Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I installed LittleSnitch on my Mac to monitor my network activity.

But now I'm worried that maybe LittleSnitch itself is sending my data to some bad dude.

Is there another program I could install to monitor LittleSnitch and make sure it's only doing what it's supposed to do?

share|improve this question
5  
Quis custodiet ipsos custodes? –  caliban Oct 3 '09 at 19:00

5 Answers 5

up vote 3 down vote accepted

You can always use Network Monitor Sidekick to check on outbound and inbound traffic. Essentially, whatever goes out is allowed by LittleSnitch. Identifying the nature of the data and resolving the destination IP addresses is another matter altogether.

However, I would just like to add this: If you are really worried LittleSnitch has been corrupted, etc, why not just delete the app, along with its preferences, etc, and re-download and install fresh from the web itself?

share|improve this answer

try the famous wireshark network sniffer, then you will see whats flying thru your fibers...

share|improve this answer
    
Great idea. If that's not good enough, build a tap cable, buy a network tap, or see if your switch already has built-in monitoring features (on many managed switches, you can designate one port to monitor another) — then run Wireshark on another computer. –  Sidnicious Oct 3 '09 at 20:21
    
Isn't this a bit too much? –  alex Oct 3 '09 at 20:44
1  
@alex: depends on individual judgment of risks involved. BTW, I wouldn't run wireshark on the computer that is thought to run malware. A simple linux box router with two ethernet cards would be more trustworthy way to diagnose this situation. –  Tadeusz A. Kadłubowski Oct 4 '09 at 18:48

Let me mention that even Little Snitch (or your firewall program) is not capable of faking a server for HTTPS connections (because your browser or OCSP has the certain chain). So whatever data they could manage to send to a bad dude are useless even, because the bad dude doesn't have the server certificate.

This leads to my next question, which is: can a Firefox extension make fake certificates show up as good? I doubt it. But a hacked firefox... hmmm... that could be a worry-point.

Anyway, of course the answer is a network sniffer, but it'd have to be on another computer to be sure that the bad dudes at Little Snitch (ironically, the only software a software pirate actually has to buy) haven't thought about your sniffer too :)

share|improve this answer

You can use NetBarrier or Wireshark to monitor network activity and block certain applications.

For what it's worth, I use Little Snitch and have had no problems with it. I don't think it's sending data to other people.

share|improve this answer

If it were doing anything bad don't you think it would have been outed by someone after all these years on the market?

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.