etherape  0.9.20
About: EtherApe is a GNOME/pcap-based graphical network monitor (etherman clone).
  Fossies Dox: etherape-0.9.20.tar.gz  ("unofficial" and yet experimental doxygen-generated source code documentation)  

etherape Documentation

Some Fossies usage hints in advance:

  1. To see the Doxygen generated documentation please click on one of the items in the steelblue colored "quick index" bar above or use the side panel at the left which displays a hierarchical tree-like index structure and is adjustable in width.
  2. If you want to search for something by keyword rather than browse for it you can use the client side search facility (using Javascript and DHTML) that provides live searching, i.e. the search results are presented and adapted as you type in the Search input field at the top right.
  3. Doxygen doesn't incorporate all member files but just a definable subset (basically the main project source code files that are written in a supported language). So to search and browse all member files you may visit the Fossies etherape-0.9.20.tar.gz contents page and use the Fossies standard member browsing features (also with source code highlighting and additionally with optional code folding).

General Information

EtherApe is a network traffic browser. It displays network activity graphically. It uses GNOME libraries as it's user interface, and libpcap, a packet capture and filtering library.

EtherApe started as an etherman clone, but now it has some unique features. It can run in "interape" mode with -m ip, and in "tcp-ape" mode with -m tcp. Expect more modes to come soon.

EtherApe will use /etc/ethers if there is one. If not, it will try to reverse lookup the ip address.

IMPORTANT! It is particularly important when running EtherApe to have the ethernet address of your router in /etc/ethers. If not, your router will have as name whatever IP address it was forwarding traffic from when it was first heard.

Check the NEWS file for the latest developments, and etherape --help for the current set of options.

You will have to have superuser privileges in order to use this program, as is the case with any libpcap based application.


Please read the INSTALL file for installation instructions. Brief summary:

    # ./configure
    # make install

By default, binaries will be copied to /usr/local/sbin You may uninstall later by running

# make uninstall

You will also find information on how to build a debian package in the INSTALL file.


Historically EtherApe has been compiled and run at least for:

  • Linux: Debian 2.2, Slackware 4.0 and 7.0, RedHat 6.1, modified linuxppc 1999, Debian m68k
  • NetBSD 1.4T (i386)
  • Sparc Solaris 7 with gcc 2.95.2

EtherApe should probably compile and run in other Unix-like OS.

Further information:

See the EtherApe web page at

To receive a message whenever a new version of EtherApe is available, go to and click on the "Monitor this module" link.

See README.bugs for instructions on how to send a bug report.