Omahub
← All plugins
D

Net Speed

by davedes

Live network download and upload speeds in the bar with a details dropdown (traffic chart, connection info, per-interface and per-app usage). Tunnel-aware: VPN and container interfaces are excluded by default so traffic is not counted twice.

GitHub

Security review

Review recommended · 1 finding

Deterministic scan — not a security guarantee

Low
Risk level
Low
Analyzed commit
93fdf8d
Scanned
7 hours ago

Flagged patterns appear only in documentation files (README / docs) — descriptive examples, not executable code.

  • Docs external_hosts README.md:33

    Downloads or connects to an external HTTP(S) host.

    git clone https://github.com/Davedes83/omarchy-netspeed-plugin ~/.config/omarchy/plugins/davedes.netspeed

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

None
AI risk level
None
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
93fdf8d
Reviewed
6 hours ago

The plugin is a read-only network monitoring bar widget: it parses /proc/net/dev and invokes standard read-only tools (ip, ss, nmcli, iw) with no install scripts, no obfuscation, and no external network calls in executable code. The deterministic scan's only finding is a git clone URL in the README, which is documentation and not executed by the plugin.

How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/Davedes83/omarchy-netspeed-plugin --enable
System #bar

ko-fi <img width="967" height="502" alt="Net Speed Plugin" src="https://github.com/user-attachments/assets/a8fb7575-3669-4524-9e7c-c20219e98e98" />

Net Speed Widget for Omarchy

A real-time network speed widget for the Omarchy bar. Shows live download and upload speeds in your shell status bar, with a themed details dropdown covering the traffic chart, connection details, and per-app usage.

Features

  • Live Speed Monitoring — Real-time download and upload speeds from /proc/net/dev
  • Smoothed Display — Exponential moving average prevents jittery speed numbers
  • Smart Formatting — Auto-scales from B/s to TiB/s (binary units: KiB, MiB, GiB, TiB)
  • Configurable Interval — Adjust sampling rate via settings (default: 2000ms)
  • Resizable Font — Scroll to fine-tune the widget font size
  • Total Counters — Hover for cumulative RX/TX totals and per-interface breakdown
  • Tunnel-aware — VPN and container interfaces are excluded by default so a WireGuard/Tailscale session is not counted twice; pin the exact set with interfaces
  • Theme-Aware Dropdown — One click opens a fully Omarchy-styled panel coloured entirely from your active theme (no hardcoded colours):
    • Hero — Connection name, live state (e.g. CONNECTED), and refresh/close buttons
    • Live Throughput Chart — Stacked down/up traffic with a 5 / 15 / 30-minute window selector
    • Connection Details — SSID, signal, band, iw link rate, security, IP, gateway, DNS, status, MAC, MTU, DHCP lease, driver, metered flag
    • Per-App Usage — Live down/up rates + session totals and connection counts per app (TCP socket attribution)
  • IPC Controls — Programmatic control via omarchy shell commands

Installation

omarchy plugin clone github.com/Davedes83/omarchy-netspeed-plugin

Or manually:

git clone https://github.com/Davedes83/omarchy-netspeed-plugin ~/.config/omarchy/plugins/davedes.netspeed

Removal

The plugin removes itself cleanly — it ships no system services, no hooks, and no background daemons, and it never edits files outside its own plugin directory.

omarchy plugin remove davedes.netspeed
omarchy restart shell

If you added the widget to ~/.config/omarchy/shell.json yourself, delete its davedes.netspeed entry too:

{
  "bar": {
    "layout": {
      "right": [
        "clock"
      ]
    }
  }
}

Nothing else is left behind; ~/.config/omarchy/plugins/davedes.netspeed is the only path the plugin writes to.

Dependencies

No additional packages are required. The widget reads /proc/net/dev directly and uses four commands that ship with a standard Omarchy install:

Command Package Used for
ip iproute2 interface address, MTU, and gateway lookups
ss iproute2 per-app TCP traffic attribution
nmcli networkmanager Wi-Fi SSID, signal, DHCP lease, metered flag
iw iw wireless link rate and band (Wi-Fi only)

If a command is unavailable, the widget degrades gracefully and simply omits that section. Only the download/upload figures in the bar require no external command at all.

Usage

The widget appears in the right section of your bar by default. No configuration needed—it works out of the box.

Interactions

  • Left-click — Toggle the details dropdown panel
  • Middle-click — Force refresh the speed sample
  • Right-click — Open Omarchy network settings
  • Scroll up/down — Fine-tune font size by ±1px
  • Esc — Close the dropdown (standard Omarchy keyboard-panel behaviour)

Customization

Edit the widget entry in your ~/.config/omarchy/shell.json:

{
  "bar": {
    "layout": {
      "right": [
        {
          "id": "davedes.netspeed",
          "interval": 2000,
          "fontSize": 12
        }
      ]
    }
  }
}

Settings:

  • interval (ms) — Sample rate (bar + chart). Lower = more accurate but higher CPU (default: 2000). Clamped to 250–60000 ms; non-numeric or zero/negative values fall back to the default
  • fontSize (px) — Widget text size (default: bar caption size). Clamped to 8–28 px
  • interfaces — Optional list of interfaces to monitor, e.g. "enp5s0" or ["wlan0", "enp5s0"]. Defaults to every non-virtual interface (see Excluded Interfaces). Listing a virtual interface explicitly is allowed and opts you into counting it

Per-App Usage notes

  • Speeds and session totals come from live TCP sockets sampled via ss (default every 1.5s)
  • Totals accumulate for the current session and reset when the shell/widget restarts
  • Only established sockets are sampled. A socket only moves bytes once it is established, so nothing is lost, and the connection count reflects live connections instead of every SYN-SENT/TIME-WAIT transient
  • Only TCP sockets are attributed; QUIC/UDP traffic (e.g. YouTube or Google over HTTP/3) is not visible per-app, so apps doing heavy QUIC can look quiet while the bar still shows the real throughput

IPC Commands

Control the widget programmatically:

# Adjust font size
omarchy shell send davedes.netspeed fontSizeUp
omarchy shell send davedes.netspeed fontSizeDown
omarchy shell send davedes.netspeed setFontSize 14

# Force refresh
omarchy shell send davedes.netspeed refresh

# Open / close the details dropdown
omarchy shell send davedes.netspeed open
omarchy shell send davedes.netspeed close
omarchy shell send davedes.netspeed toggle

How It Works

  1. Reads /proc/net/dev every interval milliseconds
  2. Filters loopback, container, and VPN/tunnel interfaces (see Excluded Interfaces)
  3. Calculates deltas from the previous sample
  4. Smooths speed values with an exponential moving average
  5. Formats as human-readable speeds (B/s, KiB/s, MiB/s, etc.)
  6. Dropdown — connection details come from nmcli/ip/iw, per-app usage from ss -tinp state established

Excluded Interfaces

The following interface patterns are excluded by default (case-insensitive):

  • lo* — Loopback
  • docker* — Docker bridges
  • br-* — Linux bridges
  • virbr* — libvirt bridges
  • veth* — Virtual Ethernet pairs
  • vboxnet*, vmnet*, vnic* — VirtualBox/VMware host-only networks
  • wg*, tailscale*, tun*, tap*, sit*, gre*, ip6tnl*, ip6gre*, ham*, zt* — VPN and tunnel overlays
  • cni*, podman*, flannel*, lxcbr*, kube*, nomad* — Container and cluster networks
  • dummy*, ifb*, teql*, bond_slave* — Traffic shaping and bond slaves

Tunnel interfaces matter most here: a VPN re-counts every byte that already crossed the physical NIC, so including one double-reports throughput and inflates the totals. If you do want to watch one, name it explicitly in interfaces.

The default covers the common virtual interfaces, but it is a fixed list rather than a rule. Check what is actually on your machine with ip -br link and pin anything you need (or need to skip) via interfaces.

Troubleshooting

Widget not appearing?

  • Check that your bar layout includes the right section
  • Verify the plugin loads: omarchy plugin list | grep davedes.netspeed

Speeds stuck at "--"?

  • The widget waits for the first sample interval before displaying
  • Force a refresh: middle-click or run omarchy shell send davedes.netspeed refresh

High CPU usage?

  • Increase interval in shell.json (e.g., 2000ms for less frequent sampling)
  • The dropdown's per-app table is the most expensive part while it is open — it samples ss every 1.5s. Close it when you are not looking at it (nothing runs while it is closed)

Numbers higher than my real traffic?

  • A VPN/tunnel interface is double-counting your physical NIC. Check ip -br link for wg*/tailscale*/tun*, and pin interfaces to just the interface you care about

One of my interfaces is missing from the tooltip?

  • If its name matches an excluded pattern above, list it explicitly in interfaces

Total jumped to a nonsense value?

  • Please report it — the parser should now discard an incomplete /proc/net/dev read rather than act on a partial counter

License

MIT License — See LICENSE for details.

Feedback

Found a bug or have a feature idea? Open an issue on GitHub.

Made with ❤ for Omarchy