macOS
Homebrewverified · 100%
brew install nethogslocal Homebrew formula metadata
brew
Install nethogs with Homebrew, apk, apt, dnf, Nix, pacman, zypper
Net top tool grouping bandwidth per process. Version 0.8.8 via Homebrew; verified from local package data.
install
Additional install commands
Linux
Alpine Linux apkverified · 92%
sudo apk add nethogsAlpine Linux edge package indexes · nethogs · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install nethogsDebian stable package indexes · nethogs · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install nethogsFedora Rawhide package metadata · nethogs · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#nethogsnixpkgs package indexes · pkgs/by-name/ne/nethogs/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S nethogsArch Linux sync databases · nethogs · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install nethogsopenSUSE Tumbleweed package metadata · nethogs · source: download.opensuse.org
overview
Package summary
Net top tool grouping bandwidth per process
Project links
Commands and aliases
- nethogs
history
Project history and usage
NetHogs is a Linux 'net top' utility that groups network bandwidth by process rather than protocol or subnet. Its README and manual emphasize the operational trick that made it useful: no special kernel module is needed, so an admin can start it during a traffic spike and see which PID is responsible.
Project history
The GitHub README carries copyright years beginning in 2004 for Arnout Engelen and describes the tool as a small per-process bandwidth monitor. The GitHub repository listed v0.8.8 as the latest release on 2024-10-07.
Adoption history
NetHogs spread as a small sysadmin utility rather than a platform. It is packaged in Linux distributions and Homebrew, and its GitHub repository had about 3.7k stars when checked. Homebrew's API generated on 2026-07-01 reported 1,458 installs in the previous 365 days.
How it is used
Package users run `nethogs`, often with root privileges and an interface name, when a machine is unexpectedly using bandwidth. It answers the question that `iftop`, `tcpdump`, and interface counters do not answer as directly: which process is talking.
The manual documents display modes for rates and totals, refresh delay, and trace/bughunt modes. In practice, `sudo nethogs` is the lazy debugging command when a box is saturating a link and the operator wants the PID before deciding whether to kill or reconfigure it.
Why package nerds care
NetHogs is a classic narrow CLI: one executable, no daemon, no dashboard, and an immediately understandable mental model. It belongs in enrichment data as a practical Linux troubleshooting tool, not as a broad observability system.
Timeline
- 2004: earliest copyright year shown in the upstream README.
- 2024-10-07: GitHub listed v0.8.8 as the latest release.
- 2026-07-01: Homebrew formula API reported 1,458 installs over 365 days.
Related projects
- iftop
- tcpdump
- libpcap
- top
Sources
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 8 platform targets.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
nethogs | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version0.8.8
manager updated
local dataok
upstreamcurrent
latest detectedv0.8.8
https://github.com/raboof/nethogs
- infoNo package-manager update timestamp was available.low confidence
install metadata
Package metadata
| Package key | brew:nethogs |
|---|---|
| Version | 0.8.8 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/nethogs |
| Homepage | https://raboof.github.io/nethogs/ |
| Repository | https://github.com/raboof/nethogs |
| Upstream docs | https://github.com/raboof/nethogs#readme |
| License | GPL-2.0-or-later |
| Source archive | https://github.com/raboof/nethogs/archive/refs/tags/v0.8.8.tar.gz |
| Uses from macOS | libpcap, ncurses |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | nethogs |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
nethogs 0.8.8-1
Net top tool grouping bandwidth per process
https://github.com/raboof/nethogs
sudo apt install nethogs- Section: net
- Architecture: amd64
- 6 dependencies
- normalized package name match
- Matched by: Nethogs
Nix95%
nethogs
nix profile install nixpkgs#nethogs- normalized package name match
- Matched by: Nethogs
Ubuntu apt95%
nethogs 0.8.7-2build2
Net top tool grouping bandwidth per process
https://github.com/raboof/nethogs
sudo apt install nethogs- Section: universe/net
- Architecture: amd64
- 6 dependencies
- normalized package name match
- Matched by: Nethogs
apk95%
nethogs 0.8.8-r0
Top-like monitor for network traffic
https://github.com/raboof/nethogs
sudo apk add nethogs- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: nethogs
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Nethogs
apk95%
nethogs-doc 0.8.8-r0
Top-like monitor for network traffic (documentation)
https://github.com/raboof/nethogs
sudo apk add nethogs-doc- License: GPL-2.0-or-later
- Architecture: x86_64
- Source Package: nethogs
- normalized package name match
- Matched by: Nethogs
dnf95%
nethogs 0.8.8-4.fc44
A tool resembling top for network traffic
https://github.com/raboof/nethogs/
sudo dnf install nethogs- License: GPL-1.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: nethogs
- 9 dependencies
- 1 provides
- normalized package name match
- Matched by: Nethogs
pacman95%
nethogs 0.8.8-2
A net top tool which displays traffic used per process instead of per IP or interface
https://github.com/raboof/nethogs
sudo pacman -S nethogs- License: GPL
- Architecture: x86_64
- 3 dependencies
- normalized package name match
- Matched by: Nethogs
zypper95%
nethogs 0.8.8-1.4
Network Bandwidth Usage Monitor
https://raboof.github.io/nethogs/
sudo zypper install nethogs- License: GPL-2.0-or-later
- Category: Productivity/Networking/Diagnostic
- Architecture: x86_64
- Source Package: nethogs
- 6 dependencies
- 1 provides
- normalized package name match
- Matched by: Nethogs
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment