Little Snitch is a powerful firewall for the Mac operating system that can be used to monitor applications, prevent them, and allow them to connect to the network through advanced rules. Unlike other firewalls designed primarily to protect the system against external attacks by restricting internal traffic, Little Snitch software is designed to protect privacy by restricting external traffic.
The firewall controls network traffic by registering the kernel extension via the standard programming interface (API) provided by Apple. If a program or process tries to connect to the network, this firewall will prevent it from connecting. Monitoring this software allows you to view outbound traffic in real-time along with the domain name.
Features and Features of Little Snitch:
- Traffic profile history from the last hour, separate for each process, server, port, and protocol
- Display total amount of traffic, peak traffic consumption, average bandwidth, and so on
- Zoom variable from one hour to one minute
- Perform filter operations with process name, server, port, etc.
- Multipurpose grouping and sorting options
- Quickly show why a particular connection was allowed or not connected.
- View system events (start or end program) to see network activity
- A sign of denial of connections
- Record network traffic in PCAP format
- Save for analysis next time
- Firewall for input and output connections, automatic profile switch, off mode (future decision)
OS X Yosemite (10.10) and later, including macOS Sierra (10.12)