# Install nethogs with Homebrew, apk, apt, dnf, Nix, pacman, zypper Net top tool grouping bandwidth per process. Version 0.9.0 via Homebrew; verified 2026-07-11. Also installable with debian: sudo apt install nethogs. ## Install ```sh sudo av install brew:nethogs ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install nethogs ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add nethogs ``` Evidence: Alpine Linux edge package indexes: nethogs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install nethogs ``` Evidence: Debian stable package indexes: nethogs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install nethogs ``` Evidence: Fedora Rawhide package metadata: nethogs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#nethogs ``` Evidence: nixpkgs package indexes: pkgs/by-name/ne/nethogs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S nethogs ``` Evidence: Arch Linux sync databases: nethogs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install nethogs ``` Evidence: openSUSE Tumbleweed package metadata: nethogs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Package facts - **Package key:** brew:nethogs - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.9.0 - **Source summary:** Net top tool grouping bandwidth per process - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-or-later - **Source archive:** - **Last updated:** 2026-07-11T11:59:13Z - **Generated:** 2026-08-04T22:13:35+00:00 ## Executables - nethogs (cli) - nethogs (alias) ## Uses from macOS - libpcap - ncurses ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-08-04 - Package-manager version: 0.9.0 - Package-manager updated: 2026-07-11 - Local data: ok - Upstream repository: https://github.com/raboof/nethogs - Upstream latest detected: v0.9.0 (current) ## Project history and usage NetHogs is a Linux 'net top' utility that groups network bandwidth by process rather than protocol or subnet. Its README and manual emphasize the operational trick that made it useful: no special kernel module is needed, so an admin can start it during a traffic spike and see which PID is responsible. ### Project history The GitHub README carries copyright years beginning in 2004 for Arnout Engelen and describes the tool as a small per-process bandwidth monitor. The GitHub repository listed v0.8.8 as the latest release on 2024-10-07. ### Adoption history NetHogs spread as a small sysadmin utility rather than a platform. It is packaged in Linux distributions and Homebrew, and its GitHub repository had about 3.7k stars when checked. Homebrew's API generated on 2026-07-01 reported 1,458 installs in the previous 365 days. ### How it is used Package users run `nethogs`, often with root privileges and an interface name, when a machine is unexpectedly using bandwidth. It answers the question that `iftop`, `tcpdump`, and interface counters do not answer as directly: which process is talking. The manual documents display modes for rates and totals, refresh delay, and trace/bughunt modes. In practice, `sudo nethogs` is the lazy debugging command when a box is saturating a link and the operator wants the PID before deciding whether to kill or reconfigure it. ### Why package nerds care NetHogs is a classic narrow CLI: one executable, no daemon, no dashboard, and an immediately understandable mental model. It belongs in enrichment data as a practical Linux troubleshooting tool, not as a broad observability system. ### Timeline - 2004: earliest copyright year shown in the upstream README. - 2024-10-07: GitHub listed v0.8.8 as the latest release. - 2026-07-01: Homebrew formula API reported 1,458 installs over 365 days. ### Related projects - iftop - tcpdump - libpcap - top ### Sources - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** nethogs - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - nethogs - 0.8.8-1: normalized package name match | Debian stable package indexes: nethogs from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Net top tool grouping bandwidth per process | https://github.com/raboof/nethogs - Nix - nethogs: normalized package name match | nixpkgs package indexes: pkgs/by-name/ne/nethogs/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - nethogs - 0.8.7-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: nethogs from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Net top tool grouping bandwidth per process | https://github.com/raboof/nethogs - apk - nethogs - 0.8.8-r0: normalized package name match | Alpine Linux edge package indexes: nethogs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Top-like monitor for network traffic | https://github.com/raboof/nethogs - apk - nethogs-doc - 0.8.8-r0: normalized package name match | Alpine Linux edge package indexes: nethogs-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Top-like monitor for network traffic (documentation) | https://github.com/raboof/nethogs - dnf - nethogs - 0.9.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nethogs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | A tool resembling top for network traffic | https://github.com/raboof/nethogs/ - pacman - nethogs - 0.8.8-2: normalized package name match | Arch Linux sync databases: nethogs from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A net top tool which displays traffic used per process instead of per IP or interface | https://github.com/raboof/nethogs - zypper - nethogs - 0.9.0-1.2: normalized package name match | openSUSE Tumbleweed package metadata: nethogs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Network Bandwidth Usage Monitor | https://raboof.github.io/nethogs/ ## Related links - [Source-control packages](https://pkg.so/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://pkg.so/brew-utility-packages/) - Matched Homebrew package provider. - [nload](https://pkg.so/brew/nload/) - Shares pkgdb curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking. - [mrtg](https://pkg.so/brew/mrtg/) - Shares pkgdb curated category or tags: bandwidth, cli, monitoring, network-monitoring, networking. - [ntopng](https://pkg.so/brew/ntopng/) - Shares pkgdb curated category or tags: cli, monitoring, network-monitoring, networking. - [prettyping](https://pkg.so/brew/prettyping/) - Shares pkgdb curated category or tags: cli, monitoring, network-monitoring, networking. - [rustnet](https://pkg.so/brew/rustnet/) - Shares pkgdb curated category or tags: cli, monitoring, network-monitoring, networking. - [netshow](https://pkg.so/brew/netshow/) - Shares pkgdb curated category or tags: cli, monitoring, network-monitoring, networking. - [packetbeat](https://pkg.so/brew/packetbeat/) - Shares pkgdb curated category or tags: cli, monitoring, network-monitoring, networking. - [slurm](https://pkg.so/brew/slurm/) - Shares pkgdb curated category or tags: cli, monitoring, network-monitoring, networking. - [vnstat](https://pkg.so/brew/vnstat/) - Local metadata places this package in an adjacent workflow. Shared terms: bandwidth, cli, linux, monitoring, network. - [bmon](https://pkg.so/brew/bmon/) - Local metadata places this package in an adjacent workflow. Shared terms: bandwidth, cli, monitoring, network, network-monitoring. - [bwm-ng](https://pkg.so/brew/bwm-ng/) - Local metadata places this package in an adjacent workflow. Shared terms: bandwidth, cli, monitoring, network, network-monitoring. ## Combined YAML source View the package source record on GitHub. [combined/nethogs.yml](https://github.com/mxcl/pkgdb/blob/main/combined/nethogs.yml) ## Sources - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph