Understand Connections, Discovery, and Activity

Connections records network activity while Logging is enabled. You can search by app or destination and inspect whether a record used Proxy, Direct, Blocked, or failed.

In the Filter menu next to the search field choose Include or Exclude, type, and press Return to turn the text into a chip; several Include chips are OR’d and Exclude wins. The ⓘ at the end of a row explains why the connection went direct, failed or was blocked, and shows the full process path.

Turning Logging off reduces recording overhead while traffic still follows its rules. Clear removes connection records only; it does not delete proxies or rules.

A Direct rule with no Target Hosts and no Target Ports lets traffic fully bypass AntifyCore: those connections do not appear in Connections or in the statistics. For a rule with a filter, connections that go direct because of the filter appear as Direct rows.

Under a Direct default, apps without a rule leave no rows either. To see them, turn on Discovery with Allow direct (pass through and log only).

1. 1

   Enable Discovery

   Turn on Discovery in Connections. If the active Configuration’s default is Direct, Discovery Fallback asks what to do with apps that have no rule: Route via proxy, Block, or Allow direct; confirm to continue. Under a Proxy or Block default there is no question, and those apps follow the default.

2. 2

   Reproduce the network action

   Return to the target app, perform the action you need to inspect, then search by app name or destination.

3. 3

   Create a rule from the record

   Use Add Rule on an unmatched record. Antify carries the app identifier and available path into the rule form.

4. 4

   It switches itself off after 10 minutes

   Discovery runs for at most 10 minutes and then turns itself off. To look through the list at leisure, press Pause first, then use Add Rule on the row; once Discovery is off the button no longer appears.

Activity records events such as app startup, proxy and rule changes, Configuration switches, setting changes, and runtime warnings. It is not a destination-domain list. Its titles and details are in English even in the Chinese UI, on purpose: they are diagnostic text.

You can search, filter by level, refresh, clear, or export. Activity is the better place to answer “when did the Configuration switch?” or “was this proxy just edited?”

If a rule filters by hostname and the app uses encrypted DNS, Connections warns you here: it may not see the original hostname and can match only by IP and port. Use an IP range rule instead, or turn off Secure DNS for that app.