NAME

       etherape - graphical network traffic browser

SYNOPSIS

       etherape  [  -d ] [ -f filter ] [ --final-export outfile ] [ --glade-file gladefile ] [ -i
       interface ] [ -l maxnodes ] [ -m operating mode ] [  --max-delay  delay  ]  [  --min-delay
       delay ] [ -n ] [ -P column file ] [ -q ] [ -r inputfile ] [ -s ] [ --signal-export outfile
       ] [ -Z user ]

DESCRIPTION

       EtherApe is a network traffic browser. It displays network activity graphically.  It  uses
       GNOME  libraries  as  its  user  interface,  and  libpcap,  a packet capture and filtering
       library.

OPTIONS

       These options can be supplied to the command:

       -d, --diagram-only
              don't display any node text identification

       -f, --filter <capture filter>
              set capture filter

       --final-export <export file name>
              when replaying, export to named file at end of replay

       --glade-file <filename>
              uses the named libglade file to load interface instead of the default.

       -i, --interface <interface name>
              set interface to listen to

       -l, --node-limit <number>
              sets the maximum number of node visible

       -m, --mode <link|ip|tcp>
              set mode of operation (default is ip)

       --max-delay <delay in ms>
              caps timestamps to the provided delay when replaying a capture file.

       --min-delay <delay in ms>
              provides a minimum to inter-packet delay when replaying a capture file.

       -n, --numeric
              don't convert addresses to names, disables name resolution.

       -P, --positionfile with list of nodes and columns
              Activate column positioning with  the  named  file.   Manually  position  nodes  in
              virtual columns using the named file content.  See Column Positioning.

       -q     disables informational messages.

       -r, --replay-file <file name>
              sets input file to replay

       -s     Place nodes using an alternate algorithm.  Deprecated.

       --signal-export <export file name>
              if  specified,  enables signal USR1 handling. On receiving USR1, EtherApe will dump
              its state to the named XML file.

              Beware! the file will be overwritten without asking!

       -Z, --relinquish-privileges <user>
              run everything but privileged packet-capture operations under the user ID and group
              ID of the given user.

       -?, --help
              show a brief help message

COLUMN POSITIONING

       With  option  -P|--position  EtherApe reads a file specifying positions of some nodes. The
       input file takes the format of:
         node.mydomain.com        1
         router1.mydomain.com     2
         router2.mydomain.com     2
         172.16.2.[0-9]*          1
         .*.mydomain.com          1
         ff02:.*                  2
         fe80:.*                  1

       The first column is a regex of either the FQDN or the IP address.

       The second column is a number indicating the "column" that the node will be positioned  in
       the display with column 1 being on the far left. Up to 1000 columns are permitted.

       Instead  of  being arranged in a circle the nodes are displayed in columns.  This is quite
       useful for arranging nodes so that you can see nodes on the "inside" of  your  network  on
       the  left and the public internet nodes (anything not specified in the config file) on the
       right.

       The input file above will  cause  3  columns  to  display.   Nodes  with  FQDN  containing
       mydomain.com,  those in the 172.16.2.0/24 subnet, and link local IPv6 addresses will be in
       the left column.  2 "routers", and IPv6  multicast  will  be  in  the  center  column  and
       everything else will be in the right column.

       Column  locations  are  determined  by the first match while searching from the top of the
       input.  Overlapping regex's can be used with the understanding that the first  match  will
       determine  the  location.   The broadest regex's should be near the bottom of the position
       specification.

SIGNALS

       USR1   on receipt of signal USR1, and if enabled with --signal-export, EtherApe will  dump
              its state to the chosen xml file.

              Beware! the file will be overwritten without asking!

ENVIRONMENT VARIABLES

       APE_DEBUG=normal|info|debug
              controls debug output verbosity. Debug information are printed on standard output.

FILES

       Etherape  will  use  /etc/ethers  if  there  is  one to convert MAC addresses to names and
       /etc/services to associate TCP/UDP port numbers to protocol names.

SEE ALSO

       The EtherApe webpage at http://etherape.sourceforge.net/

AUTHORS

       Juan Toledo <toledo@users.sourceforge.net>

       Riccardo Ghetta <bchiara@users.sourceforge.net>

                                       EtherApe Manual Page                           etherape(1)