A graphical network monitor
EtherApe logo Hosted at Sourceforge
Screen Shots


Binary Packages
Source Code


Mailing Lists
Public Forums
Bug Reporting


Project Page
Bug Tracking
Mercurial repo
 Mini Screen Shot


EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display.
It supports Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP and WLAN devices, plus several encapsulation formats. It can filter traffic to be shown, and can read packets from a file as well as live from the network.
Node statistics can be exported.

Welcome Zev Weiss as a new developer (Friday March 4, 2016)

Zev Weiss in the past months has contributed several quality patches.
It's a pleasure to announce he is now a full committer for EtherApe.


Overview of changes in EtherApe 0.9.14 (Saturday February 06, 2016):

EtherApe now users the system /etc/services file instead of its own.
While this change make some customizations a bit harder, it guarantees an up-to-date services file.
Note to packagers: /etc/etherape is not needed anymore.

Central node option now undestands CIDR notation, allowing for a central ring of nodes, thanks to Zev Weiss.

Static background image, courtesy of Glenn Feunteun.

Nodes can be optionally arranged as columns, thanks to David Goldfarb.

Changes summary:

  • autoconf updated to 2.69
  • fixed incorrect WLAN control frames decoding
  • fix UTF-8 encoding of several files, thanks to StrPt.
  • read system services file instead of EtherApe one, thanks to Zev Weiss.
  • fix race condition on exit, thanks to Zev Weiss
  • central ring option, thanks to Zev Weiss
  • tweaks to preference windows to better work with tiling managers, thanks to Zev Weiss.
  • static background image (Glenn Feunteun)
  • arrange nodes in 'columns' (David Goldfarb)

As usual, and thanks to OpenSuse Build Service, EtherApe rpms are available for:

  • Mageia 5
  • CentOS 5,6 and 7
  • Fedora 21,22 and 23
  • RHEL 5
  • ScientificLinux 6 and 7
  • OpenSUSE 13.2 and Tumbleweed/Factory
  • SLE 11


Overview of changes in EtherApe 0.9.13 (Sunday May 05, 2013):

Central node option, useful for displaying routers or proxies.
Translations and documentation updates, plus some fixes.

OpenSUSE build service now provides binary packages for Fedora 17 and 18 and SLES 11 SP2.

Changes summary:

  • Optional central node, based on work of Javier Fernandez-Sanguino Peņa.
  • re-enabled full-screen mode, thanks to nrvale0
  • Updated spanish translation, thanks to Javier Fernandez-Sanguino Peņa.
  • Added German translation, and fixed typos, thanks to Chris Leick.
  • Updated documentation.


Overview of changes in EtherApe 0.9.12 (Tuesday May 31, 2011):

This is a bugfix release.
Shortly after releasing 0.9.11, David Goldfarb discovered a critical bug in EtherApe, triggered by RPC traffic.

This bug can be exploited to crash EtherApe by sending a suitable packet.
No packet data is used beyond the IP addresses, however, making further escalation unlikely.

This bug has been assigned CVE number CVE-2011-3369

Changes summary:

  • fixed bug 3309061, thanks to David Goldfarb.


Overview of changes in EtherApe 0.9.11 (Friday May 27, 2011):

Several users asked for a way to export traffic statistics.
EtherApe now can save a snapshot with all known nodes and relevant informations to an XML file.
With option --final-export, a dump is automatically generated when a capture file is fully replayed.
Additionally, option --signal-export enables SIGUSR1 handling, to dump on signal.

EtherApe used to have two links for connection, one for each traffic direction. With this release, only one link is needed, gaining more complete statistics and better resource usage.

EtherApe config file is now ~/.config/etherape, instead of the older, deprecated, ~/.gnome2/Etherape. Migration is automatic. Filter expression is now saved.

Thanks to OpenSUSE Build Service and a new spec file, development rpms can easily be built for OpenSUSE 11.x/Tumbleweed, SLE11, Centos5/RHEL5, Fedora and Mandriva.
The spec file is somewhat generic, lacking the nicer integrations of official distribution packages, so you are advised to build with EtherApe spec file only as a last resort.

OSX compatibility improved, thanks to Zack Perry.

The old, deprecated, direct resolver was removed. Name resolution is now only done with the full fledged threaded resolver.

Changes summary:

  • XML export of node statistics
  • added --final-export to export statistics at replay end
  • added --signal-export to export statistics on SIGUSR1 (FR 3185920)
  • improved link statistics
  • added a toolbar button to open the nodes window
  • a new button allows skipping lengthy pauses when replaying
  • fixed a long-standing bug affecting expiry timeouts. EtherApe was overestimating traffic averages
  • used stock icons when possible to improve consistency with themes
  • EtherApe now builds natively on CENTOS5/RHEL5
  • rewrote spec file for use with OpenSUSE Build Service
  • updated documentation
  • removed several (harmless) compiler warnings to make packager's life easier
  • imported debian-specific patches and a swedish translation by Daniel Nylander
  • workaround for OSX troubles with gtk_input_add. Thanks to Zack Perry persistence for helping diagnose and fix
  • removed obsolete preference "cycle assigned colors"
  • removed deprecated direct resolver
  • config file now saved to ~/.config/etherape
  • filter expression is now saved with the other preferences
  • italian translation
  • link and node sizes now computed with the same variable types
  • new size variables: active packets, total packets, average packet size


All the news...

Riccardo Ghetta, Juan Toledo