Captures network traffic, calculates statistics about usage, and serves reports over HTTP.


Screenshots: (click)

graphs hosts ports


Read the ChangeLog.


# ./configure
# make

Once built, this is all it takes to get darkstat running:

# darkstat -i eth0

Although it's possible to configure / complicate things further, once out of the box, darkstat will just work without much trouble on your part.

Slower start:

# man darkstat


darkstat should build and run on any modern UNIX system that has libpcap. It has been reported to build on:

There is an unofficial Windows port of darkstat.


On my FreeBSD router, ppp takes an order of magnitude more CPU time than darkstat. If your system can keep up with PPPoE, you should have no trouble running darkstat.


Some router / firewall / security oriented UNIX distributions package darkstat:

If you package darkstat, please contact me; I'd like to hear about it. If you would like to help with the Release Engineering process for future versions, please contact me.

Some links regarding the previous branch (v2.x):

Similar tools:

Mailing list:

There is a low-traffic (announcements only) mailing list: darkstat-announce.


$ git clone

There's also a gitweb interface.