iptraf - Interactive Colorful IP LAN Monitor


iptraf { [ -f ] [ -q ] [ { -i iface | -g | -d iface | -s iface | -z iface | -l iface } [ -t timeout ] [ -B [ -L logfile ] ] ] | [ -h ] }


iptraf is an ncurses-based IP LAN monitor that generates various network statistics including TCP info, UDP counts, ICMP and OSPF information, Ethernet load info, node stats, IP checksum errors, and others.

If the
.Biptraf command is issued without any command-line options, the program comes up in interactive mode, with the various facilities accessed through the main menu.


These options can also be supplied to the command:
-i iface
 immediately start the IP traffic monitor on the specified interface, or all interfaces if "-i all" is specified
-g immediately start the general interface statistics
-d iface
 allows you to immediately start the detailed on the indicated interface (iface)
-s iface
 allows you to immediately monitor TCP and UDP traffic on the specified interface (iface)
-z iface
 shows packet counts by size on the specified interface
-l iface
 start the LAN station monitor on the specified interface, or all LAN interfaces if "-l all" is specified
-t timeout
 tells IPTraf to run the specified facility for only timeout minutes. This option is used only with one of the above parameters.
-B redirect standard output to /dev/null, closes standard input, and forks the program into the background. Can be used only with one of the facility invocation parameters above. Send the backgrounded process a USR2 signal to terminate.
-L logfile
 allows you to specify an alternate log file name. The default log file name is based on either the interface selected (detailed interface statistics, TCP/UDP service statistics, packet size breakdown), or the instance of the facility (IP traffic monitor, LAN station monitor). If a path is not specified, the log file is placed in /var/log/iptraf
-f clears all locks and counters, causing this instance of IPTraf to think it’s the first one running. This should only be used to recover from an abnormal termination or system crash.
-q no longer needed, maintained only for compatibility.
-h shows a command summary


SIGUSR1 - rotates log files while program is running SIGUSR2 - terminates an IPTraf process running in the background.


/var/log/iptraf/*.log - log file /var/local/iptraf/* - important IPTraf data files


Documentation/* - complete documentation written by the author


Gerard Paul Java (


Frederic Peters (, using iptraf --help General manual page modifications by Gerard Paul Java (

openSUSE Logo