Network Monitor

Little Snitch Network Monitor makes Internet connections visible. It shows which application, Unix command or system service (“process”) connects to which Internet server. It also shows where this Internet server is located geographically. And it records statistics for each connection: The amount of data transferred, data rates for the last hour, ports used, etc.

Overview

Network Monitor Window

The Network Monitor window consists of the following components:

Connections — A hierarchical list of connections that have occurred so far. The top most level lists only processes, apart from a folder that stores all macOS processes. For each process, you can view the domains it connects to by clicking the disclosure triangle and opening the level below it. The lowest level lists the names of the servers which were contacted. Connection statistics are stored “forever”, up to a configurable limit of total connections.
Search — You can perform a textual search in the connection list or apply other filters via a filter menu.
Toolbar — Contains buttons for quickly showing and hiding map and inspector.
Traffic — The Traffic Diagram shows the amount of data up- and downloaded per second, as a diagram over time. For each connection it contains a complete history of the last 60 minutes.
Map — Shows geographic locations for the servers in the list. Locations are derived from Internet addresses via a database obtained from MaxMind, Inc that ships with Little Snitch.
Learn more about the Map…
Inspector — Shows all the details we know about the selected connections: Internet addresses, other server names, code signature information, geographic location names and other statistics information. It also includes a Research Assistant, which can often explain the purpose of a process and its connections.
Learn more about Connection Inspector…