github.comRustNet offers per-process network monitoring with deep packet inspection, enhancing visibility into connections across multiple platforms.
chip
Summary
RustNet is a per-process network monitoring tool designed for terminal use, providing live visibility into TCP, UDP, and QUIC connections with deep packet inspection. It operates across multiple platforms including Linux, macOS, Windows, and FreeBSD, ensuring a consistent user experience.
Key features:
- Per-process attribution - Maps every connection to its owning process using eBPF on Linux and native APIs on other platforms.
- Deep packet inspection - Identifies various protocols including HTTP, DNS, and QUIC without external dissectors.
- Security sandboxing - Implements security measures like Landlock and Seatbelt to enhance safety.
- Real-time analytics - Monitors retransmissions and out-of-order packets for detailed connection insights.
- GeoIP enrichment - Provides country lookups without external network calls.
RustNet serves as a bridge between simple connection tools and comprehensive packet analyzers, allowing users to see which applications own each connection and track connection states in real-time.
Comments
No comments yet. Sign in to add the first comment!