PacketWarden

Watch outgoing network activity app by app, with the destination host, IP address, port, protocol, country, and data transferred. PacketWarden gives you a readable view of background traffic across your Mac, so analytics, update checks, telemetry, and other connections no longer have to stay invisible.

Block network access for an entire app with one click, or create a domain rule that applies across every app. Choose Blocklist mode when you only want to stop selected traffic, or Allowlist mode when nothing should connect until you approve it. Rules take effect immediately without a proxy or VPN profile.

Charts by hour, day, week, and month make it easier to spot apps that quietly transfer data in the background. Search the connection log by app or host, filter allowed and blocked traffic, sort by time or volume, and export the results to CSV. Firewall rules can also be exported and imported.

First contact alerts tell you when an app reaches a server it has never used before, which is useful when trying new software or watching an existing app change its behavior. A connection map uses an offline GeoIP database to show destination countries, while curated ad, tracker, and telemetry block lists help cut down unwanted background traffic across the Mac.

The menu bar panel shows per-app throughput for the last five seconds, the last hour, or since midnight. Pause or resume protection without opening the full app, and use a timed pause or pause-until-restart option when you temporarily need unrestricted access without removing your rules.

PacketWarden stores connection history on your Mac and performs GeoIP lookups offline. There is no account, sign-in, cloud service, or traffic-data upload. Filtering runs locally through Apple's Network Extension framework and a macOS system extension, which you approve once in System Settings.