Sniffnet 1.5 Reveals Applications Behind Network Traffic 🔗
Latest release adds program identification, custom blacklists and adapter preview charts
Sniffnet 1.5.0 now identifies which installed programs and applications generate each network connection, addressing a longstanding gap in consumer-facing traffic analysis.
Sniffnet 1.5.0 now identifies which installed programs and applications generate each network connection, addressing a longstanding gap in consumer-facing traffic analysis. Built in Rust with the newly adopted Iced 0.14 GUI framework, the cross-platform tool presents this data alongside real-time statistics, geographical host mapping, ASN resolution and protocol identification for more than 6,000 services.
The update adds preview charts that visualise traffic volume across available network adapters before capture begins. Users can now maintain custom IP blacklists, persist favorites that include services and programs, and query the configuration file path through a new --config_path command-line flag. PCAP import and export remain available for forensic workflows, while notifications and minimised monitoring continue to operate without requiring constant screen focus.
These changes tighten the feedback loop between observed traffic and the processes responsible for it. Security teams gain immediate visibility into unexpected application behaviour; administrators can correlate bandwidth spikes with specific software rather than IP addresses alone. The migration to Iced 0.14 also improves interface responsiveness across Linux, macOS and Windows.
The release demonstrates steady maturation of a native GUI packet analyser that prioritises clarity over raw protocol dissection.
- Security teams identifying rogue applications sending outbound traffic
- Administrators correlating bandwidth usage with specific installed programs
- Developers debugging which services cause unexpected network connections
- Wireshark - offers deeper packet dissection but lacks native app-to-traffic mapping
- ntopng - delivers web-based monitoring at scale without Sniffnet's desktop simplicity
- tcpdump - provides command-line capture with no graphical charts or host geolocation