NETMON ROOTS MONITOR. CONTROL. UNDERSTAND. BACK TO THE ROOTS.
DE EN

Manual

Built documentation from the repository

Project status: Known issues and rollout notes will be maintained centrally on Updates.

PDF

PDF Export 1.1.19

Suitable for offline archiving or sharing a stable documentation snapshot.

Open PDF

Security Audit

Security Audit 2026

Latest published audit report: round 9 for the final NetMon v1.1.19 release state. Two medium findings (update URL allowlist and killswitch fail-open) were fixed and verified, and the release signature chain via SHA256SUMS and minisign was validated.

AI integration

Online analysis stays optional, prompt workflow stays under user control.

API key

External analysis only when needed

NetMon enables online analysis only when a valid API key is configured. Without a key, the local workflow remains untouched.

Copyable prompts

Analysis and support prompts can be copied directly from NetMon into external chats.

Local control

The user decides whether data stays local or is intentionally sent into an external AI-assisted review flow.

Environment variable

OPENAI_API_KEY is the intended activation point for online analysis.

Security audit

A current audit report is available in both HTML and PDF form.

Quick answers

The most important local notes

Is AI integration available?

Yes. NetMon supports optional online analysis through an API key plus local prompt generation.

Can I use prompts externally?

Yes. Generated prompts can be copied into external chats.

How do I start NetMon without the GUI?

python -m netmon --headless

How do I smoke-test the GUI?

python -m netmon --headless-smoke

Where are diagnostics stored?

Under ~/Documents/NetMon/diagnostics or ~/Dokumente/NetMon/diagnostics.

Why does NetMon need sudo?

Mainly for DNS, firewall, WireGuard, packet capture, and cleanup actions.

How do I enable online analysis?

Set the API key as OPENAI_API_KEY; without a key, online analysis stays disabled.

Which features stand out most?

DNS Guard, security guards, support packages, WireGuard slots, Linux help with glossary and PDF library, link blocks, Theme Studio, and the detachable radio player.

Is Linux help built in?

Yes. NetMon includes an expandable help system with around 700 Linux commands, IT terms, a copyable PDF prompt, and an importable PDF library.

Is there a link block?

Yes. Buttons can be labeled freely and assigned to internal or external links.

Are Theme Studio and a fun area included?

Yes. NetMon includes Theme Studio, radio, visualizer support, and a small built-in area for downtime.

Can I configure the ClamAV quick-scan paths?

Yes. The ClamAV tab lets you persistently select Downloads, Desktop, document folders, and custom directories. Scan runtime remains visible while it runs.

Are final screenshots already in place?

Yes. The current tour page already uses real product screenshots from the repository.

Versions

Package and documentation status kept separate

Debian package: Planned as 1.1.19 for the current release.

Built manual: Planned as 1.1.19 for the release state.

Changelog: Entries document state 2026-07-18 for version 1.1.19.

Hash and verification

Integrity checks without proprietary add-ons.

Trust model

Three layers

Download, hash verification, and optional signature validation are intentionally stacked in that order.

1. Fetch the artifact

Download the .deb, docs, and SHA256SUMS from the same release surface.

2. Verify the hash

Run sha256sum -c against the shipped checksums.

3. Verify the signature

If available, validate SHA256SUMS.minisig with the public key.

4. Minisign support

Signed releases can also be verified with verify_netmon_signature.sh, the Minisign public key, and SHA256SUMS.minisig.