monitoring

The app dashboard: one program's complete network history Right-click a program in the Live tab and choose Open app dashboard. One window shows its traffic day by day, the hosts it talks to, who signed it and its live rate, even after it has closed. 3 min read Keep NetSecWall running 24/7: the background service and the tray The NetSecWall background service starts with Windows and keeps monitoring and enforcing blocks even when the window is closed or nobody is signed in. Without it, NetSecWall works while the app runs. 3 min read See which domains each app looks up Open the DNS tab to see every domain each program looked up, how many times, and when it first and last did. Encrypted DNS inside a browser is the one common case it can't see. 3 min read Filter the Live tab to find a process, port or threat Use the filter bar above the Live tab's list. Type a name, IP or port, or pick Trust, State, Activity or Min rate; every filter you set must match, and clearing them brings the rows back. 3 min read The IP dashboard and one-click IP investigation Double-click an address in the Live tab's By IP view to open its dashboard: location, network owner, threat status and the apps that used it. Right-click and choose Investigate IP to check it online. 3 min read The Live tab is empty or shows no transfer rates Usually a filter is still on, monitoring is paused, or the background service has stopped. Each cause leaves a visible sign in the status bar or the Live tab header, so check there first. 3 min read Group live traffic by IP, domain, country or category On the Live tab, change View from Apps to By IP, By Domain, By Country or By Category. Traffic is then totalled per destination, with the apps talking to each one listed underneath. 4 min read Network activity reports and exporting your history Choose Reports ▸ Last 7 days…, Last 30 days… or Custom range… for an HTML summary in your browser. For the raw rows, use Export… on the History tab to save CSV or JSON. 3 min read Find endpoints shared by several apps with the Relations graph The Relations tab draws your apps and the servers they talk to as a graph. Endpoints used by two or more apps turn orange, and connections to threat-feed addresses turn red. 3 min read See which apps are using the internet right now Open the Live tab in NetSecWall. Every program with an open connection gets a row showing its download and upload rate this second, and the busiest one sorts to the top. 3 min read Your first week with NetSecWall: a day-by-day plan Spend the first week learning what normal looks like: start in Monitor only or Learning, put names to the busy rows, answer the new-app pop-ups, then review the Events and Rules tabs. 3 min read Network history, search and reports The History tab keeps your PC's traffic per app and host, minute by minute, for as long as you like. Pick a time range, then filter by app, IP, domain, country or network owner. 3 min read How NetSecWall works: monitoring, blocking and the two engines NetSecWall watches every connection on your PC by reading Windows' own network events, and blocks only when you ask, through Windows Firewall rules, its own WFP packet filter, or both. 3 min read Live network monitoring: reading the Live tab The Live tab lists every program with a network connection open, with its connections, rates and remote hosts underneath. Expand a row to see what that program is talking to right now. 3 min read Reading a connection: ports, states, CDNs and countries Each connection row gives you a port, a socket state, a host name, a network owner and a country. Together they tell a browser fetching a font apart from something worth a closer look. 3 min read