witr — Why Is This Running? Skill by [ara.so](https://ara.so) — Daily 2026 Skills collection. witr is a Go CLI/TUI tool that answers "why is this running?" for any process, service, or port. Instead of leaving you to correlate ps , lsof , ss , systemctl , and docker ps manually, witr makes the causality chain explicit — showing where a running thing came from, how it was started, and what chain of supervisors/containers/shells is responsible. Installation Quickest (Unix) Quickest (Windows PowerShell) Package Managers Key Commands & Flags Basic Usage Common Flag Reference Flag Short Description port p Inspect by port number interactive i Launch TUI dashboard all a Show all processes json Output as JSON watch w Auto refresh/follow verbose v Full metadata output user Filter by OS user version Print version Interactive TUI Mode Launch the full dashboard: TUI Keybindings: Key Action ↑ / ↓ Navigate process list Enter Expand process detail / causality chain f Filter/search processes s Sort by column r Refresh j Toggle JSON view q / Ctrl+C Quit Example Outputs Inspect a PID Inspect by Port JSON Output (for scripting) Watch/Follow a Process Common Patterns Find Who Started a Port Listener Audit All Running Services Inspect a Docker/Container Process Use in a Shell Script Filter Processes by User Platform Support Platform Architectures Notes Linux amd64, arm64 Full support macOS amd64, arm64 (Apple Silicon) Full support Windows amd64 Full support FreeBSD amd64, arm64 Full support Go Integration (Embedding witr Logic) If you want to use witr programmatically in a Go project: Troubleshooting Permission Denied on Some PIDs Binary Not Found After Install Port Not Found / No Output TUI Not Rendering Correctly Process Exited Before Inspection macOS: Requires Elevated Access for Some Processes Quick Reference Card

witr-process-inspector