How to Monitor Bandwidth While Tethered to an iPhone

You're at a hotel in Lisbon, the Wi-Fi captive portal won't load, and you fall back to your iPhone's Personal Hotspot. Three hours later, your eSIM data plan is at 4.2 GB out of 5. You opened a browser, sent some Slack messages, and wrote a few paragraphs. Nothing should have eaten 4 GB. Something did. Tracking iphone tether bandwidth on a mac is mostly about figuring out which "something."

The good news: macOS already has the wiring to show you. You just need to know which interface to look at and which app you're seeing.

How macOS sees your iPhone tether

When you turn on Personal Hotspot and connect your Mac, macOS adds a new network interface. It doesn't announce itself loudly — it just appears alongside your normal Wi-Fi (en0) and Ethernet (en1 or similar).

The tether interface is usually en6 or en7 on modern Macs, but the number isn't guaranteed. It depends on what other USB and virtual interfaces you have. The reliable way to identify it:

networksetup -listallhardwareports

Look for "iPhone USB" or a hardware port whose device begins with en followed by a higher number than your built-in Wi-Fi. If you tether over Wi-Fi instead of USB, the connection still goes over en0 (your Wi-Fi interface) — there's no separate interface, just a different SSID.

Why the interface matters

Tools that monitor bandwidth fall into two camps: per-interface and per-process. Per-interface tools (Activity Monitor's Network tab, sort of, and CLI tools like nettop) tell you "this interface moved 2 GB" but not which app moved it. Per-process tools tell you "Slack used 80 MB" but not which interface that traffic went over.

For tethering specifically, you want both. You want to know "I used 4 GB on the tether interface" and "of that, Chrome was 3.1 GB and a system process was 600 MB."

Where the data actually went — common culprits

A few processes are notorious for quietly chewing through hotspot data when they shouldn't:

• iCloud Photos. If your Mac is the primary library and you took photos that day, the moment you connect to any network it starts uploading. Even on Low Data Mode it'll do small chunks.
• Time Machine to a network destination. Yes, really. If you have a network Time Machine target and it's reachable through the tether (rare but possible), it'll happily back up over your phone.
• App Store and macOS updates. A 4 GB Xcode update doesn't care that you're tethered.
• Dropbox / Google Drive / OneDrive. All three can re-upload files if the previous session didn't complete cleanly.
• Browser tabs. A YouTube tab left open in the background autoplaying related videos for an hour is 1+ GB of unplanned data.
• Slack and Zoom. Voice and video calls obviously, but also background sync of channel history.

The fix isn't to disable all of these. It's to know which ones triggered, when, and how much.

Making the tether use Low Data Mode

macOS treats Personal Hotspot as a metered connection by default, which enables Low Data Mode automatically. Low Data Mode tells well-behaved apps to:

• Pause iCloud sync of large items.
• Defer iCloud Photos uploads.
• Reduce auto-update activity.
• Stop auto-playing video previews in the App Store.

Apps don't have to honor it. Apple's own apps generally do. Third-party apps are a coin flip. To verify Low Data Mode is on for your hotspot:

1. Open System Settings → Wi-Fi (or Network).
2. Click "Details" on the hotspot connection.
3. Confirm "Low Data Mode" is on.

For USB tethering, the flag is on the iPhone USB interface in the Network preference pane.

Watching iphone tether bandwidth on mac in real time

Once the tether interface is up, the practical question is "what is using my hotspot right now?" The macOS-built-in answer is nettop from the terminal:

nettop -P -n -m route

That gives you per-process traffic broken down by route, which roughly maps to interface. It's noisy and hard to read live, but it works in a pinch.

A more sustainable answer is a menu bar tool that shows live rates with per-app attribution. ova sits next to the clock and shows current upload and download with the apps responsible. When you connect to your hotspot and the rate doesn't drop to near-zero like you'd expect, you can click the icon and see which app is still active.

A real travel scenario

Last summer, on an eSIM plan with a 10 GB monthly cap, a typical day looked like this:

• Morning, hotel Wi-Fi works: nothing on the tether.
• 11 AM, switching to a coworking space, hotel Wi-Fi drops out: tether on, USB connected.
• 11:00-11:15: 240 MB consumed. Slack syncs catch-up history (~30 MB), Chrome reloads tabs (~80 MB), iCloud Photos starts uploading yesterday's photos (~100 MB), Mail downloads attachments (~30 MB).
• 11:15-12:30: 1.1 GB consumed. Most of that is iCloud Photos finishing yesterday's set. Some is a Zoom call (~400 MB for 25 minutes).
• 12:30: turn off iCloud Photos, set Dropbox to paused. Traffic drops to a trickle.
• 12:30-17:00: 200 MB total — browsing, email, Slack messages.

Without monitoring, the day reads as "I used 1.5 GB, that seems like a lot but maybe it's fine." With monitoring, the answer is "iCloud Photos was 1.1 GB of the 1.5 GB, and I could have prevented all of it by toggling Photos off before connecting."

Travel-ready bandwidth visibility

A 3 MB menu bar app that shows live rates and history per app — local, no account, no cloud.

Download for macOS

A pre-flight checklist

Before you tether, run through this:

1. Pause iCloud Photos. Photos → Settings → iCloud → uncheck for the duration of the tether.
2. Pause Dropbox / Google Drive / OneDrive. Each has a one-click pause in its menu bar item.
3. Quit unused browser tabs. A YouTube or Twitch tab left open is a slow leak.
4. Disable auto-update on the App Store. App Store → Settings → uncheck "Automatic Updates" for the trip.
5. Confirm Low Data Mode is on for the tether.
6. Check your bandwidth monitor for any unexpected activity before you start working.

This takes a minute and saves you from realizing at 4 PM that Adobe Creative Cloud just downloaded a 2 GB update.

Identifying interface usage by source

If you want to be precise about which interface a process is using — for example, to confirm that Time Machine is not sneaking out over the tether — lsof is the tool:

lsof -i -n -P | grep -i <process-name>

This lists open network connections per process with their interface and remote endpoint. You can see whether a process is talking to a host over en0 (your Wi-Fi) or en6 (the iPhone USB).

For ongoing visibility, a per-app monitor with history is faster. The point of lsof is to answer a one-time question. The point of a menu bar tool is to never have to ask in the first place.

When the iPhone is your only connection

A few situations where understanding tether bandwidth really matters:

• Long-haul travel with a country-specific eSIM that's expensive after the cap.
• Conferences where the venue Wi-Fi is unusable and everyone falls back to phone hotspot.
• Field work in places with no fixed connectivity.
• Outages when your home or office internet drops and you need to keep working.

In all of these, the first thirty seconds after connecting to the hotspot determine the next several gigabytes. If iCloud Photos starts uploading your last weekend, you've already lost. If you turn it off proactively and only let necessary traffic through, you can get a full workday on a 1-2 GB budget.

Wrapping up

Tethering to an iPhone makes your Mac's invisible bandwidth visible — because suddenly every megabyte costs something. Identify the tether interface (en6 or en7 for USB, en0 for Wi-Fi tether), confirm Low Data Mode is on, pause heavy syncs before you connect, and keep a menu bar bandwidth monitor open so you can spot anomalies in real time.

Install ova, connect the cable, and watch what your Mac actually does on a metered link. Most of the time the surprises are the same three apps. Once you know which ones, the next trip is uneventful.