Per-app traffic after a speed spike
See the application, endpoint, and history behind a rate the menu bar cannot explain.
Mac Network MonitorKeep live upload and download speed in the Mac menu bar, learn what a spike is telling you, and open a full network monitor only when the speed number is not enough.
A Mac menu bar network speed monitor shows live upload and download rates while you keep working. Read the two numbers first: upload leaving the Mac, and download coming in. The menu bar answers whether the rate changed. It does not name the app, the remote endpoint, or whether the traffic should be blocked. Use iNTM's status bar for the speed signal, then open the traffic view only when that signal looks wrong.
Start with a real-time speed view so you can notice when traffic appears while you are not actively downloading, streaming, or syncing.
Show iNTM's status bar item. Its upload and download numbers remain visible while the main window is closed; a rising number is a signal, not a diagnosis.

Open the main iNTM window and select Traffic Monitor. Compare the application chart in the current time range; select the relevant app item to open its connection details.
Review the remote domain, IP address, port, protocol, and repeated history before deciding whether the traffic is expected.
If you cannot explain the spike, open the per-app traffic view. If you already know the app and want it to stop, use the blocking guide instead of staying on this page.
Download iNTM Mac Network Monitor
A speed monitor answers whether your Mac is uploading or downloading right now. A traffic monitor answers which app is responsible, where it connects, and whether the behavior repeats. iNTM keeps both views connected so speed spikes can become useful investigations.
A menu bar speed indicator stays visible while you write, browse, or join a call. It can reveal an unexpected upload, a cloud sync burst, a background update, or a browser download before that activity uses a large amount of data. iNTM's status bar item shows the current upload and download rates and can open the connection list when you want the next level of detail.
Upload and download answer different questions. A download spike often comes from a browser video, an app update, or a file sync you started. An upload spike is more useful to notice when you are not sending a file, because it can be a backup, a photo library, or an app phoning home. Note which direction moved, whether it lasted a few seconds or kept running, and whether you were actively using an app. That is enough to decide if the menu bar has done its job.
Stop at the speed view when the rate matches what you are doing. Go further when the menu bar stays busy and you cannot name the cause. The next page is a Mac network monitor, which groups traffic by application and shows the remote domain, IP address, port, and protocol. Blocking is a separate decision after you know which app is responsible.
Yes. iNTM includes a status bar speed view so live upload and download rates stay visible while you work, without keeping the main window open.
No. The menu bar shows the current upload and download rates. To see which app is responsible, open iNTM's per-app traffic view and inspect the connection behind the spike.
No. A speed monitor tells you the rate. A Mac network monitor tells you the application, the remote endpoint, and whether the pattern repeats. Use the menu bar first, then switch views when the rate needs an explanation.
See the application, endpoint, and history behind a rate the menu bar cannot explain.
Mac Network MonitorAfter you know the app, decide whether a local rule should block its internet access.
Block Internet Access on Mac