# Install nethogs with Homebrew, apk, apt, dnf, Nix, pacman, zypper

Net top tool grouping bandwidth per process. Version 0.8.8 via Homebrew; verified from local package data.

## Install

```sh
sudo av install brew:nethogs
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install nethogs
```

  Evidence: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add nethogs
```

  Evidence: Alpine Linux edge package indexes: nethogs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install nethogs
```

  Evidence: Debian stable package indexes: nethogs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install nethogs
```

  Evidence: Fedora Rawhide package metadata: nethogs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#nethogs
```

  Evidence: nixpkgs package indexes: pkgs/by-name/ne/nethogs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S nethogs
```

  Evidence: Arch Linux sync databases: nethogs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install nethogs
```

  Evidence: openSUSE Tumbleweed package metadata: nethogs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

## Package facts

- **Package key:** brew:nethogs
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/nethogs>
- **Version:** 0.8.8
- **Source summary:** Net top tool grouping bandwidth per process
- **Homepage:** <https://raboof.github.io/nethogs/>
- **Repository:** <https://github.com/raboof/nethogs>
- **Upstream docs:** <https://github.com/raboof/nethogs#readme>
- **License:** GPL-2.0-or-later
- **Source archive:** <https://github.com/raboof/nethogs/archive/refs/tags/v0.8.8.tar.gz>
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- nethogs (cli)
- nethogs (alias)

## Uses from macOS

- libpcap
- ncurses

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 0.8.8
- Local data: ok
- Upstream repository: https://github.com/raboof/nethogs
- Upstream latest detected: v0.8.8 (current)
- info: No package-manager update timestamp was available.
## Project history and usage

NetHogs is a Linux 'net top' utility that groups network bandwidth by process rather than protocol or subnet. Its README and manual emphasize the operational trick that made it useful: no special kernel module is needed, so an admin can start it during a traffic spike and see which PID is responsible.

### Project history

The GitHub README carries copyright years beginning in 2004 for Arnout Engelen and describes the tool as a small per-process bandwidth monitor. The GitHub repository listed v0.8.8 as the latest release on 2024-10-07.

### Adoption history

NetHogs spread as a small sysadmin utility rather than a platform. It is packaged in Linux distributions and Homebrew, and its GitHub repository had about 3.7k stars when checked. Homebrew's API generated on 2026-07-01 reported 1,458 installs in the previous 365 days.

### How it is used

Package users run `nethogs`, often with root privileges and an interface name, when a machine is unexpectedly using bandwidth. It answers the question that `iftop`, `tcpdump`, and interface counters do not answer as directly: which process is talking.

The manual documents display modes for rates and totals, refresh delay, and trace/bughunt modes. In practice, `sudo nethogs` is the lazy debugging command when a box is saturating a link and the operator wants the PID before deciding whether to kill or reconfigure it.

### Why package nerds care

NetHogs is a classic narrow CLI: one executable, no daemon, no dashboard, and an immediately understandable mental model. It belongs in enrichment data as a practical Linux troubleshooting tool, not as a broad observability system.

### Timeline

- 2004: earliest copyright year shown in the upstream README.
- 2024-10-07: GitHub listed v0.8.8 as the latest release.
- 2026-07-01: Homebrew formula API reported 1,458 installs over 365 days.

### Related projects

- iftop
- tcpdump
- libpcap
- top

### Sources

- <https://formulae.brew.sh/api/formula/nethogs.json>
- <https://github.com/raboof/nethogs>
- <https://man.archlinux.org/man/nethogs.8>


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** nethogs
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Debian apt - nethogs - 0.8.8-1: normalized package name match | Debian stable package indexes: nethogs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Net top tool grouping bandwidth per process | https://github.com/raboof/nethogs
- Nix - nethogs: normalized package name match | nixpkgs package indexes: pkgs/by-name/ne/nethogs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - nethogs - 0.8.7-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: nethogs from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Net top tool grouping bandwidth per process | https://github.com/raboof/nethogs
- apk - nethogs - 0.8.8-r0: normalized package name match | Alpine Linux edge package indexes: nethogs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Top-like monitor for network traffic | https://github.com/raboof/nethogs
- apk - nethogs-doc - 0.8.8-r0: normalized package name match | Alpine Linux edge package indexes: nethogs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Top-like monitor for network traffic (documentation) | https://github.com/raboof/nethogs
- dnf - nethogs - 0.8.8-4.fc44: normalized package name match | Fedora Rawhide package metadata: nethogs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | A tool resembling top for network traffic | https://github.com/raboof/nethogs/
- pacman - nethogs - 0.8.8-2: normalized package name match | Arch Linux sync databases: nethogs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A net top tool which displays traffic used per process instead of per IP or interface | https://github.com/raboof/nethogs
- zypper - nethogs - 0.8.8-1.4: normalized package name match | openSUSE Tumbleweed package metadata: nethogs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Network Bandwidth Usage Monitor | https://raboof.github.io/nethogs/


## Related links

- [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [bmon](https://www.automicvault.com/pkg/brew/bmon/) - Shares av.db curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking.
- [bwm-ng](https://www.automicvault.com/pkg/brew/bwm-ng/) - Shares av.db curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking.
- [ifstat](https://www.automicvault.com/pkg/brew/ifstat/) - Shares av.db curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking.
- [iftop](https://www.automicvault.com/pkg/brew/iftop/) - Shares av.db curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking.
- [mrtg](https://www.automicvault.com/pkg/brew/mrtg/) - Shares av.db curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking.
- [nload](https://www.automicvault.com/pkg/brew/nload/) - Shares av.db curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking.
- [vnstat](https://www.automicvault.com/pkg/brew/vnstat/) - Shares av.db curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking.
- [fprobe](https://www.automicvault.com/pkg/brew/fprobe/) - Shares av.db curated category or tags: cli, monitoring, network-monitoring, networking.

## Combined YAML source

View the package source record on GitHub. [combined/nethogs.yml](https://github.com/automic-vault/db/blob/main/combined/nethogs.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
