EtherApe
5.9#22 in network protocol analyzersFree planFree planLinux
VisitEtherApe vs Wireshark
What both publish
| Fact | EtherApe | Wireshark |
|---|---|---|
| Capture limitation | EtherApe sees traffic physically passing the network card; on switched networks it generally sees local or broadcast traffic unless traffic is mirrored to its port or it is placed at a gateway. | The traffic visible to Wireshark depends on the operating system, capture library, network interface, and network configuration; switched networks may not expose unicast traffic between other ports. |
| Filtering | Traffic display can be refined with network filters using pcap syntax. | Users can filter packets using many criteria, including display filters for addresses, ports and protocols. |
| License | The project describes EtherApe as open-source software released under the GNU General Public License. | Wireshark is open-source software released under the GNU General Public License version 2, and the downloaded version is the full version without a license fee. |
| Purpose | EtherApe is a graphical network monitor modeled after etherman that displays network activity visually. | Wireshark captures and interactively browses network traffic as a network protocol analyzer. |
EtherApe plans
- Free / open-sourceFree
Wireshark plans
- WiresharkFree
Pick EtherApe if…
EtherApe suits Linux desktop users and system administrators who want a visual view of live or saved network traffic. Its visibility on switched networks depends on whether traffic is mirrored or passes through a gateway.
Pick Wireshark if…
Wireshark is suited to network professionals, security experts, developers, and educators who need to inspect captured traffic. It supports both graphical and terminal-based analysis.