bandwhich

bandwhich is a command‑line utility that monitors real‑time network traffic and attributes bandwidth usage to individual processes, connections, and remote IP addresses or hostnames. It captures packets on a chosen interface and correlates the data with system information—using the /proc filesystem on Linux, lsof on macOS, and the Windows API on Windows—while adapting its output to the terminal size. The tool also performs reverse DNS lookups in the background to resolve IPs to hostnames when possible.

The program is aimed at developers, system administrators, and anyone who needs to diagnose network activity on a per‑process basis without installing graphical tools. Its lightweight, terminal‑based interface makes it suitable for servers, desktops, and even Android devices where a simple binary can be executed directly. Bandwhich runs on a wide range of architectures, including x86_64, ARMv7, and ARM64 across Linux, macOS, Windows, and Android.

Installation is provided through prebuilt binaries for major platforms or by building from source with Rust’s Cargo. On Linux, elevated privileges are required for packet sniffing, which can be granted via capabilities (setcap) or sudo. The project is in passive maintenance; critical issues are addressed, and contributions are welcome.