Sloth is a Mac application that displays all open files and sockets in use by all running processes on your system. This makes it easy to inspect which apps are using which files and sockets.
- View all open files, directories, IP sockets, devices, Unix domain sockets and pipes
- Filter by name, access mode, volume, type, location, or using regular expressions
- Sort by name, process ID, user, etc.
- View IP socket status, protocol and version
- View sockets and pipes established between processes
- Inspection window with detailed macOS and Unix file/socket/process info
- Powerful contextual menu for file operations
- In-app authentication to run with root privileges
- Fast, responsive native app written in Objective-C/Cocoa
Sloth is essentially a friendly, exploratory graphical user interface built on top of the lsof command line tool. The output of lsof is parsed and shown in a searchable, filterable outline view with all sorts of convenient additional functionality. Check out the screenshots below.
Sloth is free, open source software and has been continuously developed and maintained for a very long time (since 2004). If you find this program useful, please make a donation.
- ⇩ Download Sloth 2.8.1 (~0.7 MB, Intel 64-bit, macOS 10.8 or later)
Sloth can also be installed via Homebrew (may not be latest version):
$ brew cask install sloth
Sloth can be built using a reasonably modern version of Xcode via the xcodeproj or by running the following command in the repository root:
make
Built products are created in products/.
- Fixed potential crash bug introduced in version 2.8.
- New Dark Mode friendly template icons for Mojave
- Multiple items can now be selected and copied
- Info Panel now shows which processes are connected to each other via unix pipes & domain sockets
- Info Panel now also shows file system info such as device name & inode
- Cmd-L menu action to show selected item
- Minor performance improvements
- Sparkle update framework now has Mojave Dark Mode-compatible appearance
- No longer shows hidden volumes in Volumes filter
- Fixed issue with mangled process names
- Fixed issue with pipe icon on non-retina displays
- Fixed minor memory leak
- More graceful error handling when file descriptor lookup fails in lsof
- Info Panel now shows file Uniform Type Identifier
- Fixed crash bug on macOS 10.9 and earlier
- Various minor bug fixes and interface improvements
- New and improved contextual menu
- Fixed quirks with macOS Mojave's "Dark Mode"
- Various user interface improvements
- Fixed critical lsof output parsing bug introduced in 2.4
- New "Authenticate on launch" option in Preferences
- Various minor interface refinements
- Now defaults to showing Mac-friendly process names (e.g. "Safari Web Content" instead of "com.apple.WebKit.WebContent")
- Unix process names no longer truncated to 32 characters
- Search filter can now be used to filter by IP protocol (e.g. TCP or UDP) or IP version (e.g. IPv4 or IPv6)
- Now shows TCP socket state (e.g. LISTEN, ESTABLISHED) in list and Info Panel
- Info Panel now shows file descriptor integer
- Info Panel now shows additional info for character devices
- Info Panel now shows Carbon Process Serial Number (PSN) for processes, if available
- Much improved IPv6 socket handling
- DNS to IP and port name resolution in Info Panel when DNS/port lookup enabled in Prefs
- Minor user interface enhancements
- Now supports access mode filtering (e.g. read, write, read/write)
- Search filter now also filters by PID
- DNS and port name lookup for IP Sockets in Info Panel
- Info Panel now identifies standard I/O stream character devices
- New Search Filter menu with case sensitivity and regex options
- New application icon
- Fixed bug where Volumes filter wouldn't work
- Minor interface improvements
- Now defaults to excluding process binaries, shared libraries and current working directories in listing
- DNS and port name lookup now disabled by default for faster execution (can be enabled in Preferences)
- Info Panel now displays file access mode and process owner
- New sort option: User ID
- Info Panel now shows IP socket protocol and version
- New Preferences window
- New high-resolution pipe and socket icons
- Fixed bug where sort settings were not respected on launch
- Copying a file path now creates a file representation in clipboard in addition to text
- File paths are now red in colour if selected file does not exist at path
- Uniform Type Identifier now used to identify app bundles instead of .app suffix
- Fixed issue with Info Window's handling of moved or non-existent files
- Minor interface refinements
- New Volumes filter
- New "Sort By" submenu under View in main menu
- Sorting by PID now correctly does numerical sort instead of alphabetic
- Files can now be dragged and dropped
- Cmd-F now focuses on filter field
- File representations can now be copied to the clipboard
- Cmd-double-click now reveals file in Finder
- Fixed various minor user interface bugs
- Fixed collapse all bug with Info Panel open
- New compact interface size option
- Fixed broken permissions display for non-bundle processes in Info Panel
- Sloth is now code-signed
- QuickLook now works from the Info panel
- Minor user interface improvements
- New Info Panel for items
- Minor UI changes
- Asynchronous refresh
- Much improved performance
- UI improvements
- New filtering options
- Smarter regex filtering
- Load results as root without relaunching application
- Expanded sorting options
- Migrated project to ARC, modern Objective-C and Xcode 7
- Substantial rewrite
- Now requires OS X 10.8 or later
- Column sorting, column rearrangement
- Several bug fixes
- Copy/drag and drop selected items
- Regular expressions in search filter
- New "Relaunch as root" option
- Fixed bug in Mac OS X 10.5
- Now built for Mac OS X 10.4 or later
- Released as a Universal Binary
- Live update for search filter
- Sorting by column now works
- Performance improvements
- Lots of code replaced by Cocoa bindings thanks to Bill Bumgarner
- Filter search field now tries to match all fields when filtering
- Added auto-refresh timer option
- lsof binary and kill signal type can now be set in Preferences
- New application icon
- Added Icelandic and Japanese localizations
- Added search filter.
- New Action menu with menu items and shortcuts for button actions
Copyright (C) 2004-2020 Sveinbjorn Thordarson <sveinbjorn@sveinbjorn.org>
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
-
Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
-
Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
-
Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The Sloth application icon is copyright (C) Drífa Thoroddsen.