# Install bandwhich with Homebrew, apk, MacPorts, Nix, pacman, scoop

Terminal bandwidth utilization tool. Version 0.23.1 via Homebrew; verified from local package data. Also installable with nix: nix profile install nixpkgs#bandwhich.

## Install

```sh
sudo av install brew:bandwhich
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install bandwhich
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install bandwhich
```

  Evidence: MacPorts ports tree: net/bandwhich/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add bandwhich
```

  Evidence: Alpine Linux edge package indexes: bandwhich from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#bandwhich
```

  Evidence: nixpkgs package indexes: pkgs/by-name/ba/bandwhich/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S bandwhich
```

  Evidence: Arch Linux sync databases: bandwhich from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

### Windows

- Scoop (92%):

```sh
scoop install main/bandwhich
```

  Evidence: Scoop official bucket manifest trees: bucket/bandwhich.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:bandwhich
- **Package manager:** Homebrew
- **Version:** 0.23.1
- **Source summary:** Terminal bandwidth utilization tool
- **Homepage:** <https://github.com/imsnif/bandwhich>
- **Repository:** <https://github.com/imsnif/bandwhich>
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- bandwhich (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 0.23.1
## Project history and usage

bandwhich is a Rust terminal utility for showing current network utilization by process, connection, and remote host. It fills the same everyday-admin niche as tools like iftop and nethogs, but with a modern cross-platform Rust implementation and a terminal UI.

### Project history

The official repository history begins in September 2019. The README describes a packet-sniffing tool that cross-references captured traffic with process information from /proc on Linux, lsof on macOS, and WinAPI on Windows.

The changelog shows fast early iteration through 2020, including raw output, UI changes, Windows support, DNS controls, and cross-platform fixes. The current README says the project is in passive maintenance: critical issues are addressed, but new features are not actively developed without more maintainers.

### Adoption history

bandwhich moved beyond Cargo-only installation into OS package managers. The official INSTALL.md documents Arch, Exherbo, Nix/NixOS, Void, Fedora COPR, Homebrew, MacPorts, FreeBSD, and Cargo installation paths; the supplied package facts additionally list Homebrew, Alpine, MacPorts, Nix, Arch, and Scoop.

### How it is used

bandwhich generally needs elevated capture permissions. The README documents Linux setcap and sudo workflows, Windows npcap requirements, interface selection, raw output, reverse-DNS controls, DNS display, and logging options.

Its core use is answering a simple operational question from a terminal: which local process and remote endpoint are currently using bandwidth.

### Why package nerds care

bandwhich is package-nerd-interesting because it packages a privileged network sniffer as a single Rust CLI with platform-specific permission notes. Downstream maintainers have to care about capabilities, packet-capture dependencies, manpages/completions, and binary release targets.

It is also a good example of Rust CLI adoption in system administration: a modern replacement-style tool entering classic Unix package channels while still retaining Cargo as an installation fallback.

### Timeline

- 2019: Public Git history begins with the initial commit.
- 2019: 0.3.0 is tagged as an early public release.
- 2020: 0.18.0 adds Windows build and run support.
- 2020: 0.20.0 adds an option to specify a DNS server.
- 2024: 0.23.x releases update packaging, CI, and platform support.
- 2020s: README marks the project as passively maintained.

### Related projects

- bandwhich is related to iftop, nethogs, tcpdump-style packet capture tools, and Rust terminal UI utilities. Its package-manager peer group is small privileged network-monitoring CLIs.

### Sources

- <https://github.com/imsnif/bandwhich>
- <https://github.com/imsnif/bandwhich/blob/main/CHANGELOG.md>
- <https://github.com/imsnif/bandwhich/blob/main/INSTALL.md>
- <https://github.com/imsnif/bandwhich/blob/main/README.md>
- <https://github.com/imsnif/bandwhich/commit/ef4adfa50447028330867ad40a9e261c16a94a1f>
- input.source_facts.package-manager


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Other Package-Manager Records

- Nix - bandwhich: normalized package name match | nixpkgs package indexes: pkgs/by-name/ba/bandwhich/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - bandwhich - 0.23.1-r0: normalized package name match | Alpine Linux edge package indexes: bandwhich from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Terminal bandwidth utilization tool | https://github.com/imsnif/bandwhich
- pacman - bandwhich - 0.23.1-3: normalized package name match | Arch Linux sync databases: bandwhich from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Terminal bandwidth utilization tool | https://github.com/imsnif/bandwhich
- MacPorts - bandwhich: normalized package name match | MacPorts ports tree: net/bandwhich/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Scoop - main/bandwhich: normalized package name match | Scoop official bucket manifest trees: bucket/bandwhich.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/bandwhich.yml](https://github.com/mxcl/pkgdb/blob/main/combined/bandwhich.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
