
A free, open-source network monitor that lists every active socket and connection, grouped by the process responsible. Each entry shows addresses, ports, protocol, state, and bytes transferred, with a live filter box and optional hiding of Apple processes. Results export to JSON, and a command-line mode helps admins and analysts spot unexpected listeners or outbound traffic.
anchor apple generic and identifier "com.objective-see.Netiquette" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = VBG97UB4TA)