets you that much closer as, in the first instance, you are more interested in connections than packets. You may want to look at packets later, though, and then wireshark might come into its own.

Something like jnettop is probably where you should start, but iptraf might be helpful also.

I found somewhere the following link.

I haven't installed them yet, but it seems that ntop is the most appropriate for my need...