EtherApe
EtherApe is a free, open-source graphical network monitor for Linux.
What EtherApe is
EtherApe is a free, open-source graphical network monitor for Linux. It depicts hosts and their connections, resizing them according to traffic volume and using color to indicate the most-used protocol. Users can inspect activity at network, end-to-end IP, or port-to-port TCP level and narrow the display with filters written in pcap syntax. EtherApe captures live traffic or reads tcpdump capture files. Live capture supports Ethernet, FDDI, PPP, SLIP, WLAN, and other encapsulated formats, including Linux cooked and PPI. Node and protocol summary dialogs provide statistics, and node statistics can be exported as XML or JSON. Name resolution uses standard libc functions, with optional ARES resolver integration. The monitor sees traffic physically passing its network card. On switched networks, that generally limits visibility to local or broadcast traffic unless traffic is mirrored to its port or the machine is placed at a gateway. Binary distributions are available for Linux only. The project lists end users, desktop users, and system administrators as its audience and provides bug reporting, mailing lists, and discussion forums.
Good
- Free and open-source
- Shows network, IP, and TCP-level views
- Reads tcpdump files and captures live traffic
- Exports node statistics as XML or JSON
- Supports pcap-syntax filters
Watch out
- Binary distributions are available only for Linux
- Switched networks generally show local or broadcast traffic
- No remote capture
Who it suits
EtherApe suits Linux desktop users and system administrators who want a visual view of live or saved network traffic. Its visibility on switched networks depends on whether traffic is mirrored or passes through a gateway.
Verdict
EtherApe offers visual traffic monitoring and export tools at no cost. Its Linux-only binary availability and switched-network visibility limit are important considerations for choosing where to run it.
Plans and prices
From EtherApe's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free / open-source | Free | No paid plans listed |
The facts
Each one read from EtherApe's own pages, with the date it was checked.
What it does
- Audience
- The SourceForge project page lists end users/desktop users and system administrators as the intended audience.checked 7 Oct 2026
- Build requirements
- The download page lists libpcap, GTK+ and GTK Builder version 3.0 or above, the standard resolver library, and GooCanvas 2 as compile requirements.checked 7 Oct 2026
- Capture limitation
- EtherApe sees traffic physically passing the network card; on switched networks it generally sees local or broadcast traffic unless traffic is mirrored to its port or it is placed at a gateway.checked 7 Oct 2026
- Filtering
- Traffic display can be refined with network filters using pcap syntax.checked 7 Oct 2026
- Interfaces
- Live capture supports Ethernet, FDDI, PPP, SLIP, WLAN, and other encapsulated formats including Linux cooked and PPI.checked 7 Oct 2026
- License
- The project describes EtherApe as open-source software released under the GNU General Public License.checked 7 Oct 2026
- Live and saved capture
- EtherApe can capture live network traffic or read tcpdump capture files.checked 7 Oct 2026
- Name resolution
- Name resolution uses standard libc functions, with optional integration with the ARES resolver.checked 7 Oct 2026
- Protocol views
- Users can view traffic at network, end-to-end IP, or port-to-port TCP levels.checked 7 Oct 2026
- Purpose
- EtherApe is a graphical network monitor modeled after etherman that displays network activity visually.checked 7 Oct 2026
- Statistics and export
- EtherApe provides node and protocol summary dialogs and exports node statistics as XML or JSON.checked 7 Oct 2026
- Support
- The project directs users to SourceForge bug reporting and provides mailing lists and discussion forums.checked 7 Oct 2026
- Traffic visualization
- Hosts and links change size with traffic, and their colors indicate the most used protocol.checked 7 Oct 2026
Where it runs
- Platform availability
- The project says binary distributions are available for Linux only.checked 7 Oct 2026
Alternatives to EtherApe
- 1

NETCAP
Free planOpen sourceWebAPILinuxmacOS8.1From €49 a month - 2

A-Packets
Free planWebAPILinuxSelf-hosted7.5From $99 a year - 3
Wireshark
Free planOpen sourceAPILinuxmacOSSelf-hosted7.5Free plan - 4
Colasoft Capsa
Free planWindows7.4$295 one-time - 5

Arkime
Free planOpen sourceWebAPILinuxSelf-hosted7.3Free plan - 6
OpenGrep
Free planOpen sourceAPILinuxmacOSSelf-hosted7.3Free plan
