opensnitch-ebpf-modules1

Overview

opensnitch-ebpf-modules provides the eBPF kernel modules to intercept network connections. It offers better performance and reliability.

The modules are installed under /usr/lib/opensnitchd/ebpf/

Known bugs

When coming back from suspend state, the eBPF modules stop working.

The only solution for now is to restart the daemon when the computer wakes up:

https://github.com/evilsocket/opensnitch/blob/master/utils/scripts/restart-opensnitch-onsleep.sh