31–40 of 109 posts
I just want a single tool that has a known, generalized set of capabilities on just about every distribution. Systemd's obsession with remaking every single wheel in Linux has been aggravating enough. Please don't do it again.
Before systemd presented a generalised interface, there were significant differences in the init and service management systems between the popular Red Hat and Debian families of distros.
I just want a single tool that has a known, generalized set of capabilities on just about every distribution. Systemd's obsession with remaking every single wheel in Linux has been aggravating enough. Please don't do it again.
Ironic choice of example… Before systemd presented a generalised interface, there were significant differences in the init and service management systems between the popular Red Hat and Debian families of distros.
it's weird that both lsof and ss defaults are so awful Like, ss without any options shows such arcane, rarely needed details as send/receive queue size but not the application socket belongs to . And omits listening sockets which is main use for such tools. I know picking the right defaults is hard ask but they managed to pick all the wrong defaults.
I think the same applies for many of the new breed of command line applications like fd and ag/rg. Being able to use them intuitively trumps ubiquity, speed or features.
If used in scripts, ubiquity and speed can be important. Then again, the output of ss is not ideal for script processing.
Earlier quoted context omitted.
Tools like these aren't really intended for adversarial environments, and pure network tools that are designed for real adversaries have a really spotty track record (good search: [bro vantage point problem]).
That search did not come up with much. Can you elaborate?
https://www.icir.org/mallman/pubs/APT07/APT07.pdf
> The “SH” state indicates that the remote peer sent a SYN followed by a FIN—however, the monitor never recorded a SYN-ACK from the local peer. At first glance, this would seem to indicate a scanner that is trying to make connection attempts look as real as possible in the hopes of not triggering an alarm. However, such connections can also indicate a vantage point problem whereby the monitor is not observing outgoing traffic from some hosts. While in general the monitor placement at LBNL can observe both incoming and outgoing traffic, there were periods of time where the traffic for some LBNL hosts would partially bypass the monitor. From a measurement perspective this is clearly undesirable.
it's weird that both lsof and ss defaults are so awful Like, ss without any options shows such arcane, rarely needed details as send/receive queue size but not the application socket belongs to . And omits listening sockets which is main use for such tools. I know picking the right defaults is hard ask but they managed to pick all the wrong defaults.
I think the same applies for many of the new breed of command line applications like fd and ag/rg. Being able to use them intuitively trumps ubiquity, speed or features.
Another annoying part is not supporting json or even CSV. Some tools got modernized with it (like iproute2 tool set), but for these you might as well do /proc scraping yourself...
Earlier quoted context omitted.
I think the same applies for many of the new breed of command line applications like fd and ag/rg. Being able to use them intuitively trumps ubiquity, speed or features.
Depends on the use case. If used in scripts, ubiquity and speed can be important. Then again, the output of ss is not ideal for script processing.
I love the recent increase in TUI-based tooling. This looks cool - will check it out!
Are they as accessible as GUI though (genuine question) UI libraries have a lot of features for allowing people with disabilities to “read” and interact with the screen in efficient ways
Imagine if everything around us would be designed for blind people.
When I saw this headline I assumed it was Little Snitch an existing network monitor and firewall for Macs. Might need a different name. https://www.obdev.at/products/littlesnitch/index.html
When I saw this headline I assumed it was Little Snitch an existing network monitor and firewall for Macs. Might need a different name. https://www.obdev.at/products/littlesnitch/index.html
Wow that's so nice, would there be an equivalent for PC? (Windows or Linux)
2. Windows → https://www.glasswire.com/
3. Windows (open source) → https://github.com/henrypp/simplewall
4. Windows → https://safing.io/
Earlier quoted context omitted.
Wow that's so nice, would there be an equivalent for PC? (Windows or Linux)
1. Linux → https://github.com/evilsocket/opensnitch 2. Windows → https://www.glasswire.com/ 3. Windows (open source) → https://github.com/henrypp/simplewall 4. Windows → https://safing.io/