How to see every connection your computer makes (live map, 100% local)

Description and use

Users can view all active network connections with context, distinguish normal from suspicious traffic, and share findings with the community.

Problem

Users cannot easily identify which applications on their computer are making network connections, where those connections go, and whether they are suspicious.

Outcome

Users can now see all active network connections with context, identify normal versus suspicious traffic, and share observations with the community.

Workflow

• Install Snitch via macOS release, Homebrew, Windows Npcap, or Docker
• Run Snitch backend (admin on Windows, demo mode if no admin)
• Open the UI to view the live graph and world map
• Observe connections per app, hostname, and location
• Use built‑in anomaly detection to flag suspicious patterns
• Suppress alerts for vetted patterns
• Share findings in the community discussion thread

Evidence

Snitch renders every connection as a live graph + world map

Source

Node = your machine at the center, lines to every remote endpoint

Source

Per-app attribution: the connection is drawn to the process that opened it

Source

The built-in anomaly detection watches for all of these automatically

Source