Hogwatch – a bandwidth monitor that shows per process network transfer

by cujanovic • 10 years ago

195 52 10 years ago

On OS X I use Little Snitch. Unfortunately, it's not free.

I noticed in one of your screenshots you use LS as well, do they serve different purposes or was it just a project for fun?

extra88• 10 years ago

Its "interface" is terrible but in Terminal you can run OS X's nettop [0] to see per-network connection, per-process bytes per second in and out.

[0] https://developer.apple.com/legacy/library/documentation/Dar...

eps2• 10 years ago

Unfortunately, it's not free.

What's so unfortunate about it?

toyg3• 10 years ago

It's not just nonfree (in speech and beer), but it's also very expensive for a personal product IMHO.

heywire• 10 years ago

Somewhat on topic, anyone know of something like Little Snitch for Linux?

aroch2• 10 years ago

There's LeopardFire: https://github.com/themighty1/lpfw

IIRC, it is the most recently active project. As far as I can tell, the whole user-facing, interactive firewall program never really caught on in linux land.

SixSigma• 10 years ago

cli version

http://linux.die.net/man/8/netstat

similarly for disk

http://linux.die.net/man/1/iotop

lsv13• 10 years ago

I use nethogs myself but it's not being placed on repos/ppa lately :( http://askubuntu.com/questions/726601/nethogs-%E2%86%92-crea...

keenerd• 10 years ago

Hogwatch uses Nethogs too: "Hogwatch uses a light python webserver(bottle) feeding nethogs trace mode output to the frontend (Vue.js) using websockets."

I'm not sure why a straightforward graphing project is getting so many votes.

hvis2• 10 years ago

When you upgrade to Xenial, nethogs 0.8.1 is there in the universe repo. Works fine here.

bostik• 10 years ago

My current tool of choice for on-demand console traffic monitoring is tcptrack.[0] Uses libpcap so accepts the same filtering syntax as tcpdump.

It can be pretty CPU intensive, so I would recommend against running it on production perimeter systems. Also, the 2 second default retention period is a bit short.

But all in all very handy.

0: https://tracker.debian.org/pkg/tcptrack

tyingq• 10 years ago

Netstat isn't really similar as it's not mapping bandwidth use to processes.

Iftop and iptraf are command line, and map bandwidth use, but not to processes.

http://www.ex-parrot.com/~pdw/iftop/

http://iptraf.seul.org/

lsv13• 10 years ago

The final build should have proper shebangs and I also noticed the CSS is a little messy. I'll submit a pull request in a bit.

Otherwise I'll give it a shot.

yduuz• 10 years ago

NetBalancer is a similar tool for Windows, with interesting functionality, but not free https://netbalancer.com

Havoc• 10 years ago

Glasswire is also interesting. Way smoother looking interface than any of the other stuff I've seen & there is a paid edition as well so they clearly put time into it.

lmz• 10 years ago

Resource Monitor (resmon.exe) is built-in and will display per process up/down network usage. It does not have per-process graphs AFAIK.

jhovgaard• 10 years ago

It does, you just have to select them: http://i.imgur.com/begi54h.png (notice orange lines)

babhishek212• 10 years ago

Honestly, Task Manager does the job for me. Windows 8 and up, it's great!

aroch2• 10 years ago

WFN is a free, open source alternative: https://wfn.codeplex.com/

kalleboo• 10 years ago

A quick alternative on Mac is "nettop" in the Terminal

aparadja• 10 years ago

If you're on Mac and just want to monitor the connections that each process makes (not the bandwidth), Radio Silence just got a built-in network monitor a few weeks ago: https://radiosilenceapp.com

Disclaimer: I'm the author

asendra• 10 years ago

Nice, first time I hear about it and seems really nice. Good work.

If I only wanted to monitor network connections on my mac, and block/allow them forever/for a limited time, is there any difference in functionality between this and Little Snitcher?

iamcreasy• 10 years ago

Is there anything like that for windows? or any command line tool?

hanief• 10 years ago

Nice. I use Little Snitch myself. I also appreciate the clever naming. ;)

eps2• 10 years ago

On Windows: Sysinternals Process Explorer, already mentioned Glasswire and NetBalancer and a bunch of other apps, almost all which aren't very good at all. But Glasswire is very nice.

mossity• 10 years ago

Process Hacker is much better than Process Explorer, plus it's open source :)

samueladam• 10 years ago

http://processhacker.sourceforge.net/

snoopmaster• 10 years ago

I agree, GlassWire is nice on Windows https://www.glasswire.com

The memory usage used to be bad but it seems better now.

joenathan2• 10 years ago

Also from Windows 8 and up the built in task manager has per process network usage along with disk usage. Makes it real easy to find bottlenecks or resource hogs.

dylan604• 10 years ago

Does this require Administrator rights to see this granularity? In my office as a non-admin user, we have noticed that Task Manager seems really crippled.

josephcooney• 10 years ago

Task Manager or Resource Monitor (which you can launch from Task Manager)? I see lots of per-process stuff in the latter but not the former.

janee• 10 years ago

would be nice to configure a central server to which to push data to and list the machine name with each entry so you can monitor all machines on a network and see who and what is hogging the bandwidth. Might give it a go

jlgaddis• 10 years ago

At a network-level, other tools are often used (e.g. sflow, netflow, ipfix, etc.).

sciurus• 10 years ago

Under the hood, this is using nethogs. Here's how nethogs associates traffic with a process:

On linux the file /proc/net/tcp lists all established TCP connections. It includes the local and remote socket addresses and the inode number for the local socket. Nethogs uses libpcap to sniff traffic and associate it with its entry in /proc/net/tcp. It takes the inode from there and scans through /proc/*/fd/ looking for the file descripter that has that inode to determine which process has the socket open. Once it finds the process it adds it to a table of inode to process id mappings so it doesn’t have to scan through /proc again the second time a packet for that connection comes through.

gardano• 10 years ago

Dammit, now I've gone down a Terry Pratchett black hole again. Thanks, cujanovic.

jcoffland• 10 years ago

etherape is another option on Linux.

akshayKMR• 10 years ago

Hey, project author here. This is the first python package or project for that matter I've built for my college assignment.

I am really overwhelmed by the response. However the project is still very much unifinished.

Here are somethings that need to be fixed/added for eg.

-fix some bugs on frontend.(proper sort on listing/chart switching etc.)

-Kill nethogs process on exit // fails sometimes

-Store history for restarts.

-proper packaging.

-unit tests.

I'll add the above to the readme.md

First time on Hackernews/Github feed feels great though. Cheers.

jszymborski• 10 years ago

I've been working on a similar python webserver + webview GUI from that used in this repo, but aren't there security concerns of just opening it up to the local network? Aren't you exposing your entire API to any app on the same computer?

babhishek212• 10 years ago

I don't think so. If you look at the code carefully, it's pretty much one way traffic. Nothing of significance goes from Client/Webview to the server to get executed.

I was however hoping for authorization based handshakes. Maybe he'll put it in sometime.

On a side note: The project author doesn't sleep enough. He's a good friend. And also it's Finals Week now. :P

Hogwatch – a bandwidth monitor that shows per process network transfer

Related Stories