In this video you can see a mac dowsing the lan with a couple tools. First left is "Little Snitch", a proprietary software that shows what the client machine is doing. The one on the right is Dowse to Gource, that shows what the whole lan is doing in real time fetching data from the dowse.it routing box. Below you can see a instance of node red banging in the messages from dowse and the works on the dowse web interface.

As you can see some strange dns activity is giving out the presence of a malware on the mac client.

After I had to run a proper antivirus check ;)