NET MONITOR-XL - Real-Time Network Packet Monitoring

Details

 net packet monitor xl

NET SECURITY  |  PC  |  Use Now

What does it do?

The reason i build this app because i'm curious what is going in and out of my desktop computer, laptop/tablet or and of my Windows platform based devices when they go online.  Lots of unknown pesky agent, bots, spyware, malware, hacker or mining bot (like bit-coin thingy) going in your/my computer probably downloading or peeking stuff without permission.  Even 'legit sofware can do nasty stuff like sending telemetry data about what you do on your computer/devices and send back to HQ.  So i build this sofware/app to detect and monitor every individual process running inside my device system; what packet data (HEX) there are sending, where does it ended up, who is the receiver and also monitor suspicious process that is not suppose to be there.  

So here i am with my awesome app creation:  NET MONITOR-XL is a real-time network telemetry, packet inspection, and firewall analysis tool. It is designed to provide users with deep visibility into the network traffic entering and leaving their machine, linking abstract network data directly to the specific applications generating it.  Thankfully it help me a lot because one of my old laptop have so called 'Agent Smith' (pun intended..lol!) was running wild on its heatsink fan wheezing tornado huff and pufff! as soon i connected online....illegal process detected and eliminated. Yay!  Btw i designed the layout to have a cool retro "E-ink" style looks.....hmmm probably my next app build will be like that.

Updates and bug fix log:

24/8/2026 - On "ACTIVE APPS" section now include an expandable accordion for each process when user click it reveal a hidden branch showing its underlying dependencies, sub-processes, or child services.
24/8/2026 - Fix GEO-IP MAP bug where now it can show GEOLOCATION of intercepted packet when go LIVE Agent connected .
8/8/2026 - Add 'Npcap' requirement on the documentation. Read first before go 'LIVE'.
8/8/2026 - Local Agent Connection code broken, fixed it.


How can it help you?

1. Real-Time Packet Sniffing & Inspection

The app captures live network traffic (TCP, UDP, ICMP, DNS) at the packet level. The Live Packet Inspector streams this data in real-time, allowing users to view the source, destination, protocol, and payload size of every connection. Users can pause the stream, filter by protocol or IP, and click on individual packets to decode their Ethernet/IPv4 headers and view a raw hexadecimal payload dump.

2. Process-to-Network Mapping (Active Apps)

Unlike basic packet sniffers, NET MONITOR-XL maps network connections directly to the running processes on the host machine. The Monitored Apps dashboard shows exactly which applications (e.g., chrome.exe, spotify.exe) are consuming bandwidth, displaying live upload/download metrics and the exact local file path of the executable.

3. Geo-IP Traffic Mapping

The application resolves external IP addresses to their geographical locations and internet service providers (ISPs) or organizations. This data is visualized on an interactive Geo-IP Map, drawing connection traces from the user's local gateway to global servers, making it easy to spot suspicious or unexpected offshore connections.

4. Interactive Firewall Rules

Users can enforce mock firewall rules directly from the interface. By adding rules targeting specific IP addresses, ports, or applications, the app will simulate "dropping" those packets. Blocked traffic is visually flagged in the UI, and the dashboard tracks the overall blocked packet rate.

5. Playback & Telemetry Control

To handle the overwhelming speed of modern network traffic, the app includes a Monitoring Delay Rate slider. This acts as a buffer, allowing users to artificially slow down the UI rendering of packets (in milliseconds) so human eyes can catch up and inspect rapid bursts of data.

6. Native Log Exporting

Users can snapshot their network cache and export a detailed .txt log file. This log includes timestamped packet data, application paths, and resolved geographical/ISP information, utilizing native Windows file dialogs for seamless saving.

 

How to use this app?:
How to Connect the "Live Agent" in NET PACKET MONITOR-XL

**Note: By default when you open the app it will run a mock/fake data for simulation/demo mode just to show you how it works.  You need to click [ LIVE ] button to connect to your PC and monitor your network.....however you'll need to do few thing to get it work.

To view real-time network traffic on your computer, the "Net Packet Monitor-XL" web dashboard needs a local "Agent" to sniff the network packets and securely pass them to your browser.  Here is the complete, step-by-step guide to getting connected.

Prerequisites

  1. Require Npcap is the official Windows packet capture library.  In simple terms, it is a special driver that acts as a bridge between your computer's network card and your software.  Go to the official website at npcap.com and download the latest free installer (e.g., Npcap 1.79 installer).

  2. You must have Python installed on your computer.
  • If you don't have it, download and install it from python.org.
  • Important for Windows users: During installation, make sure to check the box that says "Add Python to PATH".



Step 1: Open the Setup Modal

  1. Open the Net Monitor XL dashboard in your web browser.
  2. In the top-right corner of the header, click the LIVE button (next to the "DEMO" button).
  3. The "Live Agent Setup" modal will appear on your screen.



Step 2: Install Required Dependencies

The Python agent relies on specific libraries to read network traffic and communicate with the browser.

  1. Open your computer's terminal:
    • Windows: Press the Windows Key, type cmd, and press Enter.
    • Mac: Press Cmd + Space, type Terminal, and press Enter.

  2. Copy the following command and paste it into your terminal, then press Enter:

    pip install scapy psutil websockets

  3. Wait a few moments for the installation to complete.

Step 3: Download the Agent Script

  1. On the "Live Agent Setup" modal in your browser, look for Step 2 ("Get The Agent Script").
  2. Click the DOWNLOAD .PY button.
  3. Save the agent.py file to an easily accessible location on your computer, such as your Desktop or a dedicated folder.


Step 4: Run the Agent as an Administrator

CRITICAL: Because network packet sniffing is a low-level operation, the script will crash or fail if you do not run it with Administrator/Root privileges.

For Windows:

  1. Press the Windows Key, type cmd.
  2. Right-click on "Command Prompt" and select "Run as administrator".
  3. Navigate to the folder where you saved the script using the cd command. For example:cd

    C:\Users\YourUsername\Desktop

  4. Run the script:

    python agent.py

For Mac / Linux:

  1. Open your Terminal.
  2. Navigate to the folder where you saved the script. For example:

    cd ~/Desktop

  3. Run the script using sudo (you will be prompted to enter your computer password):

    sudo python3 agent.py

Success Check: Your terminal should output the following message:

Agent Initialized. Listening on ws://localhost:8765...

 

Step 5: Link the Dashboard

  1. Leave the terminal window open and running in the background.
  2. Return to the Net Monitor XL browser window.
  3. Look at Step 4 on the setup modal ("Link Dashboard").
  4. Ensure the input box contains exactly: ws://localhost:8765
  5. Click the CONNECT button.

 

You are now LIVE!

The modal will close automatically, and a toast notification will say "LIVE PIPELINE ACTIVE".

  • Look at the top-left of the header; the status should now say LIVE AGENT.
  • The dashboard will reset its counters and begin displaying the actual network traffic entering and leaving your machine in real-time.

To disconnect: Simply close the terminal window running the script, or click the DISCONNECT button at the top right of the dashboard.  At your Command Prompt/Terminal window; press key: CTRL + C on your keyboard to terminate the Python agent process to close that connection port on your local devices.