Tcc1's comments

Tcc1 | 5 years ago | on: EBPFSnitch: An eBPF based Linux Application Firewall

Why does this need nf_queue? Wouldn't it be sufficient to directly filter the connect syscalls using eBPF?

Dropping packets using netfilter makes many applications wait for a timeout. I prefer reject to filter unwanted outbound connections so that applications don't wait.

Tcc1 | 7 years ago | on: JSON with Sqlite

I especially like the aggregator functions, it allows to select an additional dimension of data.
page 1