[HN Gopher] Show HN: Network Monitor - a GUI to spot anomalous c...
___________________________________________________________________
Show HN: Network Monitor - a GUI to spot anomalous connections on
your Linux
A real-time network connection monitoring tool built with Rust and
GTK4, displaying active connections with live I/O statistics in a
modern graphical interface. https://github.com/grigio/network-
monitor
Author : grigio
Score : 72 points
Date : 2025-11-24 09:30 UTC (5 days ago)
| SlavikCA wrote:
| That screenshot / video on README page is mostly unreadable.
| Can't get anything out of it.
| voodooEntity wrote:
| Same for me.
|
| What info does it show more than a:
|
| "netstat -tulpn"
|
| Wrote myself a script years ago that basically loops netstat
| -tulpn watch like for the same purpose - just wondering if your
| tool shows me more than that.
| Simon-curtis wrote:
| modern graphical interface, for a start
| voodooEntity wrote:
| I was asking which information it shows not what output it
| uses to display that information....
| hamburglar wrote:
| Come on, now. You can see that it supports today's most
| critical feature: it has dark mode _and_ light mode.
|
| /s
| noir_lord wrote:
| If you live in the terminal it's all dark mode*
|
| * unless you are one of those weirdo's who has a black on
| white terminal in which case you should be on a watch list
| (/s in case wasn't immediately obvious).
| hamburglar wrote:
| I am exactly that kind of weirdo, but then again I've been
| reading black on white books for my entire life and I never
| thought to complain about it.
| IshKebab wrote:
| This app is clearly a demonstration of GTK4's light/dark
| transition animation. Looks like it works perfectly to me!
| mordechai9000 wrote:
| Nice work!
|
| I do want to say, I don't like having to rely on scraping ss
| output. But that's not a comment on this project - I have done
| the exact same thing. It just proved to be the most expedient way
| given the constraints I was under. I suspect there is a lot of
| devops and CI/CD code out there that relies on the output format
| of ss. My concern is that parsing text intended for human
| readability and not machine processing is brittle and prone to
| failure due to unforeseen circumstances, or a package upgrade
| that changes the behavior.
| mbana wrote:
| I was going to say the same thing.
|
| I really like the eBPF approach as pointed out to by the other
| comments. I feel like this is the ideal approach, please
| correct me if I'm wrong.
|
| A callback based approach as opposed to (constantly) polling
| the output of some command is ideal.
| WD-42 wrote:
| Nice work. I've been writing an app using the same stack. The
| gtk-rs bindings are actually pretty productive once you get used
| to it! And it's so fast.
| mroche wrote:
| Cool project! As a more advanced form, I _think_ it should be
| possible to get all this information via eBPF rather than ss
| output and scraping /proc.
|
| Food for thought!
| rlmp_89 wrote:
| https://github.com/pythops/oryx
|
| -> voila!
| mentalgear wrote:
| BTW: This is also a TUI - much preferred !
| arcanemachiner wrote:
| The OP's project shows process names, which I do not see in
| this program.
| oneshtein wrote:
| eBPF doesn't work on locked down kernels (stock kernels in
| Secure Boot mode).
| pm2222 wrote:
| eBPF/XDP is nice and hard to use. Packet capture is so common
| that I wish that there were a simpler way like pcap.
| rlmp_89 wrote:
| https://github.com/pythops/oryx
| jrm4 wrote:
| Fantastic, more of this. I don't know if I'm just missing it or
| what, but I'd love a GUI thing that showed all the devices on my
| network maybe even with a graph view.
|
| I'm using an Eero router out of laziness and even it has some
| features here that I'd like to see more of in polished "home-
| user" style network tools; especially since it seems as if more
| are getting into the "homelab"/"selfhosted" thing.
| bongodongobob wrote:
| That's impossible to do reliably without using agents, SNMP, or
| some other kind of communication protocol that you'll have to
| set up on each device. If you're ok with that, use SNMP. If you
| want topology, you'll have to have an agent that logs into all
| your networking gear and parses the configs.
| 0134340 wrote:
| Do you mean something like nmap's network topolgy view?
| https://nmap.org/book/zenmap-topology.html
|
| Just for visualizing network topology on Linux, there's a lot
| of tools.
| jdthedisciple wrote:
| Is there a version of this for the CLI?
| dwattttt wrote:
| bandwhich[0] is a recent one I'm familiar with
|
| [0] https://github.com/imsnif/bandwhich
| XiS wrote:
| So nethogs, but with a gui?
| lone-cloud wrote:
| The code is partly refined AI generated slop and the UX is
| lacking. The functionality is very basic and needs to be more
| thoroughly tested. This type of project is half a work day tops
| for a senior+ dev to create with agentic coding, so in its
| current state, what's even the point of showing it off?
| neilv wrote:
| Thanks especially for using GTK with Rust to do this. We need to
| keep desktop Linux GUI libraries alive and viable (as an
| alterative to Web site GUI frameworks, Electron apps with Web
| frameworks, and proprietary mobile app platforms).
___________________________________________________________________
(page generated 2025-11-29 23:00 UTC)