opensnitch/daemon
Gustavo Iñiguez Goia 2f1a9b8c9e
on errors stop established conns monitor
There's a long running task that monitors established connections every
~2s.

When a connection is not found via ebpf or proc, sometimes it's found
there so we can use the inode to search for the process.

However on some systems the netlink call to dump the sockets may fail
continuously, wasting resources. It'll also fail if you block connections
to port 0 (common case for ICMP packets).

So if there're too many errors dumpng the sockets, stop this task for
these cases.
2024-01-20 23:37:51 +01:00
..
conman getparents code reorganization 2023-10-04 00:58:17 +02:00
core strings concatenation improvements 2024-01-16 00:14:44 +01:00
data/rules Added sample rule to allow localhost connections 2023-07-23 22:30:49 +02:00
dns minor improvement/refactoring 2024-01-18 11:37:07 +01:00
firewall structs fields reorganized 2024-01-14 20:44:49 +01:00
log structs fields reorganized 2024-01-14 20:44:49 +01:00
netfilter structs fields reorganized 2024-01-14 20:44:49 +01:00
netlink allow to filter connections by process checksum 2023-09-22 00:36:26 +02:00
netstat strings concatenation improvements 2024-01-16 00:14:44 +01:00
procmon on errors stop established conns monitor 2024-01-20 23:37:51 +01:00
rule fixed typo 2024-01-15 20:45:17 +01:00
statistics strings concatenation improvements 2024-01-16 00:14:44 +01:00
ui allow to configure GC percentage 2024-01-18 00:01:58 +01:00
.gitignore daemon -> opensnitchd (ref #118) 2018-04-10 18:38:04 +02:00
default-config.json allow to filter connections by process checksum 2023-09-22 00:36:26 +02:00
go.mod go.mod: updated deps, minimum required go version 2023-10-23 20:50:24 +02:00
Gopkg.toml fix: calling ftrace probe Reset in order to start from a clean state (fixes #159) 2018-04-18 02:00:12 +02:00
main.go minor improvement/refactoring 2024-01-18 11:37:07 +01:00
Makefile daemon/Makefile: improvements to make distro packaging easier (#780) 2022-12-21 10:35:52 +01:00
opensnitchd-dinit Add files via upload 2023-06-17 23:56:58 +02:00
opensnitchd-openrc feat(daemon): add OpenRC script 2023-04-02 02:33:40 +02:00
opensnitchd.service Replace docs link in opensnitchd.service 2023-02-09 20:56:29 +00:00
system-fw.json added icmp destination-unreachable to system-fw.json 2023-07-26 11:40:17 +02:00