On a couple of occasions now I have accidentally installed ntop, a web-based “top” clone for network monitoring, when really I want iftop, with it’s libcurses-based command-line goodness. The web thing is cool and all, and I’ve got nothing against it’s suite of dependencies, such as graphvis, however when I’m frantically installing a network visualizer — which generally means that bad shit is going down on some box over which I’ve formally had little control — then I really do need to know what’s happening *right this second*. Hence iftop.

I think iftop used to be called ntop on some distros, which is why I keep mixing them up.