picosnitch VS tiny-snitch

Yep, and from my experience too (made a tool that monitors network traffic with eBPF [1]) in addition to those issues there is also a sizable latency hit.

[1] https://github.com/elesiuta/picosnitch

Similar to bandwhich, I recently created a snap of my own bandwidth monitor, picosnitch [1]. However I was only able to get it working with classic confinement (so it can't be published on the store) due to there being no snap interfaces for fanotify or BPF kfuncs.

I already packaged it for nearly every distro, but unfortunately most don't have dash [2] in their repos so the user needs to install it separately, and I was hoping that snap would be an easier solution for that.

[1] https://github.com/elesiuta/picosnitch/blob/master/snap/snap...

[2] https://repology.org/project/python:dash/versions

I created picosnitch which can do this

If you're still having this issue, you can try picosnitch (I recently made it available in copr).

You can use picosnitch for this, I'm the developer and this is exactly the use case I had in mind when designing it (24/7 monitoring of traffic on a per executable basis, primarily in containerized environments).

I wrote picosnitch [1] which has the same notification and bandwidth monitoring features, however it doesn't block traffic for a couple reasons: avoiding scope creep so I can focus on more reliable detection and do things like hash every executable, which makes it harder to block traffic in a timely fashion.

https://github.com/elesiuta/picosnitch

I also wrote a program (picosnitch) which is newer than that list and has a bunch of features none of those other tools have, in case you're interested in checking it out!

which basically says launchpad builds the package directly from that repository, which states: This repository is an import of the Git repository at https://github.com/elesiuta/picosnitch.git.

picosnitch - monitors and hashes programs that connect to the internet, and can check them with VirusTotal.

For Linux, I created picosnitch which does exactly what you're looking for.

i use a kind of tui. it is actually a gui, pops up fullscreen. you can’t click it though, just keypress interaction.

i agree with you. especially if i’m filtering all traffic, i need to be able to y/n quickly and easily.

https://github.com/nathants/tinysnitch#demo

the libnetfilterqueue setup i use locally is here: https://github.com/nathants/tinysnitch

> There isn't even a single decent dynamic firewall with those annoying popups.

even benign apps that phone home like pulumi and terraform are fun to see and block with annoying popups.

monitoring egress really is the only realistic play. i rolled my own[1], inspired by opensnitch[2].

netfilter_queue is really great, and definitely makes annoying popup dynamic firewalls possible.

1. https://github.com/nathants/tinysnitch