- Home
- Network Protocol Analyzers
- EtherApe
EtherApe
What it is
EtherApe is a free, open-source graphical network monitor for Linux. It displays network activity as a map in which hosts and links change size with traffic, while color marks the most-used protocol. Users can view activity at network, end-to-end IP or port-to-port TCP level and refine the display with pcap-syntax filters. EtherApe captures live traffic or reads tcpdump capture files. Live capture supports Ethernet, FDDI, PPP, SLIP, WLAN and other encapsulated formats, including Linux cooked and PPI. Node and protocol summary dialogs show statistics, and node statistics can be exported as XML or JSON. Name resolution uses standard libc functions, with optional ARES resolver integration. The monitor sees traffic physically passing its network card; on switched networks, it generally sees local or broadcast traffic unless the port receives mirrored traffic or the machine is placed at a gateway. Binary distributions are available for Linux only. The project lists end users, desktop users and system administrators as its intended audience, and provides bug reporting, mailing lists and discussion forums.
For and against
For
- Free and open-source
- Reads tcpdump capture files
- Shows network, IP and TCP-level views
- Exports node statistics as XML or JSON
- Supports pcap-syntax filters
Against
- Binary distributions are available for Linux only
- Switched networks generally show only local or broadcast traffic
- Remote capture is not supported
The verdict
EtherApe provides visual traffic monitoring and useful protocol and node summaries for Linux. Its visibility depends on which traffic physically reaches the network card.
Who it suits
EtherApe is intended for Linux desktop users and system administrators who want a visual view of network traffic. It may suit users analyzing live traffic or saved tcpdump captures on a machine that can see the relevant traffic.
Plans and prices
Free / open-source
No paid plans listed
Read 7 Oct 2026 · etherape.sourceforge.io
On the record
- Audience
- The SourceForge project page lists end users/desktop users and system administrators as the intended audience.sourceforge.net · read 7 Oct 2026
- Build requirements
- The download page lists libpcap, GTK+ and GTK Builder version 3.0 or above, the standard resolver library, and GooCanvas 2 as compile requirements.etherape.sourceforge.io · read 7 Oct 2026
- Capture limitation
- EtherApe sees traffic physically passing the network card; on switched networks it generally sees local or broadcast traffic unless traffic is mirrored to its port or it is placed at a gateway.etherape.sourceforge.io · read 7 Oct 2026
- Filtering
- Traffic display can be refined with network filters using pcap syntax.etherape.sourceforge.io · read 7 Oct 2026
- Interfaces
- Live capture supports Ethernet, FDDI, PPP, SLIP, WLAN, and other encapsulated formats including Linux cooked and PPI.etherape.sourceforge.io · read 7 Oct 2026
- License
- The project describes EtherApe as open-source software released under the GNU General Public License.etherape.sourceforge.io · read 7 Oct 2026
- Live and saved capture
- EtherApe can capture live network traffic or read tcpdump capture files.etherape.sourceforge.io · read 7 Oct 2026
- Name resolution
- Name resolution uses standard libc functions, with optional integration with the ARES resolver.etherape.sourceforge.io · read 7 Oct 2026
- Platform availability
- The project says binary distributions are available for Linux only.etherape.sourceforge.io · read 7 Oct 2026
- Protocol views
- Users can view traffic at network, end-to-end IP, or port-to-port TCP levels.etherape.sourceforge.io · read 7 Oct 2026
- Purpose
- EtherApe is a graphical network monitor modeled after etherman that displays network activity visually.etherape.sourceforge.io · read 7 Oct 2026
- Statistics and export
- EtherApe provides node and protocol summary dialogs and exports node statistics as XML or JSON.etherape.sourceforge.io · read 7 Oct 2026
- Support
- The project directs users to SourceForge bug reporting and provides mailing lists and discussion forums.etherape.sourceforge.io · read 7 Oct 2026
- Traffic visualization
- Hosts and links change size with traffic, and their colors indicate the most used protocol.etherape.sourceforge.io · read 7 Oct 2026
