Ticket Options
Question Details
TICKET ARCHIVE -> "little Snitch" And Sherlock
neilNorman - Oct 10, 2005 - 1:31 pm
I Installed "Little Snitch" on my computer (iMacG4, OS10.4.2) and after activating it Sherlock would not function.
Experimenting on my backup drive, I have determined that if I remove Sherlock from the LittleSnitch preference panels settings, Sherlock works ok.
How do I reinstall the latest version of Sherlock (only) on my main drive?
thanks,
Neil
Experimenting on my backup drive, I have determined that if I remove Sherlock from the LittleSnitch preference panels settings, Sherlock works ok.
How do I reinstall the latest version of Sherlock (only) on my main drive?
thanks,
Neil
ora - Oct 11, 2005 - 1:14 pm
Hi Neil,
You should be able to install just Sherlock form your system disks using a utility called Pacifist (see http://www.charlessoft.com/ ), which extracts parts of pkg and mpkg files (which is what Apple tend to use).
Download the version appropriate for your system, put the first OS X install disk in the drive and launch Pacifist. Wait for the registration reminder to go away (or pay if you like the software). Then hit "Open OSx Install Packages". It will ask for all the install disks in order to scan them, then finally ask for the first one
When it finishes loading, go to "Contents of EssentialSystemSoftware", then "Contents of Essentials", then "Applications". Select "Sherlock" and hit install at the top. It will ask you for your password, then it should install nicely.
Let me know if you have any problems, and we'll try something else,
Regards,
Owen
--------
We are constantly trying to improve our service and provide a better user experience. Please take the time to give feedback on our service and it should be even better next time you need us
You should be able to install just Sherlock form your system disks using a utility called Pacifist (see http://www.charlessoft.com/ ), which extracts parts of pkg and mpkg files (which is what Apple tend to use).
Download the version appropriate for your system, put the first OS X install disk in the drive and launch Pacifist. Wait for the registration reminder to go away (or pay if you like the software). Then hit "Open OSx Install Packages". It will ask for all the install disks in order to scan them, then finally ask for the first one
When it finishes loading, go to "Contents of EssentialSystemSoftware", then "Contents of Essentials", then "Applications". Select "Sherlock" and hit install at the top. It will ask you for your password, then it should install nicely.
Let me know if you have any problems, and we'll try something else,
Regards,
Owen
--------
We are constantly trying to improve our service and provide a better user experience. Please take the time to give feedback on our service and it should be even better next time you need us
neilNorman - Oct 11, 2005 - 7:00 pm
thankyou Owen,
I used "Pacifist" and was able to re-install "Sherlock". Thanks for telling me about this useful little app.
neil
I used "Pacifist" and was able to re-install "Sherlock". Thanks for telling me about this useful little app.
neil
ora - Oct 13, 2005 - 12:10 pm
Glad to hear it! I've used Little Snitch for some years, and not had any problems, though i don't use sherlock. If you need any other help just let me know,
Owen
--------
We are constantly trying to improve our service and provide a better user experience. Please take the time to give feedback on our service and it should be even better next time you need us
Owen
--------
We are constantly trying to improve our service and provide a better user experience. Please take the time to give feedback on our service and it should be even better next time you need us
neilNorman - Oct 13, 2005 - 8:11 pm
Owen,
actually I have discovered another possible problem: When removing Sherlock from the Network "Rules" on the "Little Snitch" preference pane, I removed the following apple system rules by mistake.
"slpd" : "Deny any connection" and
"slpd": "allow UDP to local network
I thought they were related to Sherlock, but apparently they are "Service location protocols" that are default settings by the OS.
I have used Spotlight to try and find where the rules are located (Searched another system installation) so that I could try and "put them back", but could not find them.
I know so little about the "underpinnings" of the Network function that I have no idea how to proceed or even if this problem is serious for a security standpoint. So far I do not see any consequences with the functionality of my computer/software.
I doubt re-installing OS10.4.2 update would include these items, and I don't think that I could re-install OS 10.4 (basic orginal version) and then installing the revisions, as I don't think that I can install a "earlier version" of the system (can I ?)
any insight or advise you could give me, would be most appreciated.
neil
actually I have discovered another possible problem: When removing Sherlock from the Network "Rules" on the "Little Snitch" preference pane, I removed the following apple system rules by mistake.
"slpd" : "Deny any connection" and
"slpd": "allow UDP to local network
I thought they were related to Sherlock, but apparently they are "Service location protocols" that are default settings by the OS.
I have used Spotlight to try and find where the rules are located (Searched another system installation) so that I could try and "put them back", but could not find them.
I know so little about the "underpinnings" of the Network function that I have no idea how to proceed or even if this problem is serious for a security standpoint. So far I do not see any consequences with the functionality of my computer/software.
I doubt re-installing OS10.4.2 update would include these items, and I don't think that I could re-install OS 10.4 (basic orginal version) and then installing the revisions, as I don't think that I can install a "earlier version" of the system (can I ?)
any insight or advise you could give me, would be most appreciated.
neil
ora - Oct 16, 2005 - 5:54 am
Hi neil,
Sorry it took me a couple of days to get back to you, busy work times.
Anyway, I have those same rules, actually in duplicate it seems, I'm pretty sure that the easiest thing to do is reinstall little snitch. I believe that the installer also has a de-install option that should get rid of all the necessary files. Then reinstall and you should be fine, though you may have to allow and deny a few applications again. I wouldn't try to reinstall the system yet anyway.
I don't think you can put the rule back in yourself, as slpd is storied in /usr/sbin, which is a hidden file by default so you can't see it in the dialogue box used to specify applications.
The rules are stored in the little snitch preference files i believe, in [YourUserFolder]/Library/Applications Support/Little Snitch and [YourUserFolder]/Library/Preferences/at.obdev.LSD.plist . These _should_ be removed by the deinstaller, but if not you can delete them manually.
I'm afraid i'm not enough of a network guy to know the effect of removing the sldp rules, but if it tries to access the network, little snitch should flash up its normal dialogue telling you about it until you choose to allow or deny it, so i wouldn't worry too much.
Finally, as to why you had the Sherlock problem in the first place, i have had a thought. Little Snitch is generally used for blocking and permitting third party applications which independently try and access the network, rather than blocking applications that install with the system. Perhaps Sherlock had troubles as it accessed another system component that was already blocked. In this case its probably just something the little snitch author hasn't noticed, but maybe its worth checking you have the latest version of little snitch.
Hope this helps,
Owen
--------
We are constantly trying to improve our service and provide a better user experience. Please take the time to give feedback on our service and it should be even better next time you need us
Sorry it took me a couple of days to get back to you, busy work times.
Anyway, I have those same rules, actually in duplicate it seems, I'm pretty sure that the easiest thing to do is reinstall little snitch. I believe that the installer also has a de-install option that should get rid of all the necessary files. Then reinstall and you should be fine, though you may have to allow and deny a few applications again. I wouldn't try to reinstall the system yet anyway.
I don't think you can put the rule back in yourself, as slpd is storied in /usr/sbin, which is a hidden file by default so you can't see it in the dialogue box used to specify applications.
The rules are stored in the little snitch preference files i believe, in [YourUserFolder]/Library/Applications Support/Little Snitch and [YourUserFolder]/Library/Preferences/at.obdev.LSD.plist . These _should_ be removed by the deinstaller, but if not you can delete them manually.
I'm afraid i'm not enough of a network guy to know the effect of removing the sldp rules, but if it tries to access the network, little snitch should flash up its normal dialogue telling you about it until you choose to allow or deny it, so i wouldn't worry too much.
Finally, as to why you had the Sherlock problem in the first place, i have had a thought. Little Snitch is generally used for blocking and permitting third party applications which independently try and access the network, rather than blocking applications that install with the system. Perhaps Sherlock had troubles as it accessed another system component that was already blocked. In this case its probably just something the little snitch author hasn't noticed, but maybe its worth checking you have the latest version of little snitch.
Hope this helps,
Owen
--------
We are constantly trying to improve our service and provide a better user experience. Please take the time to give feedback on our service and it should be even better next time you need us
IF THIS IS YOUR QUESTION AND YOU WISH TO RESPOND, LOGIN HERE FIRST.
