Skip to main content

Tools library

Ready-to-run tools built with yeet. Each one runs with a single command.

Networking

dialouttcpdump for intent.

What is this box dialing, and why? A live egress monitor that catches every outbound TCP connection and groups it by the process that dialed it, flagging connections that leave the private network.

docker-netA live spatial map of your containers.

Containers grouped by Docker network — bridge networks get their own box, host-mode containers sit at the top level, and isolated containers appear separately. Compose labels and exposed ports shown inline.

grpcsnooptcpdump for gRPC.

Watch the protobuf messages flowing between services, decoded to readable fields. No proxy, no code changes — hooks the TC layer on the container's veth and reassembles TCP.

httpinspecttop for your HTTP endpoints.

Every plaintext HTTP request crossing the box — decoded off the wire and ranked live by traffic, rate, and latency. No proxy, no sidecar, no app changes.

CPU & performance

proctopA top(1)-like process viewer.

Every row is a live process; columns show PID, %CPU, resident memory, and the full command line. Pipe-safe with --once, or sort by memory instead of CPU.

heatsinkhtop for your thermals.

Six columns, four colors, the number that actually predicts a throttle. Reads every hwmon sensor and shows each one's temperature, throttle limit, and headroom in a color-coded table.

Security & audit

claudefeedtail -f for Claude Code.

Every command a session runs, every file it opens, every TCP port it reaches or binds — decoded and streamed live to your terminal. Scoped to that session's process subtree.

md-sentryA tripwire for your agent's instruction files.

Watch every create, modify, delete, and rename of an LLM agent's markdown brain in real time, tagged AGENT or EXTERNAL by process subtree. No polling, no inotify — intercepts in-kernel.

runfromEvery exec on your box, live.

Catches every process launch system-wide and flags code running from scratch directories, binaries with no name on disk, and setuid privilege jumps — all caught in-kernel before the process runs.

Hardware

airtophtop for the airwaves.

A live 802.11 Wi-Fi RF dashboard: frequency spectrum of nearby APs, per-station signal traces, a frame-type activity feed, and an RSSI histogram. No monitor mode, no raw sockets.

usbsnoopLive USB transfer sniffer from two fentry hooks.

A real-time, colorized feed of USB traffic system-wide. No usbmon, no hardware sniffer. Control transfers decode their 8-byte SETUP packet; bulk transfers decode SCSI commands.

Fun

knicks-scoreboardhtop, but it's a Knicks game.

Your CPU called from the Garden floor. User time vs system as a live scoreboard, top processes as the starting five, and the game clock counting down from host uptime.

metropolisAn art-deco city that breathes your system.

Skyscrapers, neon billboards, and your top CPU-spending processes walking the boulevard as citizens — running ones sprint, sleeping ones sway, zombies get a red ✕. A footer keeps the actual numbers honest.