A reasonably reliable traffic per application monitor using BPF
picosnitch helps you protect your security and privacy by "snitching" on anything that connects to the internet, letting you know when, how much data was transferred, and to where. It uses BPF to monitor network traffic per application, and per parent to cover those that just call others. It also hashes every executable, and will complain if some mischievous program is giving it trouble.
A reasonably reliable traffic per application monitor using BPF launched on April 25, 2022 with 23 votes, #834 of 2,974 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 4 years on.
In plain words
Picosnitch is a network monitoring tool that tracks internet connections made by applications on a user's system. It records when connections occur, how much data is transferred, and destination addresses using BPF technology to monitor traffic per application and parent processes. The tool also hashes executables to detect unauthorized modifications. It is designed for users concerned with security and privacy who want visibility into what their programs are communicating over the network.
written from the facts on this page · September 2026
From the sources
Monitor network traffic per executable. Contribute to elesiuta/picosnitch development by creating an account on GitHub.
Does a similar job
all alternatives →
Picosnitch – a reliable and lightweight security/privacy tool for Linux2022 · elesiuta.github.io · ▲92Per-executable network bandwidth monitoring for Linux
Snitch – my Mac talked to 347 servers in one idle hour, so I built this3d ago · github.com · ▲12Real-time network traffic visualizer — see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic réseau en temps réel, 100% local. - aixisstudio/Snitch
Tailsnitch – A security auditor for TailscaleJan 2026 · github.com · ▲280A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations. - Adversis/tailsnitch
Pico: An open-source Ngrok alternative built for production traffic2024 · github.com · ▲244Pico is an open-source alternative to Ngrok. Unlike most other open-source tunnelling solutions, Pico is designed to serve production traffic and be simple to host (particularly on Kubernetes). Upstream services connect to Pico and register endpoints. Pico will then route requests for an endpoint to a registered upstream service via its outbound-only connection. This means you can expose your services without opening a public port. Pico runs as a cluster of nodes in order to be fault tolerant, scale horizontally and support zero downtime deployments. It is also easy to host, such as a…
Stratoshark, a sibling application to Wireshark2025 · stratoshark.org · ▲321Hi all, I'm excited to announce Stratoshark, a sibling application to Wireshark that lets you capture and analyze process activity (system calls) and log messages in the same way that Wireshark lets you capture and analyze network packets. If you would like to try it out you can download installers for Windows and macOS and source code for all platforms at https://stratoshark.org. AMA: I'm the goofball whose name is at the top of the "About" box in both applications, and I'll be happy to answer any questions you might have.
More growth this month
the category →
wallhop is a free paywall bypass. Paste any article link to read it without paywall popups, ads or clutter. No signup, no extension. A simple 12ft.io alternative.
Growth · 13d ago · wallhop.io
Source: Show HN post ↗
Launched alongside, April 2022
the whole month →
Hi HN community, I’m Zach, founder and CEO of Warp, and am excited to show you Warp, a fast Rust-based terminal that’s easy to use and built for teams. As of today, Warp is in public beta and any Mac user can download it. It works with bash, zsh, and fish. The terminal’s teletype-like interface has made it hard for the CLI to thrive. After 20 years of programming, I still find it hard to copy a command’s output; I always forget how to use `tar`; and I always have to relearn how to move my cursor. To fix fundamental accessibility issues, I believe we need to start innovating on the terminal,…
AI · 2022 · warp.dev
Slow Social is a online social network built for growing and sustaining friendships.
Life & fun · 2022 · slowsocial.us
Implement scanyourpdf.com in JavaScript. No backend servers needed.
Life & fun · 2022 · lookscanned.io
