Netwatch — Dev Log | Nate Swenson

An allowlist entry that can never match anything is worse than no entry: it reports success and changes nothing. Here is how a text-prefix IPv6 rule becomes exactly that, and the two fixes that closed it.

No. 130 AUG 12 · Netwatch

Watch who your machine talks to without capturing a packet→

You can see every outbound connection your machine holds, per process, with no sudo and no packet capture. The trick is deciding up front that your tool reports facts and refuses verdicts.

Dev log

An IPv6 address is not a string→

Watch who your machine talks to without capturing a packet→