Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What programs under Linux can capture ethernet traffic? And which ones from them are maintained and most comfortable?

share|improve this question

migrated from Apr 20 '11 at 11:18

This question came from our site for professional and enthusiast programmers.

There's tcpdump available, it captures traffic on specified network interface. As for other programs, someone with more experience will probably post it as an answer :) – Michael J.V. Apr 20 '11 at 11:08

tcpdump is awesome for capturing traffic coming into or out of your machine. Ettercap is awesome if you want to MITM traffic. If you prefer a GUI then Wireshark is a good alternative.

Example usage:

tcpdump src port 80

ettercap -T -Q -M arp:remote -i eth0 / // -P remote_browser
share|improve this answer


share|improve this answer
Don't forget the command line version tshark. – LawrenceC Apr 26 '12 at 13:15

Wireshark is great. Runs on Linux and Windows

share|improve this answer

If you want a console-based graphics dump of the ethernet traffic you can use iptraf as well.

share|improve this answer

You must log in to answer this question.