opensnitch VS ebpfsnitch

Can't forget about OpenSnitch, for those of you that would rather not buy a license to do this sorta thing: https://github.com/evilsocket/opensnitch

I was working on an old game; trying to understand its Network protocol, and how the binary behavior when something on the connections goes wrong, and something comes to my mind: "What if I could block the traffic to this server only for this process?" what brings me to OpenSnitch.

Have you seen OpenSnitch? https://github.com/evilsocket/opensnitch

It's a Linux project that's replication what Little Snitch does on macOS - it doesn't decrypt TLS secured data but it does show and allow blocking of network connections (even if it can't see exactly what's going on inside this connections).

Combining eCapture features with OpenSnitch would be awesome. It'd be great if as well as tracking all network connection, you could flag connections sending specific data (like your name, email address, or phone number) to unexpected servers.

opensnitch has existed for a while now. I've never used it, so I can't comment on how well it works.

https://github.com/evilsocket/opensnitch

If you prefer a GUI try https://github.com/evilsocket/opensnitch

Doesn't look like it's updated any more but there is eBPFSnitch

There is a sort of opensnitch based on ebpf but not sure is fully feature completed as you intended:

https://github.com/harporoeder/ebpfsnitch