witr: the one command that answers why anything is running

2 months ago

Your machine is always running things you never started on purpose. A network connection that’s already in use, a file that just won’t delete. witr is the one command that answers the question underneath them all. Why is this running?

Ask

Ask about this presentation

Answers are generated from this presentation.

Chapters

  1. 0:00witr · why is this running?
  2. 0:11Point witr at anything running and it shows what started it
  3. 0:29Your tools show what is running, never why
  4. 0:52Every question becomes the same question: one running program
  5. 1:19Your computer never stores why a program runs, so witr rebuilds it
  6. 1:53One command, the whole story on one screen
  7. 2:10See everything running in one live dashboard
  8. 2:25One self-contained program, on every major OS
  9. 2:44witr · one command that names why anything is running
Show transcript

witr · why is this running?

GitHub Trending · Ep 29 · Aug 8, 2026

witr

Why is this running?
Go Apache-2.0 Linux · macOS · Windows · FreeBSD

Your machine is always running things you never started on purpose. A network connection that’s already in use, a file that just won’t delete. witr is the one command that answers the question underneath them all. Why is this running?

Point witr at anything running and it shows what started it

Point witr at anything running and it shows what started it.

A program, a connection, a container, or a stuck file → one answer.
witr’s own example output

You run witr in your terminal, the window where you type commands, and point it at almost anything on your machine. A running program. An open connection. A container, meaning a boxed-up copy of an app with everything it needs to run. Or a file that’s stuck. Whatever you point it at, witr traces where it came from and what started it.

Your tools show what is running, never why

Your tools show what is running, never why.

So you hunt across six terminals, matching numbers to names by hand.
try it in your browser · pranshuparmar.github.io/witr

You launch a program that runs a website, and it dies on the spot. Address already in use, port 8000. That 8000 is a port, a numbered doorway your computer uses to talk to the network, and another program already grabbed it. Now you want to know which program. So you open six terminal windows and start matching a number in one against a name in another, doing by hand the detective work your computer could just hand you.

Every question becomes the same question: one running program

Every question becomes the same question: one running program.

Four different-looking problems, one place to start.
a namewitr node a port--port 5000 a container--container redis a stuck file--file /var/lib/dpkg/lock one PID one running program (+ its id)

And here’s the clever part. Whatever you hand witr, a port, a container, a stuck file, or just a name, every one of them leads back to one thing. One running program. And every running program gets an ID number from the system, called a PID. So witr’s first move is to boil whatever you gave it down to that one program and its PID. A port problem, a container problem, a stuck-file problem, witr turns them all into the exact same problem. Find the one program, then explain it.

Your computer never stores why a program runs, so witr rebuilds it

Your computer never stores why a program runs, so witr rebuilds it.

The machine’s launcher → a restart babysitter → your app.
one PID one running program (+ its id) witr walks the scattered links • the process tree • the service manager • the container runtime • socket ownership why it exists: one plain chain systemd → pm2 → node Sourcewho’s reallyresponsible Contextfolder · gitbranch · bind Warningsanything thatlooks off

Now witr does the part nothing else does. Your computer never stores why a program is running as one fact. That answer is scattered across the family tree of what launched what, the background managers that quietly start programs and keep them alive, and whatever holds that network doorway open. witr gathers it all into one plain chain. The program that boots your whole machine started a little babysitter program, and that babysitter started your app and relaunches it if it crashes. On the diagram: systemd, then pm2, then node. Then witr names the one thing really responsible, adds the folder and code branch your app lives in, and flags anything that looks off.

One command, the whole story on one screen

One command, the whole story on one screen.

What started it, who’s responsible, where it lives, and what it’s holding open.
example output

Point witr at that app and witr lays the whole story out on one screen. The chain of what started it, highlighted right at the top. The one system really responsible. The folder your app lives in and the branch of code it is on. And the exact network connection it is holding open. Six terminals, replaced by one answer.

See everything running in one live dashboard

See everything running in one live dashboard.

Programs · ports · containers · locked files, each one keystroke from what started it.
try it in your browser · pranshuparmar.github.io/witr

Prefer to poke around instead? Run witr with no arguments and you get a live dashboard with four views. Every running program, every open network doorway, every container, and every stuck file. Pick any line, and the same what-started-this panel opens right beside it.

One self-contained program, on every major OS

One self-contained program, on every major OS.

One line to install, or grab it from your package manager.
curl -fsSL https://raw.githubusercontent.com/pranshuparmar/witr/main/install.sh | bash
v0.3.3 Apache-2.0 · open Linux · macOS · Windows · FreeBSD x86_64 · arm64

witr is a single self-contained program, with nothing extra to install beside it. It runs on Linux, macOS, Windows, and FreeBSD. Grab it with one line in your terminal, or from just about any package manager you already use. It is free and open under the Apache 2.0 license, young but already widely packaged, and with the deepest support on Linux.

witr · one command that names why anything is running

One command that names why anything on your machine is running.

Trace any process, port, container, or stuck file back to what started it.
github.com/pranshuparmar/witr
New repo tomorrow.

So next time your machine is running something you never started, witr is the one command that names what is behind it, and why. Try it in your browser first if you like. The link is on screen, and there’s a new repo here tomorrow.