Powerful Network Monitoring Features
Discover the comprehensive capabilities that make EtherView™ the ultimate network visualization and analysis tool
bubble_chart Advanced Network Visualization
Force-Directed Layout
Dynamic node positioning with physics simulation. Nodes automatically arrange themselves based on connection strength and network topology.
Circular Layout
Arrange all nodes in a perfect circle for symmetrical visualization. Ideal for understanding network periphery and core relationships.
Grid Layout
Organize nodes in a structured grid pattern. Perfect for methodical network analysis and comparison across time.
Hierarchical Layout
Tree-based visualization showing network hierarchy. Displays client-server relationships and network structure clearly.
touch_app Interactive Controls
open_with Drag & Position
- Click and drag nodes to reposition
- Pin nodes to lock positions
- Pinned nodes shown with red border
- Right-click context menu for options
zoom_in Zoom & Pan
- Mouse wheel to zoom in/out
- Keyboard shortcuts (Ctrl+/Ctrl-)
- Reset zoom to 100% (Ctrl+0)
- Pan view with middle-click drag
fullscreen View Options
- Full-screen mode (F11)
- Detachable floating windows
- Multi-tab interface
- Customizable layouts
settings_input_antenna Advanced Packet Capture
network_check Multi-Interface Support
Capture from any available network interface including Ethernet, Wi-Fi, loopback, and virtual interfaces. Monitor multiple interfaces simultaneously using independent instances.
layers Capture Modes
Three specialized capture modes optimized for different analysis needs:
- Link Layer (L0) - Complete ethernet frame analysis
- IP Layer (L1) - Network layer focus, balanced performance
- TCP Layer (L2) - Transport layer, application traffic
pageview Deep Packet Inspection - 100+ Protocols
Content-based service detection with automatic fallback to port mapping for unprecedented accuracy. EtherView analyzes packet payloads to identify 25+ protocols via deep inspection, plus 100+ services via intelligent port mapping - even when using non-standard ports.
psychology Intelligent Service Detection
memory Content Analysis First
EtherView examines packet payloads to identify protocols by their unique signatures, headers, and command patterns - not just port numbers.
settings_backup_restore Port-Based Fallback
When payload inspection isn't possible (encrypted traffic, fragments), automatically falls back to comprehensive port-to-service mappings.
verified Non-Standard Port Detection
Correctly identifies services even when running on unusual ports (e.g., HTTP on 8080, SSH on 2222) by analyzing packet content.
speed Performance & Scalability
memory Threaded Packet Processing
Multi-threaded architecture for efficient packet capture and analysis. Separate threads for capture, processing, and visualization ensure smooth performance even under heavy network loads.
analytics Real-Time Statistics
Live performance metrics including packet counts, protocol distribution, bandwidth usage, and connection statistics. All updated in real-time with minimal performance impact.
history 4D Temporal Lattice Recording
Revolutionary network recording technology that captures not just packets, but the complete evolution of your network visualization over time.
4k Four Dimensions of Network Data
Record complete network activity including node positions, movements, connections, and protocol changes over time. Play back network evolution with full fidelity.
X-Axis: Horizontal node positions
Y-Axis: Vertical node positions
Z-Axis: Protocol & connection strength
Time: Temporal progression
fiber_manual_record Recording Features
- Start/pause/stop recording controls
- Automatic event timestamping
- Periodic statistics collection (every 10s)
- Canvas state preservation (zoom, position)
- Node movement tracking
- Protocol change detection
- Export to .4dlat file format
play_arrow Playback Controls
- Timeline scrubbing with slider
- Play/pause/stop controls
- Variable playback speed (0.5x - 4x)
- Frame-by-frame stepping
- Jump to specific timestamps
- Loop playback mode
- Real-time event counter
analytics Analysis Features
- Historical statistics at any point in time
- Protocol usage trends over time
- Network topology evolution
- Node appearance/disappearance tracking
- Connection formation patterns
- Visual state reconstruction
- Metadata preservation
info Use Cases for Temporal Recording
security Security Incident Analysis
Record network activity during security events. Replay attacks step-by-step to understand infection vectors, lateral movement, and data exfiltration patterns.
bug_report Network Troubleshooting
Capture intermittent network issues. Replay the sequence of events that led to connection failures, packet loss, or service degradation.
school Training & Documentation
Create recordings of network behavior for training materials. Demonstrate network concepts, attack scenarios, or troubleshooting procedures with real captures.
assessment Performance Analysis
Record network behavior under different loads. Compare baseline activity with peak usage to identify bottlenecks and optimization opportunities.
tune Customization & Themes
Visual Themes
Light, Dark, Cosmic, and System themes. Each optimized for different lighting conditions and personal preferences.
Background Options
Customizable backgrounds including solid colors, gradients, and grid patterns. Adjust opacity and styling to suit your needs.
Protocol Colors
Automatic color coding by protocol type. Easily distinguish between HTTP, DNS, SSH, and other services at a glance.
devices Cross-Platform Excellence
Built with Qt6 for consistent performance across Windows, Linux, and macOS. Identical detection capabilities and user experience on all platforms.
Windows • Linux • macOS
compare How EtherView™ Compares
See why EtherView™ is the next generation of network monitoring tools
| Feature | Previous Generation Tools | EtherView™ |
|---|---|---|
| UI Framework | GTK3 / Legacy toolkits | Modern Qt6 |
| Build System | Autotools / Make | CMake (modern) |
| Programming Language | C | C++ (C++17) |
| Layout Algorithms | Fixed circular only | Force-directed, Circular, Grid, Hierarchical |
| Physics Simulation | None | Full physics engine with collision detection |
| Node Interaction | Basic view only | Drag, pin, unpin, context menus |
| Service Detection | Port-based only | Deep packet inspection (25+) + port mapping (100+) |
| Protocol Support | Basic TCP/UDP/ICMP | 100+ protocols with content analysis |
| Non-Standard Ports | Not detected | Detected via payload inspection |
| Temporal Recording | None | 4D Lattice with playback controls |
| Timeline Replay | Not available | Full replay with variable speed (0.5x-4x) |
| Multi-Tab Interface | Single window | Multi-tab with detachable windows |
| Statistics | Limited metrics | Comprehensive real-time statistics |
| Visual Themes | Basic/none | Light, Dark, Cosmic, System themes |
| Export Capabilities | Limited | Multiple formats including .4dlat recordings |
| Cross-Platform | Usually Linux only | Windows, Linux, macOS (planned) |
| Documentation | Man pages | Comprehensive guides, API docs, tutorials |
| Development Activity | Maintenance mode | Active development with regular updates |
Why Upgrade to EtherView?
Modern Technology
Built on Qt6 for future-proof architecture
Superior Detection
25+ protocols via deep inspection
Time Machine
Record and replay network evolution
Better UX
Intuitive, interactive, beautiful
Ready to Experience These Features?
Choose a plan and start monitoring your network today
explore Explore Use CasesEtherView™ is a trademark of SanusSys, LLC