In addition to a menu of options to full screen, IPTraf has the following characteristics: IPTtraf supports multiple protocols: IPTraf supports a wide range of network interfaces: The main data structures using the various facilities of the program are in doubly linked list, which facilitates their movement.

Search operations in most of the facilities are carried out linearly, a fact that causes a mild but almost imperceptible impact.

Because of the speed with which tends to increase the traffic monitor IPs, it use a hash table to perform searches more efficiently.

(Search operations are carried out whenever the program needs to check if it is already listed the Ethernet or IP address or protocol or network port.

Every time a connection is restarted or completely closed, the ticket information is not released, but added an entry to the closed-list.