Projects / EtherApe


EtherApe is a GNOME/pcap-based etherman, interman, and "tcpman" clone. It displays network activity graphically. Active hosts are shown as circles of varying size, and traffic among them is shown as lines of varying width. It supports Ethernet, FDDI, Token Ring, ISDN, PPP, WLAN, and SLIP transports. It knows about VLANs, IP, IPv6, TCP, UDP, FTP, and a number of other protocols. Additional statistics windows will let you concentrate on protocols or nodes.

Operating Systems

Last announcement

Prebuilt RPMs available 26 Feb 2011 08:32

Thanks to OpenSUSE Build Service, prebuilt RPM packages for major distributions are now ready for download. On SourceForge download section you'll find i586 and x86_64 RPMs for: * OpenSUSE 11.4 (suse1140) * OpenSUSE 11.3 (suse1130) * SUSE Enterprise 11 (sles11) * SUSE Enterprise 11 sp1 (sles11sp1) * Red Hat Enterprise 5 (rhel505) * CENTOS 5 (centos505) * Mandriva 2010.0 (mdv2010.0) * Mandriva 2010.1 (mdv2010.1) plus an RPM source package.

Recent releases

  •  05 May 2013 16:44

    Release Notes: This release adds a new central node mode (a single node can be placed on the display center, useful for routers and proxies), re-enables fullscreen mode, adds a German translation, and updates the Spanish translation.

    •  31 May 2011 05:25

      Release Notes: A critical bug triggered by RPC traffic that could be exploited to make EtherApe crash just by sending a suitable packet was fixed. No packet data is involved other than the IP addresses, so privilege escalation should not happen.

      •  27 May 2011 19:06

        Release Notes: EtherApe gains several traffic statistics and can now export them. OS X compatibility was improved. Italian and Swedish translations have been added.

        •  06 Feb 2011 14:03

          Release Notes: IPv6 support was added. EtherApe now computes average packet size to better estimate network usage. A new option, --min-delay, allows slow-motion replay of a capture file. Note that the non-threaded name resolver is deprecated and will be removed in the next release.

          •  04 Jan 2010 13:52

            Release Notes: This release adds support for 802.11 WLAN, LLC-SNAP, Radiotap and PPI encapsulation, and 802.1Q VLAN tagging. VLAN tags are decoded but ignored, showing all traffic as being in a normal LAN. EtherApe now uses gnome-doc-utils. Note that this release will be the last mirrored on the CVS repository, which will be shut down on March 2010.

            Recent comments

            14 Jun 2012 12:28 whitemice

            This is a priceless [and free!] package. Watching network traffic flows in this excellent visualization is incredibly useful. Not network administrator should be without this tool.

            27 Aug 2007 20:12 catw0rld

            I don't see where to save the output as a file... let alone where even a default file would be saved.

            Credit to Slax, I remember finding saved etherape sessions, uh.. <somewhere..

            Where saved on exit? Can be saved on exit??

            22 Aug 2001 17:02 borzwazie

            Re: I really wanted to use this, sorry...
            Well I for one would love to use this package. I'm
            trying to get it to work under Solaris but let me
            tell you, GNOME on Solaris 7 just ain't happening
            for me. It looks like Sun will release GNOME for
            Solaris 8 but I think that I'll be out of luck...

            GTK+ does compile successfully for me,
            though...that was the easiest one. If you can get
            a version that just uses that, I think lots of
            Solaris users might just faint with joy...

            06 Jul 2001 06:31 jtoledo

            Re: I really wanted to use this, sorry...

            > But its based on gnome and I don't feel
            > like screwing with all its libs and
            > dependances. Perhaps one day it won't
            > depend on gnome :(

            I believe Gtk 2.0 will have a canvas widget. Once
            that happens it will should be pretty easy to make
            a Gtk only version. Or is GTK too much a
            dependency for you?


            22 Jun 2001 14:35 fireeyes

            I really wanted to use this, sorry...
            But its based on gnome and I don't feel like screwing with all its libs and dependances. Perhaps one day it won't depend on gnome :(


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.