with sar (from sysstat : http://pagesperso-orange.fr/sebastien.godard/): $> sar -n DEV -f /var/log/sa/sa19 $> sar -n DEV -f /var/log/sa/sa19 | awk '{ /^[0-9]/; tx=$7+0; if ($3=="IFACE" || (tx>1000 && $6/tx>1.5)) { print } }' IFACE rxpck/s txpck/s rxkB/s txkB/s rxcmp/s txcmp/s rxmcst/s %ifutil 19th of March 2016: 11:49:02 PM enp3s0 11650.17 9409.13 10885.98 10678.87 0.00 0.00 0.03 8.92 11:50:02 PM enp3s0 11909.73 9584.90 10956.61 10708.26 0.00 0.00 0.03 8.98 11:51:02 PM enp3s0 9844.45 8099.28 8817.48 8505.76 0.00 0.00 0.03 7.22 11:52:02 PM enp3s0 12631.95 10061.50 11690.48 11172.05 0.00 0.00 0.03 9.58 11:53:02 PM enp3s0 12608.07 9962.35 11681.44 11297.37 0.00 0.00 0.03 9.57 11:54:02 PM enp3s0 12001.83 9462.12 11046.35 10643.45 0.00 0.00 0.03 9.05 11:55:02 PM enp3s0 9318.85 7621.88 8278.05 8183.64 0.00 0.00 0.03 6.78 11:56:02 PM enp3s0 12007.93 8604.17 11156.83 9429.54 0.00 0.00 0.03 9.14 11:57:02 PM enp3s0 93160.47 8169.78 98652.69 8450.66 0.00 0.00 0.03 80.82 11:58:02 PM enp3s0 97029.92 9379.62 96914.67 9497.57 0.00 0.00 0.03 79.39 20th of March 2016: 12:01:01 AM enp3s0 115828.32 4468.02 118642.02 3021.28 0.00 0.00 0.03 97.19 12:02:01 AM enp3s0 116528.67 6042.87 117653.35 4440.43 0.00 0.00 0.03 96.38 12:03:01 AM enp3s0 117163.92 5356.47 117880.97 3888.28 0.00 0.00 0.03 96.57 12:04:01 AM enp3s0 117851.10 6451.28 117058.52 4933.58 0.00 0.00 0.03 95.89 12:05:01 AM enp3s0 116114.68 3795.95 118130.56 2664.42 0.00 0.00 0.03 96.77 12:06:01 AM enp3s0 115229.93 4363.47 117120.12 3574.46 0.00 0.00 0.03 95.94 12:07:01 AM enp3s0 190641.15 9952.33 68179.33 11014.34 0.00 0.00 0.03 55.85 12:08:01 AM enp3s0 88606.25 7657.28 59678.43 8599.53 0.00 0.00 0.03 48.89 12:09:01 AM enp3s0 102256.92 6611.80 109132.17 5871.24 0.00 0.00 0.03 89.40 12:10:01 AM enp3s0 110189.03 6417.95 118239.41 4861.80 0.00 0.00 0.03 96.86 12:11:01 AM enp3s0 113027.93 5253.38 118330.47 3748.44 0.00 0.00 0.03 96.94 12:12:01 AM enp3s0 118053.35 6377.75 117847.41 4928.84 0.00 0.00 0.03 96.54 12:13:01 AM enp3s0 116144.32 4066.07 117966.95 2794.90 0.00 0.00 0.03 96.64 12:14:01 AM enp3s0 114487.32 2558.82 118563.72 1716.45 0.00 0.00 0.03 97.13 12:15:01 AM enp3s0 114113.63 1886.20 118701.28 1188.12 0.00 0.00 0.03 97.24 12:16:01 AM enp3s0 115786.72 2833.15 118289.44 1902.64 0.00 0.00 0.03 96.90 12:17:01 AM enp3s0 116134.13 3020.67 118000.61 2071.89 0.00 0.00 0.03 96.67 12:18:01 AM enp3s0 116692.18 3626.68 117766.73 2631.06 0.00 0.00 0.03 96.47 12:19:01 AM enp3s0 117998.87 5103.17 117121.72 4135.88 0.00 0.00 0.03 95.95 12:20:01 AM enp3s0 118105.22 5178.48 117645.06 4252.98 0.00 0.00 0.03 96.37 12:21:01 AM enp3s0 114095.53 3959.95 118172.89 2981.03 0.00 0.00 0.03 96.81 12:22:01 AM enp3s0 109107.62 2798.05 118615.52 1894.51 0.00 0.00 0.03 97.17 12:23:01 AM enp3s0 109299.48 4008.07 117793.96 3283.95 0.00 0.00 0.03 96.50 12:24:01 AM enp3s0 38817.50 9092.55 41073.74 10475.36 0.00 0.00 0.03 33.65 12:25:01 AM enp3s0 11294.72 9407.65 11292.96 11315.70 0.00 0.00 0.03 9.27 12:26:01 AM enp3s0 9774.90 8064.12 9701.42 9552.30 0.00 0.00 0.03 7.95 12:27:01 AM enp3s0 10311.58 8519.38 10457.67 10270.57 0.00 0.00 0.03 8.57 12:28:01 AM enp3s0 11054.88 8967.17 10987.48 10763.13 0.00 0.00 0.03 9.00 12:29:01 AM enp3s0 9591.27 8078.87 9686.45 9669.00 0.00 0.00 0.03 7.94