Smart Home & IoTDocumentedScanned

little-snitch

Little Snitch firewall control on macOS.

Share:

Installation

npx clawhub@latest install little-snitch

View the full skill documentation and source below.

Documentation

Little Snitch CLI

Control Little Snitch network monitor/firewall on macOS.

Setup

Enable CLI access in Little Snitch → Preferences → Security → Allow access via Terminal

Once enabled, the littlesnitch command is available in Terminal.

⚠️ Security Warning: The littlesnitch command is very powerful and can potentially be misused by malware. When access is enabled, you must take precautions that untrusted processes cannot gain root privileges.

Reference:

Commands

CommandRoot?Description
--versionNoShow version
logNoRead log messages
profileYesActivate/deactivate profiles
rulegroupYesEnable/disable rule groups & blocklists
log-trafficYesPrint traffic log data
list-preferencesYesList all preferences
read-preferenceYesRead a preference value
write-preferenceYesWrite a preference value
export-modelYesExport data model (backup)
restore-modelYesRestore from backup
capture-trafficYesCapture process traffic

Examples

View Recent Logs (no root)

littlesnitch log --last 10m --json

Stream Live Logs (no root)

littlesnitch log --stream
littlesnitch restrictions

Activate Profile (requires root)

sudo littlesnitch profile --activate "Silent Mode"

Deactivate All Profiles (requires root)

sudo littlesnitch profile --deactivate-all

Enable/Disable Rule Group (requires root)

sudo littlesnitch rulegroup --enable "My Rules"
sudo littlesnitch rulegroup --disable "Blocklist"

View Traffic History (requires root)

sudo littlesnitch log-traffic --begin-date "2026-01-25 00:00:00"

Stream Live Traffic (requires root)

sudo littlesnitch log-traffic --stream

Backup Configuration (requires root)

sudo littlesnitch export-model > backup.json

Log Options

OptionDescription
--last [m\|h\|d]Show entries from last N minutes/hours/days
--streamLive stream messages
--jsonOutput as JSON
--predicate Filter with predicate

Notes

  • macOS only
  • Many commands require sudo (root access)
  • Profiles: predefined rule sets (e.g., "Silent Mode", "Alert Mode")
  • Rule groups: custom rule collections and blocklists