Little Snitch CLI

Control Little Snitch network monitor/firewall on macOS.

Setup

Enable CLI access in Little Snitch → Preferences → Security → Allow access via Terminal

Once enabled, the littlesnitch command is available in Terminal.

⚠️ Security Warning: The littlesnitch command is very powerful and can potentially be misused by malware. When access is enabled, you must take precautions that untrusted processes cannot gain root privileges.

Reference: https://help.obdev.at/littlesnitch5/adv-commandline

Commands

Examples

View Recent Logs (no root)

littlesnitch log --last 10m --json

Stream Live Logs (no root)

littlesnitch log --stream

Check License Status (no root)

littlesnitch restrictions

Activate Profile (requires root)

sudo littlesnitch profile --activate "Silent Mode"

Deactivate All Profiles (requires root)

sudo littlesnitch profile --deactivate-all

Enable/Disable Rule Group (requires root)

sudo littlesnitch rulegroup --enable "My Rules"
sudo littlesnitch rulegroup --disable "Blocklist"

View Traffic History (requires root)

sudo littlesnitch log-traffic --begin-date "2026-01-25 00:00:00"

Stream Live Traffic (requires root)

sudo littlesnitch log-traffic --stream

Backup Configuration (requires root)

sudo littlesnitch export-model > backup.json

Log Options

Notes

• macOS only
• Many commands require sudo (root access)
• Profiles: predefined rule sets (e.g., "Silent Mode", "Alert Mode")
• Rule groups: custom rule collections and blocklists