portwatch 0.1.8

A cross-platform TUI for monitoring network ports and managing processes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97

{
  "rules": [
    {
      "id": "example-port-opened",
      "name": "Notify when port 8080 starts listening",
      "condition": {
        "type": "PortOpened",
        "params": {
          "port": 8080
        }
      },
      "enabled": true,
      "severity": "Warning",
      "cooldown_seconds": 120
    },
    {
      "id": "example-port-closed",
      "name": "Notify when port 443 stops listening",
      "condition": {
        "type": "PortClosed",
        "params": {
          "port": 443
        }
      },
      "enabled": false,
      "severity": "Info",
      "cooldown_seconds": 60
    },
    {
      "id": "example-port-range",
      "name": "Activity in privileged port range",
      "condition": {
        "type": "PortRangeActivity",
        "params": {
          "start_port": 1,
          "end_port": 1024
        }
      },
      "enabled": true,
      "severity": "Warning",
      "cooldown_seconds": 300
    },
    {
      "id": "example-external",
      "name": "Non-local remote addresses (regex)",
      "condition": {
        "type": "ExternalConnection",
        "params": {
          "ip_pattern": "^(?!127\\.).+",
          "exclude_private": true
        }
      },
      "enabled": true,
      "severity": "Info",
      "cooldown_seconds": 60
    },
    {
      "id": "example-cpu",
      "name": "High CPU for matching process name",
      "condition": {
        "type": "ProcessCpuThreshold",
        "params": {
          "process_pattern": "node|python",
          "threshold_percent": 80.0
        }
      },
      "enabled": true,
      "severity": "Critical",
      "cooldown_seconds": 120
    },
    {
      "id": "example-memory",
      "name": "High RSS for matching process name",
      "condition": {
        "type": "ProcessMemoryThreshold",
        "params": {
          "process_pattern": "java",
          "threshold_mb": 2048
        }
      },
      "enabled": true,
      "severity": "Warning",
      "cooldown_seconds": 180
    },
    {
      "id": "example-unknown-listener",
      "name": "Unknown process listening (evaluator support may vary)",
      "condition": {
        "type": "UnknownProcessListening",
        "params": null
      },
      "enabled": false,
      "severity": "Info",
      "cooldown_seconds": 60
    }
  ]
}