In Solaris 10 build 63 there is a new DTrace provider called the mib provider. It allows us to drill down and look into aspects of the networking subsystems. For example, how cool and simple is the following script which tells you which processes are generating what volume of tcp traffic:
#!/usr/sbin/dtrace -s
mib:::tcpOutDataBytes
{
@[execname] = sum(args[0]);
}
# ./mib.d
dtrace: script './mib.d' matched 3 probes
^C
xterm 9696
java 11660
sshd 197720
I love it! All this and much, much, much more in the August edition of Software Express for Solaris