Application to comfortably monitor your network traffic
Multithreaded, cross-platform, reliable
Application translated in: 🇬🇧 - 🇮🇹
More languages will be supported in the upcoming releases
You can install Sniffnet in one of the following ways:
from Crates.io ![](https://camo.githubusercontent.com/a3423acfa125d006799b8ca38feb81109e3ba4160a42709c0c4258149ed890c2/68747470733a2f2f696d672e736869656c64732e696f2f6372617465732f642f736e6966666e65743f636f6c6f723d73756363657373266c6162656c3d646f776e6c6f616473266c6f676f3d72757374)
Follow this method only if you have Rust installed on your machine.
In this case, the application binary can be installed with:
cargo install sniffnet
from GitHub releases ![](https://camo.githubusercontent.com/ba961025846a99d0c9c31f00bef74d3ad1f40e9ad6bd40e0ff8d218a336b70ff/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f646f776e6c6f6164732f6779756c797667632f736e6966666e65742f746f74616c3f636f6c6f723d73756363657373266c6f676f3d676974687562)
You can install Sniffnet through the installers available in the latest release.
Choose from a Windows installer, a macOS disk image, or a DEB package (depending on your operating system).
Here for your convenience you can find the direct link to the downloads:
- Windows (7.3 MB)
- macOS (6.5 MB)
- Linux .deb (5.2 MB)
Depending on your operating system, you may need to install some dependencies to run Sniffnet:
Linux dependencies ![](https://user-images.githubusercontent.com/100347457/193474239-c48d37af-d4c1-4a94-9207-0d46c6d75f1f.png)
In order to correctly run Sniffnet on Linux systems, install the libraries and header files for the libpcap library:
sudo apt-get install libpcap-dev
Note that if you are not running as root, you need to set capabilities to inspect a network adapter:
sudo setcap cap_net_raw,cap_net_admin=eip <your/Sniffnet/executable/path>
Most Linux system also need this dependency (required to build the library used to play sounds):
sudo apt-get install libasound2-dev
Depending on your Linux environment you may also need libfontconfig
:
sudo apt-get install libfontconfig libfontconfig1-dev
- 💻 choose a network adapter of your PC to inspect
- 🏷️ select a set of filters to apply to the observed traffic
- 📖 view overall statistics about your Internet traffic
- 📈 view real-time charts about traffic intensity (bytes and packets per second, incoming and outgoing)
- 🔉 set custom notifications to inform you when defined network events occur (data rate exceeded a specified threshold, or new data have been exchanged from your favorite connections)
- ⭐ view most relevant connections in real time (most recent, most packets, most bytes, favorites)
- 🌍 get information about the country of the remote network addresses (IP Geolocation)
- 🎨 choose the style that fits you the most from 4 different available themes
- 📁 save complete textual report with detailed information for each connection:
- source and destination IP addresses
- source and destination ports
- carried protocols
- amount of exchanged packets and bytes
- initial and final timestamp of information exchange
- ... and more!
See details
Geolocation refers to the remote IP address of the connection, and it's performed against a MMDB file:
The MMDB (MaxMind database) format has been developed especially for IP lookup. It is optimized to perform lookups on data indexed by IP network ranges quickly and efficiently. If you want the best performance on your IP lookups for use in a production environment, you should use the MMDB format files.
This format potentially allows Sniffnet to execute different hundreds of IP lookups in a matter of a few milliseconds.
Sometimes it is not possible to determine the location of an IP address; this is most likely due to the address being a private IP address.
See details
Please, note that application layer protocols are just inferred from the transport port numbers.
Port number(s) | Application protocol | Description |
---|---|---|
20, 21 | FTP | File Transfer Protocol |
22 | SSH | Secure Shell |
23 | Telnet | Telnet |
25 | SMTP | Simple Mail Transfer Protocol |
49 | TACACS | Terminal Access Controller Access-Control System |
53 | DNS | Domain Name System |
67, 68 | DHCP | Dynamic Host Configuration Protocol |
69 | TFTP | Trivial File Transfer Protocol |
80, 8080 | HTTP | Hypertext Transfer Protocol |
109, 110 | POP | Post Office Protocol |
123 | NTP | Network Time Protocol |
137, 138, 139 | NetBIOS | NetBIOS |
143, 220 | IMAP | Internet Message Access Protocol |
161, 162, 199 | SNMP | Simple Network Management Protocol |
179 | BGP | Border Gateway Protocol |
389 | LDAP | Lightweight Directory Access Protocol |
443 | HTTPS | Hypertext Transfer Protocol over SSL/TLS |
636 | LDAPS | Lightweight Directory Access Protocol over TLS/SSL |
989, 990 | FTPS | File Transfer Protocol over TLS/SSL |
993 | IMAPS | Internet Message Access Protocol over TLS/SSL |
995 | POP3S | Post Office Protocol 3 over TLS/SSL |
1900 | SSDP | Simple Service Discovery Protocol |
5222 | XMPP | Extensible Messaging and Presence Protocol |
5353 | mDNS | Multicast DNS |
See details
Most of the errors that can occur are likely due to your system missing required pcap
dependencies,
necessary to correctly analyze a network adapter.
Check the required dependencies section for instructions on how to proceed.
For a Windows reference, you can check issue #1.
Note that most Linux system also need this dependency (required to build the library used to play sounds):
sudo apt-get install libasound2-dev
Some Linux systems also need libfontconfig
, see issue #18 for a reference.
If you have problems after having installed Sniffnet through the provided installers,
it could be due to your OS not being compatible with the pre-built binaries I generated for you.
Reach me out, and I'll try to generate an installer for your specific operating system.
In any case don't hesitate to open an issue, and I will do my best to help you!
A big shout-out to all the contributors of Sniffnet (emoji key):
Cristiano 💻 🤔 |
Antoine Colombier |
Colin Delahunty |
AmadeusGraves 🌍 |
Charpy 🌍 |
Hubert 🌍 |
The graphical user interface has been realized with iced, a cross-platform GUI library for Rust focused on simplicity and type-safety
Last but not least, thanks to every single stargazer: all forms of support made it possible to keep improving Sniffnet!