etherape (1) - Linux Manuals

etherape: graphical network traffic browser


etherape - graphical network traffic browser


etherape [ -m operating mode ] [ -i interface ] [ -f filter ] [ -r inputfile ] [ -n ] [ -d ] [ -F ] [ -N color ] [ -L color ] [ -T color ] -z ]


etherape is a network traffic browser. It displays network activity graphically. It uses GNOME libraries as its user interface, and libpcap, a packet capture and filtering library.


These options can be supplied to the command:

-m, --mode <ethernet|fddi|ip|tcp>
set mode of operation (default is lowest level for current device)
-i, --interface <interface name>
set interface to listen to
-f, --filter <capture filter>
set capture filter
-r, --infile <file name>
set input file
-n, --numeric
don't convert addresses to names
-d, --diagram-only
don't display any node text identification
-F, --no-fade
do not fade old links
-N, --node-color <color>
set the node color
-L, --link-color <color>
set the link color
-T, --text-color <color>
set the text color
-z, --zero-delay
ignores timestamps when replaying a capture file.
-?, --help
show a brief help message


Etherape will use /etc/ethers if there is one. If not, it will try to reverse lookup the ip address.

IMPORTANT! It is particularly important when running in ethernet mode to have the ethernet address of your router in /etc/ethers. If not, your router will have as name whatever IP address it was forwarding traffic from when it was first heard.


Juan Toledo <toledo [at]>


The etherape webpage is at