14 ms·

I wish to see this also for macOS, iOS and Android.

fsflover 4y ago
https://news.ycombinator.com/item?id=26639261 https://news.ycombinator.com/item?id=26639261
dijit 4y ago
Aside from fsflovers link; there's a fantastic (paid) firewall software called littlesnitch. You can use it to watch every process send network traffic, you can even collect samples of the traffic and plot it on a map: https://www.obdev.at/products/littlesnitch/index.html https://www.obdev.at/products/littlesnitch/index.html (not affiliated, just a happy customer; it's one of the few things I like the mac ecosystem for.. there's attempts to port it to linux with https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch; but it's not as polished of course)
- beagle3 4y ago
  LittleSnitch was helpful on Mojave in this regard. However, since Catalina, there are literally hundreds of connections per day from "nsurlsessiond" and "gateway.icloud.com" (and a lot more), with no way to figure out what it is they are uploading/downloading/checking. That happens whether or not you are logged into icloud/facetime/messages at the same time, or not. Anyone aware of a way to figure out what nsurlesssiond is downloading/uploading in the background?
- joekrill 4y ago
  I've been using this for years and love it, too. But didn't Apple recently make some change to macOS recently that allows many "system" processes to bypass this?
  - dijit 4y ago
    Seems like it: https://news.ycombinator.com/item?id=24838816 https://news.ycombinator.com/item?id=24838816 Concerning.
- Grimburger 4y ago
  On Android NetGuard can do the same monitoring, it's a great open source app but I do sometimes wonder what the chance is of some Android system calls bypassing the local vpn firewall it sets up. https://netguard.me/ https://netguard.me/
- schleck8 4y ago
  The Linux equivalent is called OpenSnitch, works great. It also does not cost 50 euros
- heresie-dabord 4y ago
  Friend, your link ends with a semi-colon. https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch
  - dijit 4y ago
    That's awful, I'm sorry. Thank you for fixing it, I can't edit the post now.
stevenjgarner 4y ago
and other nix distros like both Ubuntu Desktop and Server.
- zaggynl 4y ago
  There's https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch
  - heresie-dabord 4y ago
    Linux has lsof that can show connexions. Here's a config generator for conky that demonstrates the usage: https://github.com/viviparous/plonky https://github.com/viviparous/plonky
decasteve 4y ago
Last time I used macOS, 2-3 years ago, it was in constant communication with Akamai servers. Blocking some of those hosts to prevent it from doing so would render the system unresponsive when trying to launch an application. Note: this anecdote may no longer be current. I’m not sure what changes Apple might have made since I tested this.
- fsflover 4y ago
  https://news.ycombinator.com/item?id=25074959 https://news.ycombinator.com/item?id=25074959
callmeal 4y ago
MacOs: https://sneak.berlin/20210202/macos-11.2-network-privacy/ https://sneak.berlin/20210202/macos-11.2-network-privacy/ The desktop appeared, and the system was connected to a dedicated wi-fi network for the purpose, DeviceUnderTest. 60 seconds or so of “no activity” simply staring at the desktop elapsed, and the system was rebooted, automatically reconnecting to the test network. Wi-Fi was then disabled. ... In this few minutes, the system generated 38 megabytes of network traffic.

https://news.ycombinator.com/item?id=26639261 https://news.ycombinator.com/item?id=26639261

Aside from fsflovers link; there's a fantastic (paid) firewall software called littlesnitch. You can use it to watch every process send network traffic, you can even collect samples of the traffic and plot it on a map: https://www.obdev.at/products/littlesnitch/index.html https://www.obdev.at/products/littlesnitch/index.html (not affiliated, just a happy customer; it's one of the few things I like the mac ecosystem for.. there's attempts to port it to linux with https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch; but it's not as polished of course)

beagle3 4y ago
LittleSnitch was helpful on Mojave in this regard. However, since Catalina, there are literally hundreds of connections per day from "nsurlsessiond" and "gateway.icloud.com" (and a lot more), with no way to figure out what it is they are uploading/downloading/checking. That happens whether or not you are logged into icloud/facetime/messages at the same time, or not. Anyone aware of a way to figure out what nsurlesssiond is downloading/uploading in the background?
joekrill 4y ago
I've been using this for years and love it, too. But didn't Apple recently make some change to macOS recently that allows many "system" processes to bypass this?
- dijit 4y ago
  Seems like it: https://news.ycombinator.com/item?id=24838816 https://news.ycombinator.com/item?id=24838816 Concerning.
Grimburger 4y ago
On Android NetGuard can do the same monitoring, it's a great open source app but I do sometimes wonder what the chance is of some Android system calls bypassing the local vpn firewall it sets up. https://netguard.me/ https://netguard.me/
schleck8 4y ago
The Linux equivalent is called OpenSnitch, works great. It also does not cost 50 euros
heresie-dabord 4y ago
Friend, your link ends with a semi-colon. https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch
- dijit 4y ago
  That's awful, I'm sorry. Thank you for fixing it, I can't edit the post now.

stevenjgarner 4y ago

and other nix distros like both Ubuntu Desktop and Server.

zaggynl 4y ago
There's https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch
- heresie-dabord 4y ago
  Linux has lsof that can show connexions. Here's a config generator for conky that demonstrates the usage: https://github.com/viviparous/plonky https://github.com/viviparous/plonky

decasteve 4y ago

Last time I used macOS, 2-3 years ago, it was in constant communication with Akamai servers. Blocking some of those hosts to prevent it from doing so would render the system unresponsive when trying to launch an application. Note: this anecdote may no longer be current. I’m not sure what changes Apple might have made since I tested this.

fsflover 4y ago
https://news.ycombinator.com/item?id=25074959 https://news.ycombinator.com/item?id=25074959

callmeal 4y ago

MacOs: https://sneak.berlin/20210202/macos-11.2-network-privacy/ https://sneak.berlin/20210202/macos-11.2-network-privacy/ The desktop appeared, and the system was connected to a dedicated wi-fi network for the purpose, DeviceUnderTest. 60 seconds or so of “no activity” simply staring at the desktop elapsed, and the system was rebooted, automatically reconnecting to the test network. Wi-Fi was then disabled. ... In this few minutes, the system generated 38 megabytes of network traffic.