[Pijgn] > With the default setting to use eBPF monitoring, the option to 'Debug > invalid connections' has no effect unless > /etc/opensnitchd/opensnitch.o exists.
I believe this is a misunderstanding. Even if the default setting is ebpf, it will fall back to using proc when it fail to find the ebpf module. > If these changes are small enough to eventually include in bookworm > then it would definitely be worth patching. I believe upstream would be pleased with help with this even if it do not make it into bookworm. -- Happy hacking Petter Reinholdtsen
