Picosnitch

A Linux daemon that monitors network traffic per executable and alerts when new programs connect.

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

About Picosnitch

Picosnitch watches which programs on a Linux machine use the network. It sends a notification whenever a new program connects or an executable is modified, and records bandwidth use broken down by executable, hash, parent process, domain, port or user over time.

Results are available through web and terminal interfaces, with GeoIP lookups for each connection. It can optionally check executable hashes against VirusTotal. It monitors rather than blocks, so it suits Linux users who want visibility of outgoing connections.

Strengths

  • Alerts on new connecting or modified programs
  • Per-executable bandwidth history with several breakdowns
  • Web and terminal interfaces with GeoIP lookups
  • Optional VirusTotal hash checks

Limitations

  • Linux only
  • Monitors and logs traffic but does not block it

Details

Pricing
FreeFree, with source code published on GitHub.
License
Open source, license not stated
Developer
elesiuta
Platforms
Linux
How it runs
Downloadable app
Account
Not required
Works offline
Yes
Best suited for
Linux users who want to see which programs are talking to the network
Last verified
Added
Provenance
Facts checked against the developer's own pages and store listings, 1 sources on file.

Alternatives to Picosnitch

Compare all

Software that can replace Picosnitch for an important use case, and what changes if you switch.

  • OpenSnitch

    An interactive application firewall for Linux that asks before letting any program make an outbound connection.

    OpenSnitch is an interactive Linux application firewall that prompts on and blocks new outbound connections, whereas Picosnitch only monitors and logs traffic.

  • Portmaster

    Shows every connection each application makes and lets you block any of them, with sensible defaults already set.

    Portmaster shows every application connection and can block them on Windows and Linux, with sensible defaults but a Windows kernel driver and paid history features.

Similar software

Related functionality, not necessarily a direct replacement.

Report a wrong fact or a dead link on this listing