Skip to content

Netglass v1.0.0

Choose a tag to compare

View all tags
@vrlda vrlda released this 07 Aug 15:30
· 39 commits to main since this release
v1.0.0
884d4b4

Netglass 1.0.0

A process-aware network monitor for macOS. Netglass shows which apps are talking, to whom, and how much — no kernel extensions, no filtering, fully read-only. Just Apple's own APIs and command-line tools.

Features

  • Live connections — per-process flows with real-time throughput, app icons, and transport breakdown
  • Apps & Domains — traffic aggregated per app and per domain, with reverse-DNS evidence for every hostname (forward-confirmed where possible)
  • DNS activity — live DNS query monitoring
  • Packet capture & inspector — ring-rotated pcapng captures with packet decoding (Ethernet/IP/TCP/UDP/ICMP, DNS, HTTP, TLS SNI + certificate details), follow-stream reassembly, and hex view
  • History — persistent flow database with search, filtering, and CSV/JSON export
  • Menu bar meter — little-Snitch-style speed bars with per-second traffic
  • GeoIP — offline country lookup for IPv4 and IPv6
  • flowdump CLI — headless flow sampling to the terminal (included in the repo)

Requirements

  • macOS 15 or later (Apple Silicon or Intel)

Install

  1. Download Netglass-v1.0.0-macos15.zip
  2. Unzip, drag Netglass.app to Applications
  3. On first launch, right-click → Open (the app is ad-hoc signed, not notarized)
  4. Grant the admin password prompt when starting your first packet capture

Building from source

git clone https://github.com/vrlda/netglass.git
cd netglass
swift build
./scripts/build-app.sh --open

Caveats

  • Read-only observer: cannot block or filter traffic
  • Packet capture requires admin privileges (one-time password prompt) and is disabled in sandboxed builds
  • History is stored locally in ~/Library/Application Support/Netglass
Assets 3
Loading