How to Monitor Network Traffic on Mac

How do you monitor network traffic on a Mac?

For a built-in first check, open Applications > Utilities > Activity Monitor and select Network. Compare sent and received data by process. When you need history or connection details, open iNTM Traffic Monitor, select an application in the chart, and inspect its connections before considering a firewall rule.

• Watch real-time upload and download speed
• Compare process traffic in Activity Monitor, then inspect the app chart in iNTM
• Inspect domains, IP addresses, ports, and protocols
• Turn suspicious findings into local firewall rules

A practical Mac traffic monitoring workflow

1. Check live network speed

   Open Applications > Utilities > Activity Monitor, choose Network, and check which processes have sent or received data. This built-in view gives a first snapshot without installing iNTM.

2. Identify the app behind the traffic

   In iNTM, open Traffic Monitor. The application chart shows traffic for each process in the selected time range; select the chart item for the app you want to investigate.

3. Inspect connection details

   Selecting an app opens its connection detail panel. Read the remote address, port, protocol, and traffic amount, then compare the destination with the app's expected behavior.

   

4. Review traffic history

   Change the Traffic Monitor time range to compare the app's recent activity with earlier periods. A single update should not be treated like repeated background traffic.

5. Create a rule when needed

   If traffic is unwanted, create a targeted local firewall rule instead of guessing or disabling the whole network.

What Activity Monitor can and cannot show

Activity Monitor is useful for a quick system snapshot, but it is limited when you need ongoing investigation. It can show broad network activity, yet it does not give the same app-focused workflow for remote endpoints, history, and firewall control.

• Use Activity Monitor for a quick first check.
• Use iNTM when you need per-app bandwidth and connection details.
• Use firewall rules only after you understand what an app is doing.

When monitoring should become control

Network monitoring becomes more valuable when it leads to a precise action. If an app repeatedly connects to an unexpected endpoint or uses bandwidth in the background, iNTM lets you move from observation to a local app, domain, IP, or port rule.

• Unexpected background uploads
• Repeated connections to unfamiliar endpoints
• Apps using bandwidth outside your normal workflow

Mac network traffic monitoring FAQ

Can I monitor network traffic on Mac by app?

Yes. iNTM groups traffic by application so you can see which Mac apps are using bandwidth instead of relying only on system totals.

Can I inspect where an app is connecting?

Yes. iNTM helps you review domains, IP addresses, ports, protocols, and connection timing for app traffic.

Should I block traffic immediately when I see a spike?

Not always. First confirm which app created the traffic and whether the endpoint is expected, then create a precise local firewall rule if needed.

Hand off the next question