bandwhich

Because bandwhich sniffs network packets, it requires elevated privileges. On Linux, the recommended way for single-user machines or trusted environments is to assign specific capabilities to the binary using setcap. This allows unprivileged users to run bandwhich without sudo.

Required capabilities:

• cap_sys_ptrace,cap_dac_read_search: Allows access to /proc/<pid>/fd/ to map open ports to processes.
• cap_net_raw,cap_net_admin: Allows capturing network packets.

Warning: This setup allows all users to see network traffic, which is not recommended for multi-user environments where privacy is required.

# assign capabilities
sudo setcap cap_sys_ptrace,cap_dac_read_search,cap_net_raw,cap_net_admin+ep $(command -v bandwhich)

# run as unprivileged user
bandwhich

To build bandwhich from the source code, clone the repository and use cargo to build the release version. Ensure you have the minimum supported Rust version as specified in the project's Cargo.toml.

git clone https://github.com/imsnif/bandwhich.git
cd bandwhich
cargo build --release

In multi-user environments, you should run bandwhich using sudo to ensure users cannot monitor others' traffic.

If bandwhich is installed in a local user directory, sudo might not find it because it doesn't preserve the user's $PATH. You can resolve this by passing the full path or explicitly setting the environment variable.

# Standard usage
sudo bandwhich

# If command not found due to PATH issues, use one of these:
sudo env "PATH=$PATH" bandwhich
sudo $(command -v bandwhich)

As a fallback for any operating system, you can install bandwhich using the Rust package manager, cargo. This requires the Rust toolchain to be installed.

cargo install bandwhich

Use pacman to install bandwhich from the official repositories.

pacman -S bandwhich

Install bandwhich using cave by resolving it from the rust repository.

cave resolve -x repository/rust
cave resolve -x bandwhich

Use xbps-install to install bandwhich.

xbps-install -S bandwhich

You can install bandwhich using the package manager pkg or by building from ports.

# Using pkg
pkg install bandwhich

# Using ports
cd /usr/ports/net-mgmt/bandwhich && make install clean

Update MacPorts and then install bandwhich.

sudo port selfupdate
sudo port install bandwhich

Use brew to install bandwhich on macOS or Linux systems with Homebrew installed.

brew install bandwhich

Enable the atim/bandwhich COPR repository and install via dnf.

sudo dnf copr enable atim/bandwhich -y && sudo dnf install bandwhich