prt-core

Core library for prt — a real-time network port monitor for macOS and Linux.

What it does

prt-core provides platform-independent logic for:

• Scanning network ports (TCP/UDP) via lsof on macOS or /proc on Linux
• Tracking connection changes over time (New → Unchanged → Gone) with first_seen aging
• Enrichment — known port names (~170 built-in + user overrides), suspicious connection detection, container awareness
• Filtering by port, PID, process name, service, protocol, state, user, or ! (suspicious)
• Sorting by any column, ascending or descending
• Exporting to JSON or CSV
• Killing processes by PID (SIGTERM / SIGKILL)
• Alerts — configurable rules with bell/highlight actions
• Firewall — generate iptables/pfctl block/unblock commands
• Bandwidth — system-wide RX/TX rate tracking
• Containers — Docker/Podman container name resolution
• Namespaces — Linux network namespace grouping
• Process detail — CWD, environment, open files, CPU, RSS
• i18n — runtime-switchable localization (English, Russian, Chinese) backed by AtomicU8
• Config — TOML-based configuration from ~/.config/prt/

Architecture

platform::scan_ports()
    → Session::refresh()
        → scanner::diff_entries()   (New / Unchanged / Gone + first_seen carry-forward)
        → enrich: service names, suspicious flags, containers
        → retain: drop Gone entries older than 5s
        → bandwidth.sample(): RX/TX rate delta
        → scanner::sort_entries()
    → (frontend layer)
        → alerts::evaluate()
        → scanner::filter_indices()
        → UI renders

Quick start

use prt_core::core::scanner;
use prt_core::model::ExportFormat;

let entries = scanner::scan().expect("scan failed");
let json = scanner::export(&entries, ExportFormat::Json).unwrap();
println!("{json}");

Session-based scanning

For continuous monitoring with change tracking:

use prt_core::core::session::Session;

let mut session = Session::new();
session.refresh().expect("refresh failed");

for entry in &session.entries {
    println!(":{} {} (PID {}) {:?}",
        entry.entry.local_port(),
        entry.entry.process.name,
        entry.entry.process.pid,
        entry.status);
}

Modules

i18n

use prt_core::i18n::{set_lang, strings, Lang};

set_lang(Lang::Zh);
let s = strings();
println!("{}", s.hint_quit); // "退出"

Platform support

License

MIT