I Had a Lot of Fun Building a Linux Packet Flight Recorder

I built skbx to follow packets through the Linux kernel, preserve what it observed, and replay the evidence later without root.