Changelog

Version 1.1

New

• Refreshed look — crisp vector icons across the toolbar, tab bar, sidebar buttons, and summary cards that stay sharp at any size and recolour automatically with the dark/light theme
• Shorter, clearer tab names with matching icons: Processes, Listening, Connections, Failed Logins, Sniffer, Firewall

Improved

• Firewall rules now accept a single port (80), a list (80,443), or a range (8000-8100) for local and remote ports
• Addresses are validated when building firewall rules — single IPs, subnets (192.168.1.0/24), ranges (192.168.1.1-192.168.1.50), and keywords such as LocalSubnet or DNS are accepted; duplicates are skipped and invalid entries are rejected with a clear message
• Memory usage is shown more precisely — small processes now display one decimal (e.g. 0.5) and the Memory column sorts by actual size
• Faster Failed Logins — loading stops once it passes your chosen time window instead of scanning the entire security log
• Faster connection and listening lists thanks to smarter lookup of process names and paths

Fixed

• The "Listen" connection-state filter now works (it previously showed no rows)
• The module list now shows every module — processes with very many loaded modules are no longer cut off
• The packet sniffer no longer slows down or freezes during long captures; the on-screen log is kept to a manageable size and the capture file is written more efficiently
• More stable overall — unexpected errors now show a message instead of closing the app, and closing the window during a capture no longer causes a crash

Version 1.0

Initial Release

• Running process viewer — PID, process name, full executable path, and loaded module list
• Active TCP/UDP connections — PID, protocol, local/remote IP and port, state, process name
• Listening ports viewer — all TCP/UDP ports in listening state with owning process details
• Raw packet sniffer using native Winsock APIs — decodes TCP, UDP, ICMP, and IGMP packets
• Packet filtering by source/destination IP and port
• Packet hex dump — timestamped entries with full hex and ASCII side-by-side output to dump.log
• Windows Firewall rule manager — view, create, enable, and disable rules from within the app
• Block connection from context menu — pre-fills the firewall rule creator with connection details
• Sortable columns across all list views with correct numeric sorting for ports and PIDs
• No external dependencies — uses only native Windows APIs (iphlpapi, psapi, Winsock2, Firewall COM)
• Supports Windows 7, 8, 10, and 11 (32-bit and 64-bit). Administrator privileges required.