{
  "@context": [
    "https://schema.org",
    {
      "nuanyue": "https://www.nuanyue.com/ns#"
    }
  ],
  "@type": "SoftwareApplication",
  "@id": "https://www.nuanyue.com/software/sniffnet/#software",
  "name": "Sniffnet",
  "description": "Free open-source network monitor for macOS that charts live traffic, names the programs using your bandwidth, and identifies the remote hosts, services and malware families behind each connection.",
  "url": "https://www.nuanyue.com/software/sniffnet/",
  "mainEntityOfPage": "https://www.nuanyue.com/software/sniffnet/",
  "operatingSystem": "macOS",
  "applicationCategory": "UtilitiesApplication",
  "publisher": {
    "name": "Giuliano Bellini",
    "url": "https://sniffnet.app/"
  },
  "sameAs": [
    "https://sniffnet.app/",
    "https://github.com/GyulyVGC/sniffnet"
  ],
  "softwareVersion": "1.5.1",
  "license": "MIT OR Apache-2.0",
  "offers": {
    "@type": "Offer",
    "price": "0",
    "priceCurrency": "USD"
  },
  "nuanyue:record": {
    "schemaVersion": 1,
    "id": "software:sniffnet",
    "slug": "sniffnet",
    "name": "Sniffnet",
    "type": "SoftwareApplication",
    "entityType": "network monitor",
    "description": "Free open-source network monitor for macOS that charts live traffic, names the programs using your bandwidth, and identifies the remote hosts, services and malware families behind each connection.",
    "shortDescription": "Free open-source traffic monitor with live charts and host identification.",
    "answer": "Sniffnet watches what your Mac sends and receives over the network. It reads traffic from a network adapter you choose, draws live charts of how much is moving, and then explains what that traffic is: which programs are using the bandwidth, which remote hosts are involved, where those hosts are, and which of more than six thousand known services, protocols, trojans and worms a connection matches. It is aimed at people who find packet analysers intimidating — the project lists ease of use as one of its cornerstones — and it ships in 26 languages. It observes rather than blocks: it can highlight a connection that matches an IP blacklist you import, but it is not a firewall.",
    "page": "https://www.nuanyue.com/software/sniffnet/",
    "dataUrl": "https://www.nuanyue.com/data/software/sniffnet.json",
    "categories": [
      "networking"
    ],
    "tags": [],
    "platform": [
      "macOS"
    ],
    "architecture": [],
    "featured": false,
    "pricing": "open-source",
    "pricingDescription": "Completely free and open-source software, dual-licensed under MIT or Apache-2.0. There is no paid tier and no account; the project asks for sponsorship through GitHub Sponsors to fund its continued development instead of charging for the application.",
    "license": "MIT OR Apache-2.0",
    "currentVersion": "1.5.1",
    "releaseDate": "2026-07-22",
    "openSource": true,
    "website": "https://sniffnet.app/",
    "documentation": "https://github.com/GyulyVGC/sniffnet/wiki",
    "github": "https://github.com/GyulyVGC/sniffnet",
    "download": "https://github.com/GyulyVGC/sniffnet/releases/latest/download/Sniffnet_macOS_AppleSilicon.dmg",
    "developer": {
      "name": "Giuliano Bellini",
      "website": "https://sniffnet.app/"
    },
    "icon": "/apps/sniffnet.png",
    "features": [
      "Choose which network adapter to inspect",
      "Filters that narrow the traffic being observed",
      "Import and export capture reports as PCAP files",
      "Overall statistics for your internet traffic",
      "Real-time charts of traffic intensity",
      "Identification of connections inside the local network",
      "Geographic location of remote hosts",
      "Domain name and ASN lookup for the hosts you exchange traffic with",
      "Recognition of more than 6000 upper-layer services, protocols, trojans and worms",
      "A per-program view of which applications are using network bandwidth",
      "Favourites for network hosts, services and programs",
      "Keeps watching the network while the window is minimised",
      "Real-time search and inspection of each connection",
      "Custom notifications triggered by defined network events",
      "Custom IP blacklists that highlight potentially dangerous connections",
      "Themes, including support for custom themes",
      "Interface translated into 26 languages",
      "Written entirely in Rust"
    ],
    "useCases": [
      "Finding out which application is saturating your connection",
      "Seeing which countries and organisations your machine is exchanging data with",
      "Checking whether any connection matches an address on a malicious-IP list",
      "Capturing traffic to a PCAP file so another tool can analyse it later"
    ],
    "formats": [],
    "integrations": [],
    "pros": [
      {
        "text": "Recognises more than 6000 upper-layer services, protocols, trojans and worms, so a connection can be named rather than shown as a bare address.",
        "status": "developer-stated",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Shows which programs are using network bandwidth, which answers the usual 'what is eating my connection' question directly.",
        "status": "developer-stated",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Resolves the domain name, ASN and geographic location of the hosts you are exchanging traffic with.",
        "status": "developer-stated",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Imports custom IP blacklists to highlight potentially dangerous connections.",
        "status": "developer-stated",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Imports and exports capture reports as PCAP files, so traffic can be handed to another analyser.",
        "status": "developer-stated",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Free and open source, dual-licensed under MIT or Apache-2.0, with the full source published on GitHub.",
        "status": "verified",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Runs on macOS without installing any extra system dependencies, unlike the Windows and Linux builds.",
        "status": "verified",
        "source": "documentation",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Publishes a separate Apple silicon disk image alongside the Intel one for every release.",
        "status": "verified",
        "source": "repository",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "The interface is translated into 26 languages by native speakers.",
        "status": "verified",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      }
    ],
    "cons": [
      {
        "text": "Observes traffic but cannot block it; the IP blacklist highlights a suspicious connection rather than preventing it.",
        "status": "derived",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Analysing a network adapter on macOS requires running the application with administrator privileges.",
        "status": "verified",
        "source": "documentation",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "Summarises traffic rather than dissecting individual packets field by field, so it does not replace a protocol analyser such as Wireshark.",
        "status": "derived",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "text": "The minimum macOS version is not stated in the sources Nuanyue tracks, so the oldest supported release is unknown.",
        "status": "editorially-reviewed"
      }
    ],
    "whoIsItFor": [
      "Mac users who want to see what their network is doing without learning a packet analyser",
      "Anyone who prefers an open-source tool they can read, build and audit themselves"
    ],
    "notFor": [
      "Anyone who needs to block or filter traffic — Sniffnet observes connections, it does not control them",
      "Users who need field-by-field dissection of individual packets, which is what a protocol analyser is for"
    ],
    "limitations": [
      "It monitors traffic rather than controlling it; it is not a firewall and cannot stop a connection being made",
      "Reading a network adapter on macOS requires running the application with administrator privileges",
      "It summarises traffic rather than dissecting packets field by field, so it does not replace a protocol analyser",
      "The minimum macOS version for the current release is not stated in the sources Nuanyue tracks"
    ],
    "firstUse": {
      "installation": {
        "value": "Downloaded as a disk image from the project's GitHub releases, with separate builds published for Apple silicon and Intel.",
        "status": "verified",
        "source": "repository",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      "firstLaunch": {
        "value": "On macOS the application has to be run with administrator privileges, because reading a network adapter requires them; there is no account, licence key or sign-in.",
        "status": "verified",
        "source": "documentation",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      "systemIntegration": {
        "value": "You pick a network adapter to inspect and Sniffnet reads traffic from it, while also identifying devices on the local network and continuing to watch while minimised.",
        "status": "developer-stated",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      "appleSilicon": {
        "value": true,
        "status": "verified",
        "source": "repository",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      }
    },
    "updates": [],
    "faq": [
      {
        "question": "How much does Sniffnet cost?",
        "answer": "Nothing. It is free and open-source software, dual-licensed under MIT or Apache-2.0. There is no paid tier and no account; the project asks for sponsorship through GitHub Sponsors to fund its continued development instead of charging for the application.",
        "status": "verified",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "question": "Does Sniffnet run on Apple silicon Macs?",
        "answer": "Yes. The project publishes a separate Apple silicon disk image alongside the Intel build for every release, so there is a native download for M-series Macs.",
        "status": "verified",
        "source": "repository",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "question": "Can Sniffnet block a connection?",
        "answer": "No. It is a monitoring tool: it shows what is happening and can highlight connections matching an IP blacklist you import, but it does not act as a firewall and cannot stop traffic from being sent.",
        "status": "derived",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "question": "Does Sniffnet need extra dependencies on macOS?",
        "answer": "No. The project's manual states that macOS natively has all the dependencies needed to build and run Sniffnet, unlike Windows which requires Npcap and Linux which needs libpcap. On macOS you do still have to run the application with administrator privileges to analyse a network adapter.",
        "status": "verified",
        "source": "documentation",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "question": "How does Sniffnet differ from Wireshark?",
        "answer": "Sniffnet is built around being approachable: it presents live charts, per-program bandwidth and named hosts rather than raw packets. Wireshark is a protocol analyser that dissects individual packets in detail. Sniffnet can export PCAP files if you later need that depth, and the two are often used together.",
        "status": "derived",
        "source": "official",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      }
    ],
    "relationships": [
      {
        "target": "wireshark",
        "type": "similar",
        "reason": "Both capture network traffic on a Mac, but Wireshark is a protocol analyser that dissects individual packets for experts while Sniffnet summarises traffic into charts, named hosts and per-program bandwidth for anyone.",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "target": "little-snitch",
        "type": "complements",
        "reason": "Little Snitch decides which connections the Mac is allowed to make, and Sniffnet shows what those connections are actually doing once they exist.",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      },
      {
        "target": "lulu",
        "type": "complements",
        "reason": "Both are free and open-source network security tools for macOS, but LuLu blocks outbound connections while Sniffnet only observes and reports them.",
        "verifiedAt": "2026-10-05T00:00:00.000Z"
      }
    ],
    "sources": [
      {
        "id": "sniffnet:official",
        "type": "official_website",
        "url": "https://sniffnet.app/",
        "title": "Sniffnet — official website",
        "trustLevel": "B",
        "accessedAt": null
      },
      {
        "id": "sniffnet:developer",
        "type": "developer",
        "url": "https://sniffnet.app/",
        "title": "Giuliano Bellini — developer website",
        "trustLevel": "B",
        "accessedAt": null
      },
      {
        "id": "sniffnet:documentation",
        "type": "documentation",
        "url": "https://github.com/GyulyVGC/sniffnet/wiki",
        "title": "Sniffnet — documentation",
        "trustLevel": "C",
        "accessedAt": null
      },
      {
        "id": "sniffnet:repository",
        "type": "github",
        "url": "https://github.com/GyulyVGC/sniffnet",
        "title": "Sniffnet — source repository",
        "trustLevel": "D",
        "accessedAt": null
      }
    ],
    "claims": [
      {
        "id": "software:sniffnet.isA",
        "subject": "software:sniffnet",
        "predicate": "isA",
        "value": "network monitor",
        "status": "editorially-reviewed",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.supportsPlatform",
        "subject": "software:sniffnet",
        "predicate": "supportsPlatform",
        "value": [
          "macOS"
        ],
        "status": "verified",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.officialWebsite",
        "subject": "software:sniffnet",
        "predicate": "officialWebsite",
        "value": "https://sniffnet.app/",
        "status": "verified",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.listedInCategory",
        "subject": "software:sniffnet",
        "predicate": "listedInCategory",
        "value": [
          "networking"
        ],
        "status": "editorially-reviewed",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.pricingModel",
        "subject": "software:sniffnet",
        "predicate": "pricingModel",
        "value": "Open source",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.developedBy",
        "subject": "software:sniffnet",
        "predicate": "developedBy",
        "value": "Giuliano Bellini",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:developer",
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.ownership",
        "subject": "software:sniffnet",
        "predicate": "ownership",
        "value": "Third-party product — not published by Nuanyue",
        "status": "editorially-reviewed",
        "sourceIds": [],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.isOpenSource",
        "subject": "software:sniffnet",
        "predicate": "isOpenSource",
        "value": true,
        "status": "verified",
        "sourceIds": [
          "sniffnet:repository",
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.licensedUnder",
        "subject": "software:sniffnet",
        "predicate": "licensedUnder",
        "value": "MIT OR Apache-2.0",
        "status": "verified",
        "sourceIds": [
          "sniffnet:repository",
          "sniffnet:documentation",
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.currentVersion",
        "subject": "software:sniffnet",
        "predicate": "currentVersion",
        "value": "1.5.1",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.hasFeature",
        "subject": "software:sniffnet",
        "predicate": "hasFeature",
        "value": [
          "Choose which network adapter to inspect",
          "Filters that narrow the traffic being observed",
          "Import and export capture reports as PCAP files",
          "Overall statistics for your internet traffic",
          "Real-time charts of traffic intensity",
          "Identification of connections inside the local network",
          "Geographic location of remote hosts",
          "Domain name and ASN lookup for the hosts you exchange traffic with",
          "Recognition of more than 6000 upper-layer services, protocols, trojans and worms",
          "A per-program view of which applications are using network bandwidth",
          "Favourites for network hosts, services and programs",
          "Keeps watching the network while the window is minimised",
          "Real-time search and inspection of each connection",
          "Custom notifications triggered by defined network events",
          "Custom IP blacklists that highlight potentially dangerous connections",
          "Themes, including support for custom themes",
          "Interface translated into 26 languages",
          "Written entirely in Rust"
        ],
        "status": "editorially-reviewed",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.usedFor",
        "subject": "software:sniffnet",
        "predicate": "usedFor",
        "value": [
          "Finding out which application is saturating your connection",
          "Seeing which countries and organisations your machine is exchanging data with",
          "Checking whether any connection matches an address on a malicious-IP list",
          "Capturing traffic to a PCAP file so another tool can analyse it later"
        ],
        "status": "editorially-reviewed",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.audienceFor",
        "subject": "software:sniffnet",
        "predicate": "audienceFor",
        "value": [
          "Mac users who want to see what their network is doing without learning a packet analyser",
          "Anyone who prefers an open-source tool they can read, build and audit themselves"
        ],
        "status": "editorially-reviewed",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.audienceNotFor",
        "subject": "software:sniffnet",
        "predicate": "audienceNotFor",
        "value": [
          "Anyone who needs to block or filter traffic — Sniffnet observes connections, it does not control them",
          "Users who need field-by-field dissection of individual packets, which is what a protocol analyser is for"
        ],
        "status": "editorially-reviewed",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.limitation",
        "subject": "software:sniffnet",
        "predicate": "limitation",
        "value": [
          "It monitors traffic rather than controlling it; it is not a firewall and cannot stop a connection being made",
          "Reading a network adapter on macOS requires running the application with administrator privileges",
          "It summarises traffic rather than dissecting packets field by field, so it does not replace a protocol analyser",
          "The minimum macOS version for the current release is not stated in the sources Nuanyue tracks"
        ],
        "status": "editorially-reviewed",
        "sourceIds": [],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.advantage.0",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Recognises more than 6000 upper-layer services, protocols, trojans and worms, so a connection can be named rather than shown as a bare address.",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.1",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Shows which programs are using network bandwidth, which answers the usual 'what is eating my connection' question directly.",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.2",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Resolves the domain name, ASN and geographic location of the hosts you are exchanging traffic with.",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.3",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Imports custom IP blacklists to highlight potentially dangerous connections.",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.4",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Imports and exports capture reports as PCAP files, so traffic can be handed to another analyser.",
        "status": "developer-stated",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.5",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Free and open source, dual-licensed under MIT or Apache-2.0, with the full source published on GitHub.",
        "status": "verified",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.6",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Runs on macOS without installing any extra system dependencies, unlike the Windows and Linux builds.",
        "status": "verified",
        "sourceIds": [
          "sniffnet:documentation"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.7",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "Publishes a separate Apple silicon disk image alongside the Intel one for every release.",
        "status": "verified",
        "sourceIds": [
          "sniffnet:repository"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.advantage.8",
        "subject": "software:sniffnet",
        "predicate": "advantage",
        "value": "The interface is translated into 26 languages by native speakers.",
        "status": "verified",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.drawback.0",
        "subject": "software:sniffnet",
        "predicate": "drawback",
        "value": "Observes traffic but cannot block it; the IP blacklist highlights a suspicious connection rather than preventing it.",
        "status": "derived",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.drawback.1",
        "subject": "software:sniffnet",
        "predicate": "drawback",
        "value": "Analysing a network adapter on macOS requires running the application with administrator privileges.",
        "status": "verified",
        "sourceIds": [
          "sniffnet:documentation"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.drawback.2",
        "subject": "software:sniffnet",
        "predicate": "drawback",
        "value": "Summarises traffic rather than dissecting individual packets field by field, so it does not replace a protocol analyser such as Wireshark.",
        "status": "derived",
        "sourceIds": [
          "sniffnet:official"
        ],
        "lastVerified": "2026-10-05"
      },
      {
        "id": "software:sniffnet.drawback.3",
        "subject": "software:sniffnet",
        "predicate": "drawback",
        "value": "The minimum macOS version is not stated in the sources Nuanyue tracks, so the oldest supported release is unknown.",
        "status": "editorially-reviewed",
        "sourceIds": [],
        "lastVerified": null
      },
      {
        "id": "software:sniffnet.supportsAppleSilicon",
        "subject": "software:sniffnet",
        "predicate": "supportsAppleSilicon",
        "value": true,
        "status": "verified",
        "sourceIds": [
          "sniffnet:repository"
        ],
        "lastVerified": "2026-10-05"
      }
    ],
    "lastUpdated": "2026-10-07T00:00:00.000Z",
    "lastReviewedAt": null
  }
}