picosnitch
- See which processes make remote network connections
- Logs and config are stored in ~/.config/picosnitch/snitch.json and updated every 10 minutes or on SIGTERM
- Polls connections and processes at 0.2s intervals by default
- Optionally sniff all traffic for new connections using Scapy for improved reliability
- Inspired by programs such as:
- GlassWire
- Little Snitch
- OpenSnitch
- simplewall
- tinysnitch
- picosnitch only provides monitoring and notification capabilities, see the above programs for features such as a GUI, bandwidth tracking, firewall configuration, or filtering
getting started
linux
- install from PyPI with
pip3 install picosnitch --upgrade --user - optionally install Scapy
- you should be able to just install scapy or python3-scapy from your distribution
- https://scapy.readthedocs.io/en/latest/installation.html
- run daemon with
picosnitch - or run daemon as root to use Scapy
sudo -E python3 -m picosnitch
windows
- install from PyPI with
pip install picosnitch --upgrade - optionally install Scapy
- run with
picosnitch - make sure you're running as an administrator if using Scapy
building from source
- install from source using python 3 with
python setup.py install --user - required dependencies (installed automatically from PyPI on setup if not already present)
filelock plyer psutil python-daemon - optional dependency (requires manual installation)
scapy - picosnitch.py can also be run directly
configuration
- stored in ~/.config/picosnitch/snitch.json
- terminate picosnitch if it is currently running before making any edits otherwise your changes will be lost
{
"Config": {
"Polling interval": 0.2, # float in seconds
"Remote address unlog": [80, "firefox"], # list of process names (str) or ports (int) to omit addresses
"Use pcap": false, # bool, requires Scapy to be installed
"Write interval": 600 # how often to write this file in seconds
},
"Errors": [], # Log of errors by time
"Latest Entries": [], # Log of entries by time
"Names": {}, # Log of process names and respective executable(s)
"Processes": {}, # Log of processes by executable
"Remote Addresses": {} # Log of remote addresses
}
1 maintainer
Metadata
1 maintainer
Release files for picosnitch 0.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| picosnitch-0.2.0.tar.gz | 6.5 kB | Without provenance | Details |
Release files / picosnitch-0.2.0.tar.gz
| Download URL | picosnitch-0.2.0.tar.gz |
|---|---|
| Size | 6.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c14aed7a8312cfc543750a248e63ec9c2ef1163e6cfe9e941d7867bfab1ea37e
|
|
BLAKE2b-256 checksum How to use checksums |
e52f52eb52de14eab151b32cb6e5c2a0e52512cca72b2c241a89ca3e1f750374
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.2.0 pkginfo/1.5.0.1 requests/2.24.0 setuptools/44.0.0 requests-toolbelt/0.9.1 tqdm/4.48.0 CPython/3.8.2
|
Security for picosnitch 0.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
