This might be nothing, but it seems a bit strange nonetheless. When I start the ipfs daemon, IPFS turns up in the Little Snitch network monitor as "iTerm via ipfs" (obviously I'm using iTerm2). Sometimes, however, it's different, maybe when there are background scripts doing something network-wise: I'm sometimes reading IPFS as "ping via ipfs", "nc via ipfs", "dig via ipfs" etc.
Is anyone else experiencing this behavior? And is there anything to it?