snitch

snitch is a modern alternative to ss and netstat that makes inspecting network connections straightforward and visual. Whether you're troubleshooting connectivity issues, monitoring active ports, or tracing which processes are communicating across the network, snitch provides both an interactive terminal UI and command-line output formats.

Key capabilities include:

• Live monitoring with configurable refresh intervals to watch connections in real-time
• Flexible filtering by protocol (TCP/UDP), connection state (listening/established), IP version (IPv4/IPv6), and custom key=value queries for PID, process name, port, or content matching
• Hostname and service name resolution with optional caching and numeric mode for raw IP addresses
• Multiple output formats including styled tables, plain text, JSON, and CSV for integration with other tools
• Interactive TUI with keyboard navigation, sorting, process watching, and connection details
• Customization through themes, keybindings, and configuration files that persist your view preferences between sessions

Developers, SREs, and system administrators benefit from snitch's ability to quickly identify what's listening on which ports, trace traffic back to specific processes, and monitor network activity without wrestling with complex command-line arguments. The tool works across Linux, macOS, and Docker environments with multiple installation methods including Homebrew, package managers, and direct binary downloads.