On 28/12/2009, at 11:55 AM, Geoff Beier wrote: >> Little Snitch, at least, would notify whether you used port 80 or port >> rand()%10000... it allows/denies both per-app and per-port. >> > > It would also notify if you spawned off something like ntpd. The user > would see a prompt like "deviousapp wants to connect to > bla.example.com port XXX using ntpd."
This is exactly what happens. Ambrosia products like Snapz Pro connect to an NTP server and they definitely trigger Little Snitch. -- Rob Keniger
