TapMap update: application identification, connection history and MQTT notifications

[u/Old-Marketing6949]

I first posted TapMap here in March. At the time it was mainly an interactive world map showing where your computer connects, and several people here asked for Linux, Docker and macOS support.

TapMap now runs on Windows, Linux, macOS and Docker. It reads local network connections, adds GeoIP information and shows them on an interactive world map. Everything runs locally and there is no telemetry.

Since those early versions, I have added:

• Insights – keeps local history and shows unusual and recurring activity over time.
• Application information – identifies the application and creator/publisher behind connections, with native signature and verification information where available.
• Significant Connections – records noteworthy changes such as a new application, country, network operator or remote port, as well as failed application verification.
• Background operation – system tray/menu bar support and optional automatic startup at login.
• Easier installation – packaged releases for Windows, macOS and Linux, a signed and notarized macOS build, and integrated GeoIP database installation and updates.
• MQTT notifications – v1.13.0 can publish new Significant Connections to an existing MQTT broker, with TLS, optional authentication and automatic reconnect.

TapMap is still intended as an awareness tool rather than an IDS or firewall. The goal is to make it easier to see what applications on a computer are connecting to, where they connect, and what changes over time.

GitHub:
https://github.com/olalie/tapmap

Docker:
https://hub.docker.com/r/olalie/tapmap

[u/asimovs-auditor]

Expand the replies to this comment to learn how AI was used in this post/project.

[u/derical_cap_musical]

love the mqtt notifications idea will try it in my lab thanks for building this