imsnif/bandwhich
Bandwhich
bandwhich is a command-line network utility and terminal bandwidth monitor designed for real-time traffic analysis. It functions as a process-based traffic tracker that links network bandwidth usage directly to the system processes and remote hosts responsible for the data transfer.
The tool provides a terminal user interface for monitoring active connections and identifying data-consuming applications. It performs background reverse DNS lookups to associate remote IP addresses with human-readable hostnames and tracks cumulative data utilization over the duration of a capture session.
Its broader capabilities include network traffic filtering to isolate specific connections and the export of raw bandwidth metrics into machine-readable, delimited formats for external analysis.
Features
- Network Traffic Analyzers - Provides a terminal-based network traffic analyzer that monitors active connections and identifies consuming applications.
- Process-to-Socket Mappings - Correlates network sockets with system process IDs using the proc filesystem for traffic attribution.
- Packet Capture Engines - Implements a packet-capture engine that reads raw network traffic directly from the kernel.
- Bandwidth Monitors - Implements a real-time terminal bandwidth monitor that tracks utilization per application and remote host.
- Network Traffic Analysis - Filters and isolates network data to identify the applications or remote IP addresses consuming the most bandwidth.
- Process Activity Trackers - Tracks network bandwidth usage by attributing it directly to the responsible system processes.
- Real-Time Network Monitors - Tracks real-time network utilization and attributes traffic to specific processes and remote hostnames.
- Cumulative - Calculates the total cumulative data transferred over the duration of a capture session.
- DNS Tools - Captures and displays DNS queries using the system default or a specified DNS server.
- Bandwidth Auditing - Collects raw bandwidth metrics and cumulative data transfer totals for historical analysis.
- DNS Query Monitoring - Captures DNS queries and performs reverse lookups to associate remote IP addresses with hostnames.
- Network Utilities - Functions as a lightweight command-line utility for monitoring data transfer rates.
- Reverse DNS Resolution - Performs background reverse DNS lookups to resolve remote IP addresses into human-readable hostnames.
- Traffic Filtering - Allows restricting displayed traffic to specific processes, connections, or IP addresses to isolate data.
- Metric Redraw Cycles - Updates a terminal user interface by periodically refreshing a buffer of sorted network utilization metrics.
- Networking and Internet - Network utilization monitor categorized by process.
- System Dashboards - Visualize terminal bandwidth utilization.
- System Utilities - Terminal bandwidth utilization monitor.
- Internet Speedtest - Track bandwidth utilization by process.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
