You can stop traffic capture by pressing Control-C in Terminal on the keyboard. Packet Captureīy Control-clicking/right-clicking on any app name itself in the app list, you can also select 'Capture Traffic' from the popup menu which launches the macOS Terminal and asks you to approve the Little Snitch command-line tool which is used to capture network traffic in manner similar to Wireshark. There's also a network traffic graph at the bottom of the connections pane. Single-clicking any sub-domain shows just those connections. Single-clicking any domain in the connections list zooms the map out to show just the connections to that domain.

One of the biggest benefits of the app/connections list is that you can view all connections to all domains a given app is making - in real time: the connections resort themselves in the list as they are made, and you can search for domains and subdomains using the Search bar at the top of the connections pane. You can also edit Rules for any connection, toggle approve/deny mode, or remove it from the list by Control-clicking or right-clicking on any connection, or on an app in the list itself. You can also Option-click any app's disclosure arrow to expand or collapse the full list of connections.Įach domain and subdomain in each app listed has an 'x' and a check box next to it and you can turn monitoring of each connection on or off by clicking either button.

Clicking any of the domain's disclosure arrows list all subdomains for that connection. Oddly, the main window's standard macOS zoom and minimize buttons have been removed and have been replaced with a single button which toggles whether or not the window floats above all others on the Desktop.Ĭlicking any disclosure arrow next to an app in the app list reveals a list of all the domains that app has made connections to. Clicking anywhere else on the map resets all the window's panes and map to full data for all apps.

Little snitch 5