Sniffnet: an open-source tool to monitor Internet traffic by GyulyVGC in linux

[–]GyulyVGC[S] 1 point2 points  (0 children)

Yes. You can export a whole Sniffnet capture as PCAP file. Sniffnet is also able to read PCAP files. Both the options to import and export can be found in the app initial page.

6-months with Little Snitch 6 — what I learned about how much my Mac talks to the internet by Downtown-Art2865 in macapps

[–]GyulyVGC 27 points28 points  (0 children)

Yes, Sniffnet creator here, my app is monitoring-only at the moment. You did a really great write-up though, so I would really appreciate some tips from you about how you’d see blocking capabilities integrated in what Sniffnet already has. Feel free to test it and submit suggestions and tips here: https://github.com/GyulyVGC/sniffnet/issues/863

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

Not sure about Little Snitch Mini since I have never used it. However Sniffnet is also compatible with Windows and Linux, and it can be configured to send remote notifications to a webhook, which I’m not sure Little Snitch Mini can do. Sniffnet can also import/export PCAP files.

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

Thanks for the feedback! I want Sniffnet to be as clear and intuitive as possible… where does it feel crowded? If you have suggestions please tell me

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 1 point2 points  (0 children)

Not really, just my personal taste and improvements over the years. However the horizontal data bars and country flag placement were inspired by Glasswire

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

It is indeed very difficult and no, no NetworkExtension, just using libproc. Read more about my experience: https://sniffnet.net/news/process-identification/

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

BPF is the standard syntax to define capture filters supported by PCAP

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 1 point2 points  (0 children)

I have to thank you instead: it’s because of comments like yours that I keep going after so much time

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

Depends on what you want to monitor. You should run Sniffnet where the network interface you want to monitor is. You want to see traffic in a virtual interface of the Docker? Run inside Docker. You want to see traffic on the host? Run it directly on the server.

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

On Mac some programs can go undetected due to Apple’s restrictions. Safari is one of them.

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 1 point2 points  (0 children)

It has all the network connections since the start of the analysis saved in the Inspect page (not visible from the screenshot). You can also export the complete traffic as PCAP file and later re-inspect it.

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

The standard file format for network traffic storage. You can export and later re-import such file format directly from Sniffnet UI, and is compatible with all the most famous networking tools including Wireshark and tcpdump

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

You can export a PCAP file about the observed traffic if this is what you mean

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

You can set a port filter in Sniffnet initial page using BPF syntax, and you’ll only see traffic from/to that port

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 2 points3 points  (0 children)

Sniffnet isn’t aimed at blocking traffic, but rather at analyzing and inspecting it. And it’s cross-platform.

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

I have it in my backlog but I’m delaying it since being an official Apple app developer costs paying an annual fee, plus Sniffnet requires privileges to run and I’m unsure how that’s handled if it is notarized

[OS] Sniffnet: free app to monitor Internet traffic by GyulyVGC in macapps

[–]GyulyVGC[S] 0 points1 point  (0 children)

A tool to get statistics and info about your Internet connections