Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

EtherApe

Free#12 of 30 in Network Protocol AnalyzersNetwork Packet Analyzer Software

EtherApe: A free, visual analyzer for mapping live and captured Linux network traffic. Ranked #12 of 30 in Network Protocol Analyzers by our editors (8.0/10); pricing: Free plan; best for visual Linux traffic mapping.

8.0/10Editor score
EtherApe8.0 Visit EtherApe

At a glance

  • Editor score
    8.0 / 10
  • Pricing
    Free plan
  • Best for
    Visual Linux traffic mapping
  • Free plan
    Yes
  • Paid from
    Free
  • Deployment
    Desktop
  • Facts checked
    20 Sep 2026
EtherApe screenshot
  • Where it wins

    • Visualizes traffic volume through node and link sizing
    • Supports live capture and tcpdump file replay
    • Exports node statistics in XML and JSON
  • Where it doesn't

    • Binary distributions are available for Linux only
    • No remote capture support
    • Decryption is outside its listed scope

Our verdict on EtherApe

EtherApe is an open-source graphical network traffic monitor for Unix-like systems, with binary distributions available for Linux. It is intended for network professionals who want a visual view of hosts, links, protocols, and traffic volumes rather than a primarily text-based analysis workflow. The interface can display link-layer, IP, and TCP views, sizing nodes and links according to traffic volume and using colors to distinguish protocols. DNS and hosts-file name resolution can add readable names to the visualization.

Its strongest area is the combination of graphical mapping and packet-source flexibility. EtherApe can capture live traffic from supported network interfaces or read and replay tcpdump capture files. Protocol-aware coloring, protocol stack selection, and libpcap syntax capture filtering help narrow the displayed traffic. Separate dialogs provide node, link, protocol, and traffic statistics, while XML and JSON export makes node statistics available for further processing. These features make it a focused choice for visual traffic exploration and flow analysis.

The main trade-off is scope. EtherApe is a desktop application with Linux support, and remote capture is not part of its capabilities. Its positioning also stops short of verified decryption, so teams needing remote collection or encrypted-traffic decryption should choose a different analyzer. For Linux users who want a free, open-source way to see traffic relationships, inspect captures, and export node statistics, EtherApe is a direct fit. It is less suitable for cross-platform deployments or workflows centered on remote sensors and deeper decryption analysis.

Your product? Our editors can test EtherApe in depth and publish a review, labelled as paid · from $149/mo →

EtherApe pricing

Plans Free planFree Free to use — no paid tier required for the core job.
See plans on etherape.sourceforge.io

EtherApe fact sheet

Free planYes
Paid fromFree
DeploymentDesktop
Capture sourcesBoth
PCAP supportYes
Traffic decryptionNot verified
CLI toolsYes
Remote captureNo
Flow analysisYes
DeploymentDesktop
PlatformsLinux
SupportDocs
Built forSolo, Small business (editorial estimate)
PricingFree plan
Websiteetherape.sourceforge.io
Facts checked20 Sep 2026

Alternatives to EtherApe

See all EtherApe alternatives →

Also Ranked In

EtherApe is ranked in 2 of our directories.

Used EtherApe? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used EtherApe for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — EtherApe 8.0/10

EtherApe is listed in our Network Protocol Analyzers directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/etherape/"><img src="https://www.itechguides.com/best/badge/etherape.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update