netwatch apt repository

Debian and Ubuntu packages for netwatch, for amd64 and arm64. The binary is statically linked, so the packages depend on nothing and install on any current Debian or Ubuntu.

curl -fsSL https://matthart1983.github.io/netwatch/apt/netwatch.gpg \
  | sudo tee /usr/share/keyrings/netwatch.gpg >/dev/null

echo "deb [signed-by=/usr/share/keyrings/netwatch.gpg] \
https://matthart1983.github.io/netwatch/apt stable main" \
  | sudo tee /etc/apt/sources.list.d/netwatch.list

sudo apt update && sudo apt install netwatch

Packet capture needs elevated access. Run sudo netwatch, or grant the capabilities once:

sudo setcap 'cap_net_raw,cap_bpf,cap_perfmon+eip' /usr/bin/netwatch

The package deliberately does not do this for you. Capabilities attach to the file, so re-apply after each upgrade.

Other ways to install — Homebrew, Fedora COPR, the container image, plain binaries — are in the README.