4 Pop ups dialogs

wiki auto updater edited this page 2023-03-05 20:23:11 +00:00

Table of Contents

• Advanced view

Whenever a process wants to establish a new connection, OpenSnitch will prompt you to allow or deny it.

Fields meaning:

1. The name of the executable.
2. The command that the user typed.
3. The path to the executable.

Notes:

• All the options are configurable from the Preferences dialog (the timeout, target, etc).
• Clicking on the [+] button stops the countdown on versions <= v1.5.x. On versions >= v1.6.x clicking anywhere of the pop-up will stop the countdown.
• If the user typed the absolute path to the binary, then the 3rd field is not displayed.
• If the typed command equals to the name of the binary (like in curl -L http://..), the 1st and 2nd executable name will be equal. It seems logical, but in some cases as the one shown in the screenshot, it's not always the case (for example telnet use to be a symbolic link pointing to telnet.netkit, and nc to `nc.openbsd).
• If the text of a field is too large to fit in the window, 3 dots are added to the end of the text ( ) . Place the cursor over the text to see all the text.

Extra note:

• Notice in the screenshot above that the[+] icon has the focus. Use the arrow keys ⬅️ ➡️ to quickly select Accept or Deny.

You can also select and copy the text of the fields:

Advanced view

By clicking on the [+] button, you can display the advanced view, where you can select more connection fields to block:

1. Installation
   1. Dependencies and how it works
2. Getting started
   1. Events window
      1. Themes
   2. Process monitor dialog
   3. Pop-up dialogs
3. Configuration
   1. Monitor method: audit
   2. Monitor method: eBPF
   3. Rules
      1. Best practices
   4. Rules editor
      1. Rules examples
   5. System rules
      1. System rules legacy
   6. Block lists, ads|malware|...
   7. Nodes
      1. Authentication
      2. Configuration examples
      3. Generating TLS certificates
   8. SIEM integration
      1. Grafana + Loki + Promtail
      2. ElasticSearch + LogStash + Kibana
4. Compilation
   1. Cross-compilation for arm
   2. Building packages with pbuilder
5. GUI translations
   1. Adding, updating and installing translations
6. FAQs and common errors
   1. Known problems
      1. GUI known problems
      2. daemon known problems
      3. General
   2. FAQs
   3. Why OpenSnitch does not intercept application XXX
7. Examples OpenSnitch in action

Please help us make this wiki better.

How to submit changes: https://github.com/evilsocket/opensnitch/blob/wiki/README.md