netwatch — мониторинг сети в терминале

★ 3K

netwatch is an open-source CLI tool for real-time network monitoring in the terminal, written in Rust and shipped as a single binary that runs with zero config. Reach for it when you can't tell which process is eating your bandwidth, when an app feels slow and you need to rule out the network, when you're on an unfamiliar machine and want to see who it's talking to without standing up a full monitoring stack, or when you suspect a process is quietly phoning home. It maps every live connection to the process that opened it, decodes protocols on the wire, shows GeoIP for remote hosts, and watches for suspicious patterns — port scans, malware beaconing, DNS exfiltration. Since v0.30 there's a diagnostic engine on tab 9: it builds per-metric EWMA baselines over at least 30 minutes, ranks probable causes across 25 rules, offers key-bound remediations, and auto-closes an issue once its own success condition holds. Installed via cargo as the netwatch-tui crate; runs on macOS and Linux; --lite mode fits an 80×24 terminal and --view dense fills a large screen with four zero-chrome panels. Oriented toward live triage and diagnosis, not log storage or alerting — for persistent monitoring with notifications a different tool is needed. Unlike tcpdump, it requires no filter syntax: run it and see. Use only on systems you own or are authorized to monitor.