sniffglue

Uses a thread pool to parse network packets concurrently across all CPU cores, ensuring efficient utilization on multi-core systems, as highlighted in the project goals.

Implements seccomp syscall restrictions and privilege dropping with a configurable hardening file (/etc/sniffglue.conf), making it safe for untrusted networks, as detailed in the Security section.

Engineered to avoid crashes during packet processing, even with malformed input, supported by fuzzing tests (cargo-fuzz) to ensure reliability.

Can be built as a small Docker image (~11.1MB) for debugging container network setups, providing an easy way to deploy in isolated environments, as mentioned in the Docker section.