I build Rust tools for investigating networks, hosts, disks and the Linux kernel. My focus is making system behaviour easier to inspect from the terminal.
Sydney, Australia · NetWatch Labs · LinkedIn
netwatch brings network traffic, connections and process activity into one terminal. It is packaged in Homebrew, conda-forge, nixpkgs, the AUR and Scoop, and was Terminal Trove's Tool of the Week in April 2026.
Install netwatch · Run and explore
Demo traffic in the dense view: throughput above, interfaces and hop latency in the middle, connections below. Click to view at full size.
Start with the part of the system you need to investigate. netwatch, syswatch and diskwatch share a terminal layout and palette.
| Tool | What to use it for |
|---|---|
| netwatch | Inspect traffic, connections and network behaviour. |
| syswatch | Investigate resource use and revisit recent system activity. |
| diskwatch | Inspect disk activity, capacity, health and busy files. |
| kernwatch | Investigate Linux scheduling, memory pressure and block I/O. |
- Process attribution: identity, freshness and coverage — how netwatch checks ownership evidence, handles stale observations and reports what remains unknown.
- Designing netwatch's terminal views — the version 0.30 design document covering layout, visual hierarchy and dense and lite views.
- essh — remote shells that survive connection drops, built on OpenSSH and tmux.
- nanofix — a Rust FIX engine. NewOrderSingle serialisation benchmarked at 28.7× faster than QuickFIX/J on Apple Silicon; results and methodology.
For netwatch questions and ideas, use Discussions. For professional conversations, connect on LinkedIn.