Re:macOS has checked app signatures online for over 2 years
by m463 on Thursday November 26, 2020 @01:56PM
(#25222664)
this is from observations of my own machines.
I would suggest you install little snitch, turn off everything, and then boot your machine. Maybe switch from ethernet to wifi and observe the kinds of popups you get.
Another method, though hard to associate with specific processes, would be to run tcpdump -i <interface>.
Sometimes it's more useful to run tcpdump and do a capture, then play it back later because DNS lookups by tcpdump itself make it more chatty than it should be. You could also run it with -n but you get less information.
I would suggest you install little snitch, turn off everything, and then boot your machine. Maybe switch from ethernet to wifi and observe the kinds of popups you get.
Another method, though hard to associate with specific processes, would be to run tcpdump -i <interface>.
Sometimes it's more useful to run tcpdump and do a capture, then play it back later because DNS lookups by tcpdump itself make it more chatty than it should be. You could also run it with -n but you get less information.