Monitoring & visibility
See every app’s connections live, and dig into history, DNS lookups, dashboards and reports.
See which apps are using the internet right now
Open the Live tab in NetSecWall. Every program with an open connection gets a row showing its download and upload rate this second, and the busiest one sorts to the top.
Live network monitoring: reading the Live tab
The Live tab lists every program with a network connection open, with its connections, rates and remote hosts underneath. Expand a row to see what that program is talking to right now.
Reading a connection: ports, states, CDNs and countries
Each connection row gives you a port, a socket state, a host name, a network owner and a country. Together they tell a browser fetching a font apart from something worth a closer look.
Network history, search and reports
The History tab keeps your PC's traffic per app and host, minute by minute, for as long as you like. Pick a time range, then filter by app, IP, domain, country or network owner.
Group live traffic by IP, domain, country or category
On the Live tab, change View from Apps to By IP, By Domain, By Country or By Category. Traffic is then totalled per destination, with the apps talking to each one listed underneath.
Filter the Live tab to find a process, port or threat
Use the filter bar above the Live tab's list. Type a name, IP or port, or pick Trust, State, Activity or Min rate; every filter you set must match, and clearing them brings the rows back.
The app dashboard: one program's complete network history
Right-click a program in the Live tab and choose Open app dashboard. One window shows its traffic day by day, the hosts it talks to, who signed it and its live rate, even after it has closed.
The IP dashboard and one-click IP investigation
Double-click an address in the Live tab's By IP view to open its dashboard: location, network owner, threat status and the apps that used it. Right-click and choose Investigate IP to check it online.
See which domains each app looks up
Open the DNS tab to see every domain each program looked up, how many times, and when it first and last did. Encrypted DNS inside a browser is the one common case it can't see.
Find endpoints shared by several apps with the Relations graph
The Relations tab draws your apps and the servers they talk to as a graph. Endpoints used by two or more apps turn orange, and connections to threat-feed addresses turn red.
Network activity reports and exporting your history
Choose Reports ▸ Last 7 days…, Last 30 days… or Custom range… for an HTML summary in your browser. For the raw rows, use Export… on the History tab to save CSV or JSON.