TrustNoWire

Trust no wire -- including ours. Here's the proof.

Real-time network monitoring and threat detection for Windows. TrustNoWire watches every connection, every byte, and every process on your machine -- then shows you exactly what's happening.

Built with Tauri 2 (Rust backend) and React, it runs as a lightweight desktop app with full packet capture, DNS logging, geo-location, threat scoring, and VirusTotal integration.

This source code is public so you can verify exactly what it does on your machine. A network monitor you can't audit is a network monitor you shouldn't trust.

Screenshots

Iron Man Theme

Expanded	Normal	Compact	Widget	Settings

Stealth Theme

Expanded	Normal	Compact	Widget	Settings

Cyberpunk Theme

Expanded	Normal	Compact	Widget	Settings

Light Theme

Expanded	Normal	Compact	Widget	Settings

Matrix Theme

Expanded	Normal	Compact	Widget	Settings

Features

• Live Connection Table -- Every active TCP/UDP connection with process name, remote IP, port, protocol, country, and Authenticode signature verification
• Packet Capture -- Real-time bandwidth monitoring via Npcap with per-connection byte counters and a live sparkline graph
• DNS Logging -- Intercepts and logs all DNS queries with response IPs and TTLs
• Threat Scoring -- Automatic risk assessment based on process trust, port usage, traffic patterns, hosting provider reputation, and more
• VirusTotal Integration -- Auto-scan and manual scan of remote IPs against the VirusTotal database (bring your own API key)
• Geo-IP Lookup -- Country and city resolution for every remote IP via ip-api.com batch API
• Widget Mode -- Win7-gadget-style micro dashboard (200x290) showing live stats, bandwidth graph, and top threats at a glance
• System Tray -- Minimize to tray with tooltip, left-click restore, right-click menu
• 5 Themes -- Iron Man, Stealth, Cyberpunk, Light, Matrix
• 3 Display Modes -- Compact, Normal, Expanded
• Frameless Transparent Window -- Custom title bar, draggable, always-on-top option
• Admin Elevation -- Release builds auto-request Administrator via UAC manifest for full network visibility

System Requirements

• Windows 10 or 11 (64-bit)
• Npcap installed (required for packet capture)
• Administrator privileges (for raw packet capture and full process visibility)

Building from Source

Prerequisites

• Rust 1.77.2 or later
• Node.js 18 or later
• Npcap SDK -- extract to %USERPROFILE%\npcap-sdk\ (build.rs auto-detects Lib\x64\wpcap.lib)
• Npcap runtime installed on the machine

Build

cd trustnowire
npm install
npx tauri build

The installer (.msi) and standalone executable will be in src-tauri/target/release/bundle/.

Development

npm install
npx tauri dev

Note: tauri dev runs without admin elevation. Some features (raw capture of SYSTEM processes) require running as Administrator.

Optional Setup

VirusTotal API Key

1. Create a free account at virustotal.com
2. Copy your API key from your profile
3. Paste it in TrustNoWire Settings
4. Auto-scan is rate-limited to 4 requests/minute (free tier)

MaxMind GeoIP (Offline)

For offline geo-location instead of ip-api.com:

1. Download GeoLite2-City.mmdb and GeoLite2-ASN.mmdb from MaxMind
2. Place them in the app data directory
3. Build with --features geoip

Architecture

src-tauri/src/
  analysis/     -- DNS parsing, process resolution, threat scoring, TLS inspection
  capture/      -- Npcap packet capture, ETW tracing (planned), connection diffing
  intel/        -- GeoIP lookup, ASN resolution, IP reputation, VirusTotal client
  models/       -- Connection, DnsEntry, ProcessInfo data structures
  commands.rs   -- Tauri IPC command handlers
  state.rs      -- Shared application state (atomic counters, connection table)
  lib.rs        -- App setup, system tray, window management

src/
  components/   -- React UI components (Header, ConnectionList, ThreatLog, etc.)
  hooks/        -- Data polling hooks (useConnections, useBandwidth, useDns)
  utils/        -- Threat scoring, byte formatting, country codes
  themes/       -- 5 color themes

License

TrustNoWire is source-available under the Business Source License 1.1.

You can read, audit, and build the code for personal use. The license converts to MIT on 2030-02-09. See LICENSE.md for full terms.

Author

Win 10/11 exe/msi installers @ TrustNoWire Built by LXB Studio LLC