Tool Open source
Snitch is a free, open-source, cross-platform real-time network-traffic visualizer from aixisstudio. It captures packets through libpcap or Npcap, parses IPv4/IPv6, TCP, UDP, DNS and TLS-SNI traffic, and presents connections in a live force graph, an interactive geolocated world map, bandwidth timelines and per-process views. It attributes traffic to applications, detects patterns such as port scans and beaconing, passively discovers LAN devices through the system ARP table, identifies trackers from editable suffix lists, and provides persisted alert-suppression and filtering rules. The backend uses FastAPI, WebSockets and SQLite; the interface uses React, D3.js and Electron. Traffic records remain local in SQLite, geolocation is offline using bundled DB-IP Lite data or optional MaxMind databases, and the API is loopback-bound with token authentication by default. Snitch visualizes and explains traffic rather than blocking it, so blocking requires a separate firewall. It is distributed for macOS, Linux and Windows under the AGPL v3 license.
3 uses taken from transcripts — each links to the moment in the video.
Shows where your computer's network traffic goes and which apps are responsible, with connections in a live graph and on a world map plus per-app bandwidth history. Traffic records stay local, geolocation works offline, and it flags suspicious patterns, though blocking traffic requires a separate firewall.
Open-source cross-platform network traffic visualizer showing every connection a computer makes as a live node graph and world map, flagging anomalies like port scans and attributing connections to apps, with offline geolocation and no outbound calls.
Open-source cross-platform network traffic visualizer that shows every connection a computer makes as a live node graph and world map, flagging anomalies and attributing connections to the responsible application.
2 in the library.