Understand the connection map
The connection map groups recent network records by approximate destination location and app. It helps you investigate connections; it is not a complete browsing history or proof of where a person is located.
Open and navigate the map
On the dashboard, find App Connection Origins and tap View connection map. You can also tap the Coverage indicator. On the older Settings screen, use View Connections Map.
Drag to move around the map and zoom to inspect an area. Tap a location marker to move to its connection card. The card groups records by app and shows time ranges and connection status.
Check whether the data is live
If the map shows Sample Traffic Logs, the data is example-only. Do not uninstall apps or assume your phone is compromised based on sample records.
Read the heading before interpreting any pins or warnings:
| Heading or mode | Meaning |
|---|---|
| Live 15-Min Network Traffic Logs | Recent recorded connections from the phone, covering a rolling window of approximately 15 minutes. |
| Sample Traffic Logs (Network Protection Inactive) | Example records displayed when no recent records are available. These are not evidence of activity or infection on your phone. |
| An opened log file | Historical records from that file, not the phone's current activity. |
Sample records may include familiar app names, foreign locations, and blocked connections. Do not uninstall an app or infer a compromise from these examples. Sample mode can appear simply because the recent records are empty; check the protection switches separately.
The live view refreshes periodically, approximately every 30 seconds while the screen is open. Use Refresh to reload the current view. It does not force every app to create a new connection.
Interpret connection status
| Status | How to read it |
|---|---|
| Allowed | The recorded connection was allowed. This is not a certification that the app or destination is safe. |
| Packet blocked | Argus identified the destination as dangerous and blocked the connection. It does not necessarily mean the whole app is quarantined. |
| Medium, High, or Critical | The record shows an app-level block associated with that risk level. Review the app finding for context. |
| Quarantine | The record indicates an app restriction. Check the app's current threat details before deciding what to do. |
Tap a blocked connection row or its badge to read the explanation. A historical block can remain visible after settings change, so compare its time with the current protection state.
The absence of a warning does not establish that all traffic is safe.
Understand locations and unknown entries
Locations are estimates associated with network destinations. They can be approximate, outdated, missing, or represent a hosting provider rather than the organisation you expected.
An overseas connection is not inherently malicious. Many apps use international services and shared hosting.
Unknown App means Argus could not associate a record with a particular app. It does not automatically mean malware or system traffic. An unknown city or country indicates missing location information.
Use the filters
The map offers filters for unknown city, country, and app/package information.
- Hide an unknown category to simplify the list.
- Turn the filters off again when investigating missing records.
- Filtering changes only what is displayed. It does not block connections or improve protection.
Open a saved network log
- Export a network log, or locate a compatible Argus network-log text file.
- On the map screen, tap the open-file icon.
- Select the file in Android's file picker.
- Read the imported records as historical data.
- Tap Return to Live to return to current records.
The PDF scan summary is a different report and cannot be used as a network-map log. An arbitrary text file may also be unreadable by the map.
Map troubleshooting
| Symptom | What to try |
|---|---|
| Only sample records appear | Check network protection, use a trusted app to generate traffic, wait briefly, and refresh. |
| A location or app is missing | Turn off the unknown-entry filters and check whether the record is older than the recent window or bypasses Argus filtering. |
| Records do not change | Check whether you opened a saved file. Use Return to Live and confirm network protection is active. |
| A log will not open | Select the original Argus network-log text export, not a PDF or edited file. Export a fresh log if necessary. |
| A country looks unexpected | Treat it as an approximate destination location. Review the app and block explanation before drawing conclusions. |
Network logs can reveal app use and connection destinations. Review them before sharing and use the support guidance.